Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 7,960 stories synthesized.
Avantra has released Avantra 26, an updated AIOps platform featuring an AI-driven root cause analyzer designed to diagnose SAP system failures in seconds.
Securonix has introduced an AI-powered Threat Research Agent and a validation tool called ThreatWatch to help security teams automate threat research and confirm exposure within their environments.
OpenAI has introduced GPT-5.5-Cyber, a specialized, more permissive AI model designed to assist verified security professionals with red teaming and vulnerability validation.
Kaspersky researchers have disclosed CVE-2025-68670, a critical remote code execution vulnerability in the xrdp remote desktop server for Linux that can be exploited without authentication.
A new Linux kernel privilege escalation chain dubbed \"Dirty Frag\" allows unprivileged local users to gain root access across most major distributions using a publicly available exploit.
Transilience AI has introduced a Full Stack Security Operating System designed to unify fragmented cloud security tools and automate the remediation process through AI-driven agents.
Object First has introduced a new cloud-based management service, Fleet Manager, designed to provide centralized oversight and security monitoring for distributed Ootbi backup storage environments.
A vulnerability in the Claude Chrome extension allows malicious extensions to hijack the AI agent, bypass security prompts, and perform unauthorized actions on behalf of the user.
Ivanti has patched a high-severity zero-day vulnerability in Endpoint Manager Mobile (EPMM) that was exploited in targeted attacks, likely chained with previously disclosed flaws.
A new local privilege escalation exploit named Dirty Frag chains two Linux kernel page-cache write vulnerabilities to reliably gain root access on major distributions without requiring a race condition.
A data extortion attack on Instructure's Canvas platform has disrupted classes and final exams across thousands of U.S. schools after ShinyHunters defaced the login page with a ransom demand threatening to leak data on 275 million students and faculty.
GitLab released versions 19.0.1, 18.11.4, and 18.10.7 on May 27, 2026, patching seven vulnerabilities, the most severe of which allows an authenticated attacker to run Duo AI workflows under another user's identity.
ShinyHunters exploited a vulnerability in Instructure's systems to deface Canvas login portals for approximately 330 educational institutions, threatening to leak stolen data unless a ransom is paid by May 12.
A new banking trojan named TCLBanker targets 59 financial platforms and uses a trojanized Logitech installer, with worm modules that hijack WhatsApp and Outlook to spread autonomously.
SentinelLabs has discovered a modular cloud worm named PCPJack that removes TeamPCP malware from infected systems while stealing cloud secrets from AWS, GitHub, Slack, and cryptocurrency wallets.
Adversa AI has disclosed the TrustFall attack, a one-click remote code execution vulnerability in Claude Code, Gemini CLI, Cursor CLI, and Copilot CLI via malicious JSON files in cloned repositories.
A new malware framework called PCPJack is stealing credentials from exposed cloud infrastructure while actively removing TeamPCP's access to the threat group's access to compromised systems.
The Australian Cyber Security Center warns of ongoing ClickFix attacks targeting Australian organizations, using compromised WordPress sites to distribute Vidar Stealer malware.
Ivanti warns that a high-severity remote code execution vulnerability in Endpoint Manager Mobile (EPMM) is being exploited in limited attacks, prompting CISA to add the flaw to its Known Exploited Vulnerabilities catalog.
A new malware framework called PCPJack is stealing credentials from exposed cloud infrastructure while actively removing TeamPCP's access to the systems.
Kaspersky researchers found that 60% of MD5 password hashes from a dataset of 231 million leaked passwords can be cracked in under an hour using a single Nvidia RTX 5090 GPU, with 48% cracked in under 60 seconds.
CISA added Ivanti vulnerability CVE-2026-6973 to its Known Exploited Vulnerabilities catalog on May 7, 2026, confirming active exploitation in the wild.
Palo Alto Networks disclosed CVE-2026-0300, a zero-day in its firewall User-ID Authentication Portal, exploited in the wild by a likely state-sponsored group using open-source tunneling tools and Active Directory enumeration.
Ivanti warns that a high-severity remote code execution vulnerability in Endpoint Manager Mobile (EPMM) is being exploited in limited attacks, prompting CISA to add the flaw to its KEV catalog.