Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 7,960 stories synthesized.
Threat actors are increasingly leveraging Amazon Simple Email Service (SES) to launch sophisticated phishing campaigns that bypass traditional security defenses by exploiting leaked AWS credentials.
A critical authentication bypass vulnerability in cPanel software is under heavy, active exploitation, leading to widespread server compromises and ransomware attacks just days after its disclosure.
Cisco has announced its intent to acquire Astrix Security for approximately $400 million to strengthen its ability to secure non-human identities and AI-driven agents.
A sophisticated phishing campaign has compromised over 80 organizations by deploying legitimate RMM tools to establish persistent, dual-channel remote access.
Educational technology provider Instructure is investigating a data breach involving its Canvas learning management system after the ShinyHunters hacking group claimed to have stolen 3.6 terabytes of data from thousands of schools.
A malicious version of the popular PyTorch Lightning AI framework was found on PyPI, containing a hidden, credential-stealing payload linked to a broader, cross-ecosystem supply-chain attack.
Forbes Media has agreed to a $10 million preliminary settlement to resolve a class-action lawsuit alleging the company violated California privacy laws by tracking users without consent.
Trellix, a global cybersecurity firm protecting over 200 million endpoints, has confirmed that unauthorized actors gained access to a portion of its source code repository.
The ransomware group World Leaks has published 8.5 terabytes of data stolen from Mediaworks, a major Hungarian media firm, following a breach that exposed sensitive internal communications and financial records.
Security researchers are promoting the adoption of AI Bills of Materials (AI-BOMs) and model provenance tools to combat the risks posed by "shadow AI" and opaque supply chains in enterprise environments.
A new report from the Identity Theft Resource Center reveals that 38% of small businesses are raising prices to compensate for the financial impact of cyberattacks, creating a "cyber tax" for consumers.
The Chinese threat actor Silver Fox is targeting organizations in India and Russia with tax-themed phishing emails that deliver a new, stealthy backdoor called ABCDoor alongside established remote access Trojans.
cPanel has patched a critical zero-day authentication bypass vulnerability, CVE-2026-41940, which is currently being actively exploited to gain full administrative access to servers.
Fraudsters are bypassing credit union security by using stolen identities to navigate legitimate loan workflows, rendering traditional knowledge-based authentication ineffective.
The cybersecurity sector experienced a flurry of consolidation in April 2026, with 33 announced acquisitions focused on integrating AI security, identity management, and compliance capabilities into enterprise platforms.
Security leaders are facing a growing 'AI exposure gap' as the rapid, decentralized adoption of artificial intelligence creates complex, interconnected risks that traditional security tools are not equipped to monitor.
A critical authentication bypass flaw in cPanel and a high-reliability Linux kernel privilege escalation bug are both being actively exploited in the wild, prompting urgent warnings from security researchers and CISA.
A social engineering attack against DigiCert’s support portal allowed threat actors to generate and misuse legitimate EV Code Signing certificates to sign malware.
Progress Software has released critical patches for MOVEit Automation to fix an authentication bypass vulnerability and a privilege escalation flaw that could allow remote attackers to gain administrative control over the system.
Managed Service Providers are being urged to overhaul their security and backup strategies as AI-driven phishing and sophisticated SaaS-based attacks outpace traditional defensive measures.
The rise of agentic AI coding platforms in 2025 has significantly lowered the barrier to entry for cyberattacks, enabling non-technical individuals to execute sophisticated breaches and drastically reducing the time between vulnerability disclosure and exploitation.
The China-based cybercrime group Silver Fox is targeting organizations in India and Russia with a new Python-based backdoor called ABCDoor, delivered via sophisticated tax-themed phishing campaigns.
A Vietnamese-linked threat actor has compromised 30,000 Facebook accounts by abusing Google's AppSheet platform to deliver highly convincing phishing emails that bypass standard security filters.
Malwarebytes reports a massive wave of World Cup 2026-themed scams across crypto, travel, merchandise, and visa categories, with fraudsters impersonating FIFA, Panini, and LEGO to steal money and data.