Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 7,960 stories synthesized.
Twelve critical vulnerabilities in the widely used vm2 Node.js library allow attackers to escape sandboxed environments and execute arbitrary code on host systems.
Cisco has released patches for a high-severity denial-of-service vulnerability in its Crosswork Network Controller and Network Services Orchestrator that forces affected systems into an unresponsive state requiring manual reboots.
CISA has launched the "CI Fortify" initiative, a new framework designed to help critical infrastructure organizations maintain essential services by operating in isolation during cyberattacks or network outages.
On May 5, 2026, DENIC published incorrect DNSSEC signatures for the .de TLD, causing validating resolvers like Cloudflare's 1.1.1.1 to return SERVFAIL for millions of domains over three hours.
A critical vulnerability in the Slider Revolution WordPress plugin allows authenticated users to upload arbitrary files, potentially leading to remote code execution.
Security researcher Alexander Hanff reveals that Google Chrome automatically downloads a 4GB Gemini Nano AI model onto eligible devices without notification or consent, raising privacy and bandwidth concerns.
Rapid7 researchers have uncovered an Iranian state-sponsored espionage operation, attributed with medium confidence to MuddyWater, that posed as the Chaos ransomware gang to conceal a data theft and false-flag campaign.
Sysdig has introduced a "headless" cloud security platform that replaces traditional dashboards with direct integration into AI coding agents, aiming to counter the machine-speed pace of modern cyberattacks.
Cisco Talos has uncovered a Windows malware toolkit, CloudZ RAT and its Pheno plugin, that steals SMS one-time passwords by reading synced phone data from Microsoft Phone Link's local SQLite database, bypassing the need to compromise the victim's mobile device.
Autonomous offensive security startup XBOW has raised an additional $35 million in a Series C extension, bringing its total funding to over $270 million to support international expansion and platform development.
Modern ransomware campaigns are increasingly neutralizing recovery efforts by systematically identifying and destroying backup infrastructure before deploying encryption payloads.
Herd Security has raised $3 million in a funding round led by Aspiron Ventures to scale its agentic AI platform, which automates continuous security training and simulations for organizations.
Palo Alto Networks has disclosed a critical unauthenticated buffer overflow vulnerability (CVE-2026-0300, CVSS 9.3) in the PAN-OS User-ID Authentication Portal that is already being exploited in the wild by a state-sponsored threat cluster.
Three malicious PyPI packages were discovered delivering a new malware family called ZiChatBot that uses Zulip's REST APIs as its command-and-control infrastructure, with over 2,400 downloads before takedown.
Rapid7 researchers have uncovered an Iranian state-sponsored espionage operation, attributed with medium confidence to MuddyWater, that posed as the Chaos ransomware gang to conceal data theft and intelligence gathering.
Rapid7 has uncovered an intrusion by Iran-linked APT MuddyWater that impersonated a Chaos ransomware affiliate to mask geopolitical espionage, using social engineering and remote access tools without deploying a ransomware payload.
The Iranian state-sponsored group MuddyWater is conducting cyber-espionage operations under the guise of a Chaos ransomware attack, using social engineering and false-flag tactics to mask their true objectives.
Security teams are increasingly shifting toward automated, intelligent workflows to prevent network incidents from escalating due to manual triage bottlenecks.
Attackers are using the legitimate JavaScript runtime Bun to distribute the Rust-based NWHStealer infostealer, leveraging its novelty to evade detection.
Instructure, the company behind the Canvas learning management system, confirmed a breach of its cloud-hosted environment, with the ShinyHunters ransomware group claiming to have stolen roughly 275 million records from over 8,800 educational institutions.
Disc Soft Limited has confirmed that its DAEMON Tools Lite software was compromised in a supply chain attack that distributed signed, trojanized installers to thousands of users globally.
The Hacker News has introduced the 'Cybersecurity Stars Awards 2026' to recognize outstanding contributions and innovation across the global cybersecurity industry.
A Romanian national has been extradited to the United States to face charges for his role in a VoIP-based vishing and bank fraud scheme that took place 17 years ago.
The rapid, uncoordinated deployment of AI agents across enterprise environments has created a significant "identity dark matter" layer that traditional security tools are currently unable to monitor or govern.