Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 7,960 stories synthesized.
A phishing email evaded Outlook's Junk folder link preview by using an HREF with no URI scheme, hiding the destination URL while the link remained clickable in normal view.
A critical heap buffer overflow in NGINX is under active exploitation, prompting urgent warnings for administrators to patch the affected rewrite module.
Researchers have released VectorSmuggle, a framework demonstrating how attackers can hide data inside vector embeddings used in enterprise RAG pipelines, evading existing DLP tools.
Palo Alto Networks, Microsoft, and Mozilla are using frontier AI models to find vulnerabilities at unprecedented scale, resulting in a surge of patches that security experts warn will overwhelm administrators.
AWS fixed an authorization bypass in Amazon Quick that let denied users query the AI Chat Agent via API, but classified the severity as 'none' and issued no advisory, sparking criticism over its response.
Pharmaceutical manufacturer West Pharmaceutical Services has disclosed a cyberattack that resulted in data exfiltration and system encryption, disrupting global operations.
Iran-linked MuddyWater (Seedworm) conducted a broad cyber-espionage campaign targeting at least nine organizations, including a major South Korean electronics manufacturer where attackers lurked for a week in February 2026.
Socket Research uncovers 'GemStuffer,' a campaign using RubyGems to store scraped UK government data, eliminating the need for a C2 server.
An anonymous group breached the internal back-end database of the prolific 'The Gentlemen' ransomware gang, leaking 16GB of communications and tooling.
A critical use-after-free vulnerability in Exim versions 4.97 through 4.99.2 compiled with GnuTLS allows unauthenticated remote attackers to execute arbitrary code on affected mail servers.
Akamai researcher Tomer Peled disclosed three vulnerabilities in MCP servers for Apache Doris, Apache Pinot, and Alibaba RDS, with Alibaba refusing to patch its information disclosure flaw.
Electronics manufacturing giant Foxconn has confirmed a ransomware attack on its North American factories by the Nitrogen group, which claims to have stolen 8TB of data including schematics for Apple, Intel, and Nvidia.
A critical authentication bypass vulnerability in the Burst Statistics WordPress plugin, CVE-2026-8181, allows unauthenticated attackers to take over admin accounts on over 200,000 sites.
A cybersecurity researcher has released proof-of-concept exploits for two unpatched Windows zero-day vulnerabilities, including a BitLocker bypass that grants full access to encrypted drives and a privilege escalation flaw.
An anonymous researcher has disclosed two new Microsoft zero-day vulnerabilities, YellowKey and GreenPlasma, just after Patch Tuesday, continuing a retaliatory campaign against the company.
Microsoft and Palo Alto Networks have separately reported that AI-driven vulnerability discovery systems found dozens of flaws in their own software, including critical remote code execution bugs in Windows.
Microsoft has addressed a BitLocker recovery boot issue with the KB5089549 cumulative update for Windows 11 25H2, but Windows 10 and Server users still lack a fix.
Rapid7 details an April 2026 enterprise intrusion that began with a fake Microsoft Teams 'IT Support' message and escalated through Python malware, privilege escalation, credential theft, and lateral movement.
Microsoft has fixed a Windows Autopatch bug that caused driver updates restricted by administrative policies to be deployed on some EU devices running Windows 11, leading to unexpected reboots and system failures.
A pair of vulnerabilities in the widely used Avada Builder WordPress plugin allows for arbitrary file reading and unauthenticated SQL injection, potentially leading to full site compromise.
Microsoft unveiled MDASH, a multi-model AI system using over 100 specialized agents to autonomously discover and validate vulnerabilities, leading to 16 fixes in the May 2026 Patch Tuesday.
Signal introduced new in-app security warnings to counter phishing and social engineering attacks that exploited its 'linked devices' feature, following warnings from the FBI and CISA about Russian-linked hackers targeting the platform.
A leaked internal database from The Gentlemen ransomware-as-a-service operation reveals nine accounts, initial access methods, and a $190,000 ransom payment.
China-linked APT group FamousSparrow has breached an Azerbaijanian oil-and-gas company, marking the first known China-aligned cyber espionage in the South Caucasus region.