Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 6,128 stories synthesized.
A recent study indicates that a majority of organizations fail to review permissions before deploying AI agents in Microsoft 365, exposing sensitive data to potential misuse.
A new remote access tool, SloppyRAT, is being distributed through social engineering tactics like ClickFix, enabling ransomware operators to conduct reconnaissance and move laterally within compromised networks before encryption.
Okta has released security updates to fix three vulnerabilities in its Auth0 AD/LDAP Connector and Okta Access Gateway, which could lead to stored XSS, authorization bypass, and SQL injection.
Automox introduces an AI-speed Mitigation Worklet Pipeline to automate endpoint risk reduction against a growing number of vulnerabilities, shortening mitigation time from days to minutes.
A new AI attack technique, PuzzleMask, hides malicious commands in plain English text, bypassing security filters by exploiting differences between lightweight screening models and more capable downstream AI systems.
Microsoft is investigating a significant platform availability issue impacting its Microsoft 365 Copilot service, identified as incident CP1470554, causing users to experience access problems and errors within integrated applications.
Two vulnerabilities in JFrog Artifactory were chained by attackers to gain administrator control over self-hosted servers and deploy backdoors, according to a report by Wiz.
The CL0P ransomware group has allegedly added Harley-Davidson to its public leak site, claiming a compromise, though the motorcycle manufacturer has not confirmed the incident.
A new evaluation ranks the top Cloud-Native Application Protection Platforms (CNAPP), highlighting Wiz, Prisma Cloud, and Microsoft Defender for Cloud as leaders in consolidating CSPM, CWPP, CIEM, and DSPM.
Key findings • Seven vulnerabilities disclosed for HPE IceWall and ClearPass products between Sept 9-11, 2026. • Flaws include DoS, user impersonation, privilege escalation, and RCE. • Hi…
A new evaluation ranks the top 10 Cloud Workload Protection Platforms (CWPP) for 2026, highlighting Palo Alto's Prisma Cloud, Sysdig, and CrowdStrike for their runtime depth, container support, and detection capabilities.
A China-linked threat actor, UNC3569, has exploited a vulnerability in the popular Sogou Input Method to deploy the GRAYRABBIT backdoor, granting attackers full user-level privileges.
A comprehensive review of the top 10 Cloud Security Posture Management (CSPM) tools for 2026 highlights Wiz as a leader, with Microsoft Defender for Cloud strong for Azure, and Google's pending acquisition of Wiz shaking up the market.
Security researchers have uncovered multiple vulnerabilities in cellular network systems that allow attackers to remotely disable new, unactivated phones and other devices for mere dollars.
Microsoft's September 2026 cumulative updates have introduced a critical bug affecting Remote Desktop Services on Windows Server, causing session hosts to freeze and preventing RDP connections.
A critical Bluetooth flaw in Skullcandy Dime 3 earbuds allows nearby attackers to pair without permission, hijack audio, and spy via the microphone.
Canonical has launched Ubuntu 24.04.5 LTS, codenamed 'Noble Numbat,' incorporating crucial security updates and high-severity bug fixes directly into new installation media.
Anthropic's latest report reveals state-sponsored groups and cybercriminals are weaponizing Claude AI agents to automate attack chains, generate zero-days, and evade detection.
Key findings • High-severity OS command injection in TP-Link Deco BE11000 via crafted UDP packet. • Medium-severity missing authentication in VPN config management for Archer MR600 and TL-MR6…
Key findings • GitLab vulnerability CVE-2026-85706 added to CISA KEV Catalog. • The flaw is confirmed to be under active exploitation in the wild. • Immediate patching of all affected Git…
Key findings • Two Jfrog vulnerabilities, CVE-2026-42016 and CVE-2026-42018, are now in CISA's KEV catalog. • Both flaws are confirmed to be under active exploitation by threat actors in the …
JPMorgan Chase has overhauled its software development lifecycle by centralizing its container pipeline, integrating automated security scans and reviews to secure thousands of daily builds.
Key findings • 25 vulnerabilities disclosed across IBM Db2, Langflow OSS, and DataStage on Cloud Pak for Data on September 10, 2026. • Critical vulnerabilities in Langflow OSS (CVE-2026-81204…
Key findings • 18 vulnerabilities disclosed for IBM Langflow OSS on September 10, 2026, affecting versions 1.0.0-1.11.5. • Two critical vulnerabilities (CVE-2026-81204, CVE-2026-79724, CVE-20…