Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 7,960 stories synthesized.
Proof-of-concept exploit code has been released for a critical 16-year-old heap buffer overflow vulnerability in NGINX that could allow for denial-of-service or remote code execution.
Microsoft has published a deep-dive analysis of Kazuar, the modular peer-to-peer botnet used by Russian state actor Secret Blizzard for espionage against government and diplomatic targets in Europe and Central Asia.
A months-long espionage campaign targeting Asia-Pacific and Japan networks uses an updated FDMTP backdoor (v3.2.5.1) delivered via CDN-impersonating domains and DLL sideloading, linked to China-aligned group Mustang Panda.
A new Linux kernel local privilege escalation vulnerability dubbed 'Fragnesia' (CVE-2026-46300) was accidentally introduced by the patch for the Dirty Frag bugs, with a public PoC already available for Ubuntu systems.
Electronics manufacturing giant Foxconn confirmed a cyberattack disrupted some of its North American factories, with the Nitrogen ransomware group claiming responsibility and alleging theft of 8 terabytes of data from clients including Intel, Apple, and Nvidia.
Microsoft reports that more than half of cloud-native AI workload exploitations originate from misconfigurations, with attackers actively abusing publicly exposed AI services lacking authentication.
Belarus-aligned threat actor Ghostwriter is targeting Ukrainian government entities with geofenced PDF phishing campaigns that deliver PicassoLoader and Cobalt Strike, with malicious payloads only served to Ukrainian IP addresses.
A newly disclosed Linux kernel vulnerability, CVE-2026-46300, allows local attackers to escalate privileges to root by exploiting a memory write primitive in the XFRM ESP-in-TCP subsystem.
A new Linux kernel local privilege escalation vulnerability, CVE-2026-46300 (Fragnesia), allows unprivileged local users to gain root by writing arbitrary bytes into the kernel page cache of read-only files.
Independent testing by XBOW confirms Anthropic's Mythos AI model is a powerful vulnerability discovery tool when given both source code and a live environment, but it is expensive, less effective with code alone, and outperformed by cheaper models on web tasks.
Chinese state-sponsored groups Salt Typhoon and Twill Typhoon have been observed in recent campaigns targeting energy, telecom, and financial entities with updated backdoors and a new modular RAT framework.
The Nitrogen ransomware gang has claimed responsibility for a cyberattack on Foxconn's North American facilities, allegedly exfiltrating over 11 million files including sensitive client data from Apple, Nvidia, and Google.
Threat actors began exploiting a critical authentication bypass vulnerability in the open-source PraisonAI framework less than four hours after its public advisory, highlighting the shrinking window for patching AI infrastructure.
North Korean APT group Kimsuky has expanded its arsenal with new PebbleDash-based malware variants and adopted legitimate tools like VSCode Tunneling and Cloudflare Quick Tunnels to target defense and government sectors in South Korea, Brazil, and Germany.
F5 has released patches for over 50 vulnerabilities across its BIG-IP, BIG-IQ, and NGINX products, including 19 high-severity flaws, with the most critical being a heap buffer overflow in NGINX's rewrite module.
Dell has confirmed that a faulty update to its SupportAssist Remediation service is causing blue-screen-of-death crashes on Windows 10 and 11 systems, advising users to uninstall the service as a temporary workaround.
A newly disclosed Linux kernel privilege escalation vulnerability dubbed Fragnesia (CVE-2026-46300) allows unprivileged attackers to reliably gain root access by corrupting page cache memory, with public exploit code already available.
Attackers began probing CVE-2026-44338, an authentication bypass in PraisonAI, less than four hours after public disclosure, highlighting the shrinking window for defenders to patch.
An anonymous researcher has disclosed two new Windows zero-days — a BitLocker bypass affecting Windows 11 and Server 2022/2025, and a privilege escalation in the CTFMON framework — just weeks after publishing three Microsoft Defender vulnerabilities.
ESET reports new FrostyNeighbor (Ghostwriter/UNC1151) cyberespionage activity since March 2026, targeting Ukrainian government organizations with server-side victim validation and updated PicassoLoader variants.
Broadcom has released a security update for VMware Fusion to fix CVE-2026-41702, a high-severity TOCTOU flaw that lets local non-administrative users escalate privileges to root.
A high-severity Linux kernel privilege escalation vulnerability, CVE-2026-46300, dubbed Fragnesia, allows unprivileged local attackers to gain root access via a logic bug in the XFRM ESP-in-TCP subsystem.
A disgruntled security researcher publicly disclosed two Windows zero-days: YellowKey, a BitLocker bypass, and GreenPlasma, a privilege escalation to System, with no patches available.
A new Linux kernel local privilege escalation vulnerability tracked as CVE-2026-46300 and named Fragnesia allows unprivileged attackers to corrupt the page cache of read-only files to gain root access without requiring a race condition.