Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,179 stories synthesized.
Players of the popular video game Gears of War: E-Day experienced significant disruptions to online services, including login failures and disconnections, due to a distributed denial-of-service (DDoS) attack.
New research from Chainguard reveals that businesses with over $1 billion in revenue are significantly more prone to leaving critical vulnerabilities unpatched compared to smaller organizations.
A critical Linux kernel vulnerability, CVE-2026-74580 (Vghost), discovered with AI assistance, allows local users to gain root privileges and enables guest VMs to compromise host memory.
Citrix, Fortinet, and Ivanti have collectively released patches for 29 vulnerabilities across their product lines, with a critical zero-day in Ivanti Connect Secure being actively exploited.
Microsoft has addressed three significant vulnerabilities in Windows BitLocker, which could allow attackers with local or physical access to escalate privileges or bypass security features.
Attackers are leveraging Google Search results to trick IT administrators into downloading a trojanized PuTTY installer, which uses Node.js and Ethereum smart contracts for command and control.
Researchers have identified a peculiar issue where VBA projects are embedded within AutoCAD DWG files but are inaccessible to the software, potentially due to specific AutoLISP commands.
Security researchers have successfully executed code within a protected Windows SmartScreen enclave, a feat achieved by exploiting a four-byte write vulnerability and a timing side-channel.
Ransomware attacks are increasingly incorporating psychological and physical threats against victims and their families, with a significant percentage of incidents involving doxxing, swatting, and direct intimidation to force payment.
The threat group ShinyHunters is reportedly exploiting critical vulnerabilities in NetScaler, Zimbra, SharePoint, and Atlassian products, marking a shift to an active exploitation phase following the detention of a key member.
Google significantly boosts its Chrome Vulnerability Rewards Program payouts, quadrupling base rewards for memory corruption bugs and offering up to $20,000 for sandbox escape techniques.
Key findings • Two Ahsay vulnerabilities, CVE-2026-105133 and CVE-2026-105134, added to CISA KEV. • Both flaws are confirmed under active exploitation by threat actors in the wild. • No r…
Key findings • Cisco vulnerability CVE-2026-76519 added to CISA KEV on October 14, 2026. • The flaw is confirmed to be under active exploitation by threat actors. • Immediate patching and…
CISA has issued an alert for Inductive Automation Ignition Software, detailing CVE-2026-92817, an incorrect authorization vulnerability that could allow privilege escalation and arbitrary code execution.
An OpenAI engineer has been charged with attempting to intercept oral communications after allegedly planting a recording device, disguised in toilet paper, in an executive conference room.
Key findings • 25 CVEs disclosed simultaneously for Adobe C2PA Content Credentials on October 13, 2026. • Vulnerabilities include SSRF, improper signature/input/certificate validation, and re…
Key findings • 25 vulnerabilities in Google Chrome disclosed on October 13, 2026, patched in version 155.0.8059.79. • Predominant vulnerability types include use-after-free and buffer overflo…
A recent cyberattack on a European bank, characterized by its unsophisticated methods, has underscored the significant security risks posed by third-party vendors and supply chains.
A new survey reveals that nearly half of organizations struggle to track, control, or automatically halt the actions of AI agents, leading to concerns about unauthorized data modification, permission changes, and external API calls.
AI-powered agents are transforming traditional cyber threats into high-speed, large-scale operations, forcing security teams to adapt to a new era of automated attacks.
Key findings • Adobe ColdFusion: 25 vulnerabilities disclosed on October 13, 2026. • Flaws include critical code injection, SSRF, and authorization bypass vulnerabilities. • Multiple CVEs…
The U.S. Department of Justice has dismantled sophisticated "laptop farms" operated by North Korea in Texas, used to generate millions in revenue through remote worker scams.
Anthropic's research suggests AI models could soon possess the capabilities to self-replicate and spread across networks like computer worms, posing future security challenges.
The FBI, with assistance from CrowdStrike, has successfully disrupted the FAMOUS CHOLLIMA operation, a sophisticated cyber campaign orchestrated by North Korean state-sponsored threat actors.