Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 7,960 stories synthesized.
Bitdefender attributes a multi-wave intrusion targeting an Azerbaijani oil and gas company to the China-linked FamousSparrow group, which repeatedly exploited a ProxyNotShell vulnerability in Microsoft Exchange Server between December 2025 and February 2026.
Microsoft's May 2026 Patch Tuesday addresses over 130 vulnerabilities, including two critical Netlogon and DNS flaws, as the company reveals its internal AI system MDASH discovered 16 of this month's bugs.
Electronics giant Foxconn has confirmed a key Apple supplier confirmed a ransomware attack on its North American factories with the Nitrogen gang claiming theft of 8 TB of data including confidential client documents.
The US House Homeland Security Committee has summoned Instructure to a briefing after ShinyHunters exploited a Free-For-Teacher account flaw, stealing 3.65 TB of data affecting 275 million users across 9,000 institutions.
Microsoft's May 2026 Patch Tuesday addresses 137 vulnerabilities, 31 critical, with no zero-days exploited in the wild, but two critical remote code execution flaws in Microsoft Word and Windows GDI require immediate attention.
Microsoft's May 2026 Patch Tuesday addresses 138 vulnerabilities, including two critical remote code execution flaws in Windows DNS and Netlogon, though none are publicly known or actively exploited.
Microsoft patched CVE-2026-40361, a critical zero-click remote code execution vulnerability in Outlook that can be triggered simply by previewing or reading an email.
Fortinet and Ivanti released patches for 18 vulnerabilities, including three critical-severity bugs, with no evidence of in-the-wild exploitation reported.
Intel and AMD released May 2026 Patch Tuesday advisories addressing 70 vulnerabilities, including critical flaws in data center graphics drivers and GPU metrics exporters.
Microsoft's May 2026 Patch Tuesday addresses 120 CVEs, including 17 critical vulnerabilities, with a critical Netlogon buffer overflow and a Windows DNS client RCE topping the list.
A campaign dubbed GemStuffer has abused the RubyGems registry with over 150 gems to exfiltrate scraped data from U.K. council portals, using the package repository as a storage channel rather than for malware distribution.
RubyGems.org has suspended new account registrations after threat actors published over 500 malicious packages, including exploit-laden gems, in a coordinated spam and attack campaign.
Siemens published 18 advisories including critical flaws in Sentron 7KT PAC1261 and Ruggedcom Rox, while Schneider Electric patched high-severity vulnerabilities in EcoStruxure Panel Server and EasyLogic RTU.
A detailed analysis reveals a widespread fraud campaign that uses SEO poisoning and compromised WordPress sites to host AI-generated fake marketplaces, luring victims from eBay and repost them on domains like desidrivingschool[.]com, registered days prior. Victims are lured via search results to these fraudulent stores, which appear to be AI-generated and priced too good to be true. The diary details the attack chain, including sitemap.xml enumeration revealing thousands of poisoned listings.
NetSPI has introduced a new suite of AI-powered Continuous Pentesting offerings aimed at helping organizations identify and validate security risks across dynamic cloud and external environments.
SecureLayer7 has launched Sandyaa, an open-source autonomous security tool that uses recursive LLM analysis to audit source code and generate functional proof-of-concept exploits for confirmed vulnerabilities.
The TanStack open-source project has confirmed a supply-chain compromise after attackers hijacked its GitHub Actions environment to inject malicious code into its npm packages.
A new survey reveals that while most organizations believe they are prepared for AI adoption, nearly half lack the governance necessary to manage the persistent, unmonitored access granted to non-human identities and AI agents.
Vietnam has launched a strategic initiative to develop a sovereign cloud platform by 2030, aiming to eliminate reliance on foreign cloud providers and strengthen national data security.
Google is rolling out a major security update across the Android ecosystem, introducing AI-driven threat detection, verified financial call authentication, and expanded anti-theft measures to combat rising mobile fraud and device theft.
The SANS Internet Storm Center has issued an alert regarding a new NGINX vulnerability and an active zero-day exploit targeting Cisco systems.
Security researchers are adopting traffic redirection techniques to bypass the visibility limitations imposed by TLS 1.3, enabling the inspection of encrypted API calls from Windows executables.
GitLab released versions 18.11.3, 18.10.6, and 18.9.7 on May 13, 2026, patching multiple high-severity vulnerabilities including cross-site scripting and denial-of-service issues across Analytics dashboards, global search, and CI/CD APIs.
Trend Micro reveals how TeamPCP compromised Checkmarx KICS and elementary-data in April 2026, using poisoned CI/CD pipelines to steal credentials and sign malicious packages with legitimate keys.