Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 7,960 stories synthesized.
Trail of Bits released detailed walkthroughs of two C/C++ security challenges from its Testing Handbook, revealing subtle bugs in a Linux ping program and a Windows driver, and introduced a new Claude skill for automated code review.
A Latvian member of the Karakurt ransomware gang has been sentenced to 8.5 years in prison for his role in extorting victims and managing negotiations for the criminal group.
Google researchers have identified a sophisticated iOS zero-day exploit chain named DarkSword, which has been used by state-sponsored actors and surveillance vendors to fully compromise devices since late 2025.
A scan of 1 million exposed AI services has uncovered widespread security failures, including default-off authentication and leaked API keys, leaving enterprise infrastructure vulnerable to data exfiltration and unauthorized code execution.
Anomali has unveiled ThreatStream Next-Gen, a new platform designed to accelerate threat response by automating intelligence-driven decision-making across security workflows.
A Latvian national has been sentenced to 8.5 years in U.S. prison for his role as a negotiator for the Karakurt extortion gang, a group linked to hundreds of millions of dollars in losses and deep ties to Russian state corruption.
Cisco Talos has uncovered a China-nexus threat actor, tracked as UAT-8302, that is leveraging a shared arsenal of sophisticated malware to infiltrate government networks across South America and Europe.
A sophisticated new malware campaign is abusing the Microsoft Phone Link application to intercept SMS-based authentication codes and credentials from Windows PCs.
Threat actors are actively exploiting critical, unauthenticated remote code execution vulnerabilities in MetInfo CMS and Weaver E-cology, leading to potential full server compromise.
The North Korean state-sponsored group ScarCruft has compromised a regional gaming platform to distribute trojanized Windows and Android software, enabling long-term espionage against ethnic Koreans in China.
The North Korean-aligned APT group ScarCruft has compromised a regional gaming platform to distribute sophisticated Windows and Android backdoors in a targeted supply-chain attack.
Cybersecurity vendor Trellix has revealed that threat actors gained unauthorized access to a portion of its source code repository, raising concerns about potential supply chain attacks.
Meta has patched two medium-impact vulnerabilities in WhatsApp while simultaneously upgrading the cryptographic transparency of its end-to-end encrypted backup infrastructure.
Microsoft has uncovered a massive, multi-stage phishing campaign that leveraged enterprise-themed lures and adversary-in-the-middle tactics to bypass multi-factor authentication for over 35,000 users.
Researchers have developed a new machine learning model, VulStyle, that identifies potential security vulnerabilities by analyzing the unique coding habits and stylistic patterns of software developers.
A new analysis from Noma Security warns that 25% of enterprise MCP servers are vulnerable to code execution risks, with AI agents frequently exposed to toxic instruction chains that can lead to data exfiltration and system destruction.
Organizations globally are actively recruiting for a wide array of cybersecurity roles, emphasizing a growing need for professionals who can balance technical security operations with governance and compliance requirements.
The SANS Internet Storm Center released its daily security briefing on May 5, 2026, providing a status update on the current threat landscape for security professionals.
Trend Micro exposes the InstallFix campaign, in which threat actors use fake Claude AI installer pages promoted through Google Ads to deliver malware that disables security features and establishes persistent access.
A critical, actively exploited remote code execution vulnerability in the Weaver E-cology platform is allowing unauthenticated attackers to execute arbitrary commands via an exposed debug API.
The UK's National Health Service has ordered a temporary shift of its public GitHub repositories to private status, citing concerns that advanced AI models could exploit exposed source code.
A stealthy phishing campaign dubbed VENOMOUS#HELPER is compromising organizations by weaponizing legitimate, signed RMM tools to maintain persistent, undetected access to victim systems.
New research reveals that children are frequently bypassing UK Online Safety Act age verification measures using simple tactics, including fake mustaches and false identification, while nearly half of surveyed children continue to encounter harmful content online.
Threat actors are increasingly exploiting Amazon Simple Email Service (SES) to deliver high-quality phishing and BEC attacks that bypass traditional email authentication filters.