Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 7,960 stories synthesized.
Intel 471 has launched a new feature for its Verity471 platform that automates the creation of detection queries to help security teams quickly identify past or present exposure to emerging threats.
Independent research teams have demonstrated that Rowhammer attacks against NVIDIA Ampere-generation GPUs can grant attackers full control over a host machine's CPU memory and lead to root-level privilege escalation.
Extreme Networks has announced the upcoming launch of Extreme Agent ONE, an autonomous AI platform designed to automate enterprise network management through proactive, context-aware agents.
Cisco Talos has uncovered a Windows malware toolkit, CloudZ RAT and its Pheno plugin, that steals SMS one-time passwords by reading synced data from Microsoft Phone Link's local database, bypassing the need to compromise the victim's phone.
UiPath has introduced new agentic AI capabilities for its Automation Suite, enabling government agencies to deploy secure, self-hosted, or cloud-based AI workflows that meet strict compliance and data residency standards.
CISA has introduced the 'CI Fortify' initiative to help critical infrastructure operators maintain essential services during cyberattacks, warning that nation-state actors have already embedded themselves within U.S. operational technology networks.
8x8 has rolled out a series of updates to its Platform for CX, introducing new AI development tools, enhanced analytics, and silent mobile authentication to address operational bottlenecks.
Proton Mail has launched an optional post-quantum encryption feature across all account tiers to protect future communications from potential quantum computing threats.
Cisco Talos researchers have uncovered that scammers are systematically reusing phone numbers across diverse email campaigns to maintain operational continuity and evade security filters.
New Relic has introduced a new intelligence layer designed to enhance AI-driven observability by correlating real-time telemetry with historical operational data.
A sophisticated Linux-based Remote Access Trojan dubbed Quasar Linux (QLNX) has been identified targeting software developers to steal cloud, repository, and package-publishing credentials.
Observability platform groundcover has launched a suite of new features for Synthetic Monitoring and Real User Monitoring, including a privacy-focused Session Replay tool designed to keep telemetry data within customer-controlled cloud environments.
ServiceNow has introduced its Autonomous Security & Risk platform, integrating technology from Veza and Armis to provide centralized governance for AI agents, identities, and connected assets.
Google has introduced an expanded Binary Transparency initiative for Android that uses a public, cryptographic ledger to verify the authenticity of its production applications and prevent supply chain attacks.
Megaport has introduced a new fabric-native DDoS protection service that filters malicious traffic directly within its network to reduce latency and eliminate the need for external scrubbing centers.
Threat actors are leveraging a custom plugin called Pheno to hijack the Microsoft Phone Link application, allowing them to steal SMS messages and OTPs directly from Windows PCs without compromising the user's mobile device.
CrowdStrike has expanded its real-time cloud detection and response to Google Cloud and introduced new services to monitor shadow AI and enhance threat hunting within Microsoft Defender environments.
Oracle is moving to a monthly security update cadence to address high-priority vulnerabilities faster, leveraging AI-driven detection to speed up the remediation lifecycle.
The United Arab Emirates is facing a massive surge in cyberattacks, with daily breach attempts reaching up to 800,000 as regional geopolitical tensions escalate.
CISA has mandated that federal agencies urgently patch a critical cPanel zero-day vulnerability that was exploited by attackers for months before a fix was released.
Palo Alto Networks is addressing a critical, actively exploited zero-day vulnerability in its PAN-OS software that allows unauthenticated attackers to gain root-level remote code execution on firewall appliances.
India’s securities regulator has ordered financial market participants to urgently harden their systems against the threat of AI-accelerated cyberattacks, specifically citing risks posed by Anthropic’s Mythos vulnerability-finding tool.
The SANS Internet Storm Center has issued an urgent alert regarding a new NGINX vulnerability and a zero-day exploit targeting Cisco systems, prompting calls for heightened vigilance across enterprise networks.
ABB has patched a medium-severity vulnerability in its B&R PVI software that could allow local attackers to harvest sensitive credentials from application log files.