Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 7,960 stories synthesized.
Two cybersecurity professionals have been sentenced to four years in prison for their roles as affiliates in the ALPHV/BlackCat ransomware operation, having extorted over $1 million from victims.
CISA has added the "Copy Fail" Linux kernel vulnerability to its Known Exploited Vulnerabilities catalog after researchers released a reliable exploit that grants unprivileged users root access across nearly all modern Linux distributions.
Microsoft's April 2026 security updates are causing widespread failures in third-party backup software by blocking a vulnerable kernel driver, forcing users to update their applications to restore functionality.
Threat actors are increasingly abusing Amazon SES to send phishing and business email compromise emails that pass SPF, DKIM, and DMARC checks, making them appear fully legitimate.
Apple has issued a widespread series of security and stability updates across its entire product ecosystem, including new versions of iOS, macOS, watchOS, and developer tools.
Polymarket, a platform for betting on real-world events, is experiencing widespread manipulation as users exploit physical sensors and intimidate information sources to rig market outcomes.
Anthropic has released the public beta of Claude Security, an enterprise-focused tool that uses the Opus 4.7 model to scan codebases for vulnerabilities and generate automated patches.
French authorities have detained a 15-year-old suspect for allegedly orchestrating a massive data breach at the government agency France Titres, which exposed the personal information of up to 18 million people.
A critical authentication-bypass vulnerability in cPanel and WHM is being actively exploited by multiple threat actors to deploy ransomware, botnets, and espionage tools across tens of thousands of compromised servers.
Mirantis has introduced Lens Agents, a new platform designed to provide centralized governance, security, and cost control for AI agents operating across desktop and cloud environments.
The Rust-based shell Brush has released version 0.4.0, introducing major improvements to bash compatibility, expanded platform support, and refined arithmetic handling.
A coordinated international operation involving the FBI, Dubai Police, and Chinese authorities has dismantled nine cryptocurrency scam centers and arrested 276 individuals linked to widespread "pig butchering" fraud schemes.
A new open-source security tool called Pipelock has been released to provide a network-level firewall for AI coding agents, preventing unauthorized data exfiltration and credential theft.
Organizations must shift their third-party risk management strategies from a data-loss prevention mindset to one centered on operational resilience to mitigate supply chain vulnerabilities.
New research reveals that Large Language Models fail to detect malicious activity when used in isolation, but achieve 93 percent accuracy when integrated into structured, tool-constrained investigative workflows.
New research indicates that ten major workplace applications collect an average of 19 data points each, with many sharing user information with third-party advertisers and marketing firms.
Security researchers have issued warnings regarding a new NGINX vulnerability and an active zero-day exploit targeting Cisco systems, prompting urgent calls for heightened network monitoring.
A sophisticated, fileless Linux Remote Access Trojan (RAT) named Quasar Linux RAT (QLNX) is actively targeting developer environments to harvest credentials and facilitate software supply chain compromises.
Education technology giant Instructure has confirmed a data breach involving the theft of user information, with the ShinyHunters extortion group claiming to have stolen 3.65 terabytes of data from millions of students and faculty.
OpenAI has introduced an opt-in "Advanced Account Security" feature for ChatGPT and Codex that mandates phishing-resistant authentication via passkeys or hardware security keys while disabling traditional password-based logins.
Microsoft Defender erroneously flagged legitimate DigiCert root certificates as malware, leading to widespread system alerts and the accidental removal of certificates from the Windows trust store.
Wireshark has released version 4.6.5 to address 43 vulnerabilities and 35 bugs, a surge in activity attributed to the rise of AI-assisted vulnerability discovery.
The U.S. Department of Defense has secured contracts with seven major technology firms to integrate artificial intelligence into its classified networks to enhance battlefield decision-making and logistical efficiency.
A large-scale fraud operation dubbed 'FEMITBOT' is leveraging Telegram's Mini App feature to impersonate global brands, run cryptocurrency scams, and distribute Android malware.