Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,649 stories synthesized.
North Korean state-sponsored actors are employing steganography within SVG image files to hide malware, delivered through social engineering lures disguised as job offers and coding challenges.
A critical vulnerability in Shark's AWS IoT policy allows a compromised robot vacuum to access other devices, potentially exposing cameras, home maps, and Wi-Fi passwords.
Key findings • Nine moderate-severity vulnerabilities disclosed in Keycloak services between July 14-17, 2026. • Flaws impact authorization, session management, JWT/OIDC handling, and informa…
Google Cloud is integrating Wiz capabilities into a new agentic defense platform, aiming to automate threat detection and remediation against increasingly sophisticated AI-powered cyber threats.
Armenia has detained a Russian tourist, Aleksandr Ermakov, based on a U.S. extradition request for a key figure in the REvil ransomware group, though the detained man's lawyers assert he is the wrong individual.
Cybercriminals are increasingly leveraging GitHub to distribute malware by creating convincing, impersonating repositories that mimic legitimate brands and offer Trojanized software.
A critical bug in AWS Cost Explorer erroneously displayed trillion-dollar billing estimates to customers, causing widespread alarm despite actual charges remaining unaffected.
Three chained zero-day vulnerabilities in Siemens ROX II OT switches allow attackers to gain persistent root access, posing a significant threat to industrial control systems.
Key findings • Six vulnerabilities disclosed on July 17, 2026, affect Perl modules libyaml-syck-perl and libxml-bare-perl. • libyaml-syck-perl (pre-1.47) has four memory corruption flaws: use…
Key findings • Nine vulnerabilities in Cyrus IMAP through 3.12.2 disclosed on July 17, 2026. • Multiple flaws allow authenticated users to bypass ACLs and access unauthorized mailboxes or dat…
1Password and Anthropic's Claude AI are teaming up to allow the AI assistant to log into websites without directly exposing user credentials, enhancing security for AI-driven tasks.
A critical vulnerability in Android 16 allows Gemini to bypass lock screen PINs and send SMS and WhatsApp messages, with a fix rolling out this week.
A new buyer's guide ranks the top 10 Identity Threat Detection and Response (ITDR) solutions for 2026, highlighting their critical role in combating credential theft and identity-based attacks.
TP-Link has released firmware updates to address two vulnerabilities in its Kasa smart cameras, one enabling Man-in-the-Middle attacks and another leaking geolocation data.
OpenAI is investigating reports that its GPT-5.6 Codex AI model has unintentionally deleted files from user home directories, prompting calls for stricter AI agent access controls.
CISA has issued an emergency directive requiring federal agencies to patch two critical Fortinet FortiSandbox vulnerabilities, CVE-2026-39808 and CVE-2026-25089, which are being actively exploited in the wild.
Researchers have identified 'Cross-Site Prompting' (XSP) as a new vulnerability class for autonomous web agents, analogous to XSS for traditional web applications.
New research indicates that the persuasive power of AI-driven voice phishing (vishing) attacks relies more on sophisticated social engineering scripts than the realism of the cloned voice.
Polygraf AI introduces Meeting Guard, an AI-powered solution designed to detect fraud and enhance security during enterprise virtual meetings by acting as a participant and providing real-time analysis.
Two young members of the notorious Scattered Spider cybercrime group have been sentenced to over five years in prison for a 2024 attack that crippled 148 Transport for London (TfL) systems, forcing 27,000 staff to reset passwords and costing the organization approximately £29 million.
A heap-based buffer overflow in 7-Zip, CVE-2026-14266, allows remote attackers to execute arbitrary code by tricking users into opening a crafted XZ archive or visiting a malicious webpage.
Palo Alto Networks' Unit 42 report indicates AI is accelerating cyberattacks by enhancing efficiency and lowering barriers to entry, but fundamental attack methods remain largely unchanged.
Ransomware victims are increasingly unwilling to pay ransoms, forcing cybercriminal groups to innovate with AI and new evasion tactics, while the US targets enablers of these attacks.
Decentralized finance platform Ostium has halted trading following a sophisticated exploit that drained approximately $18 million in USDC from one of its vaults.