Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,561 stories synthesized.
Attackers compromised the PC launcher for the popular game Goddess of Victory: NIKKE, embedding malicious code that could steal player credentials, passwords, and cryptocurrency data.
A study of over 25,000 government domains revealed dozens with DNS record errors, including typos and expired references, exposing agencies to impersonation and spying.
Cybercriminals are exploiting AI image generation to create convincing fake photos of missing pets, extorting desperate owners for ransom.
Key findings • 25 vulnerabilities disclosed across HPE Fabric Composer and Cray CPE. • Multiple information disclosure and privilege escalation flaws in Fabric Composer. • One High severi…
A Chinese national has been extradited to the U.S. to face charges in a $37 million cryptocurrency investment scam, while a separate incident saw hackers drain funds from BTCPay Server wallets.
The U.S. government has issued an urgent warning to critical infrastructure operators to secure their cooling systems following recent cyberattacks that disrupted operations in European supermarkets.
Cisco Talos has identified VOLTA, a sophisticated Windows infostealer that employs AI to profile victims and prioritize assets for monetization.
Blockchain analysis firm Chainalysis has confirmed attackers stole live tokens and password hashes during an October breach, escalating the impact beyond previously disclosed data.
Wordfence Intelligence reported 549 vulnerabilities in 351 WordPress plugins and 4 themes from October 26 to November 1, 2026, including critical RCE and file upload flaws.
Cybercriminals are leveraging the open-source AI-powered hacking platform ARTEX for autonomous vulnerability discovery and exploitation, with over 1,800 exposed instances identified.
Microsoft is introducing a new initiative to enhance the security of on-premises server workloads, focusing on reducing risks through improved configurations, faster patching, and automated mitigations.
Cloudflare argues that the rise of AI agents acting on behalf of users necessitates a fundamental shift in how websites manage identity, reputation, and accountability.
OpenAI has launched GPT-6 Cyber, an advanced AI model designed for cybersecurity tasks, boasting significant improvements in vulnerability discovery and exploit development while emphasizing adherence to ethical guidelines.
Microsoft's November security updates introduce Dynamic Permissions and Execution Containers to control AI agents, alongside Intune Endpoint Privilege Management enhancements.
A penetration tester discovered a tobacco company's highly sensitive product recipes accessible on an internal file share with no access restrictions, a finding initially denied by the company's security team.
Microsoft's Q3 2026 report reveals a significant 41% increase in email-based phishing threats, with attackers increasingly spoofing business domains and employing tactics like QR codes and disguised archives.
Attackers are actively exploiting a Cisco IOS vulnerability, likely CVE-2023-20198, using custom headers and URL encoding to bypass security measures.
Cyberhaven introduces Agentic Data Security (ADS) to provide visibility and control over how AI agents access and use sensitive company data, aiming to enable secure AI adoption.
A critical vulnerability in OpenSSH 10.6p2, when combined with specific Alpine Linux configurations using musl libc without PAM, allows remote attackers to bypass password authentication.
Rubrik introduces a new service that stores on-premise NAS backups in isolated, immutable cloud vaults, eliminating the need for customers to manage local backup storage infrastructure.
This week's ThreatsDay bulletin highlights the accelerating pace of zero-day discovery due to AI, the persistent problem of slow patching for critical systems, and the disruption of a $4.5 million global fraud network.
Vercel is rolling out Device Bound Session Credentials to combat session hijacking and launching an AI-powered Security Review tool in public beta.
Arkose Labs has expanded its Agent Trust Manager to help businesses classify and control AI agentic traffic, addressing the growing challenge of AI agents not self-identifying.
India's CERT has issued a warning about a new threat group, 'Crafty Falcon,' leveraging Chinese-developed AI tools to target financial and cryptocurrency businesses.