Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 7,960 stories synthesized.
A researcher disclosed PhantomRPC, a local privilege escalation weakness in Windows RPC that Microsoft declined to patch, calling it a feature not a bug.
Wiz researchers discovered a high-severity vulnerability in GitHub's git infrastructure that allowed remote attackers to gain full read/write access to private repositories using a single command, earning one of the largest bug bounties in GitHub's history.
KELA's 2026 threat report tracked 2.9 billion compromised credentials globally in 2025, with infostealer infections on macOS surging from under 1,000 to over 70,000 and a 45% increase in ransomware victims.
Kaspersky Lab has identified a previously unknown wiper, dubbed Lotus Wiper, used in a December 2025 attack against Venezuelan energy firms and utilities, relying on living-off-the-land techniques to disable defenses before destroying data.
Jenkins released a security advisory on April 29, 2026, patching seven vulnerabilities across six plugins, including a high-severity path traversal bug that can lead to remote code execution.
Trail of Bits has integrated the advanced LibAFL fuzzing engine into Ruzzy, its coverage-guided fuzzer for Ruby, enabling improved performance and modularity.
Check Point Research has discovered a critical implementation flaw in Vect 2.0 ransomware that causes it to permanently destroy files larger than 128 KB instead of encrypting them, making recovery impossible even for the attackers.
Mozilla's Firefox 150 release patches 271 zero-day vulnerabilities discovered by Anthropic's Claude Mythos Preview AI model, signaling a paradigm shift in defensive cybersecurity capabilities.
cPanel has released emergency patches for CVE-2026-41940, a critical authentication bypass vulnerability in cPanel and WHM with a CVSS score of 9.8, which is being actively exploited in the wild as a zero-day for at least 30 days.
CISA has added CVE-2024-1708 (ConnectWise ScreenConnect) and CVE-2026-32202 (Microsoft Windows Shell) to its Known Exploited Vulnerabilities catalog, citing active exploitation in the wild.
A critical SQL injection vulnerability in BerriAI's LiteLLM Python package, CVE-2026-42208, is being actively exploited in the wild just 36 hours after disclosure, with attackers targeting database tables holding LLM provider keys and proxy credentials.
Threat actors exploited the legitimate Kuse AI workplace platform to host a phishing document, using a compromised vendor email and a blurred markdown file to steal credentials.
North Korea's BlueNoroff group is using AI-generated avatars and stolen webcam footage in fake Zoom meetings to trick cryptocurrency executives into installing malware, with full compromise achieved in under five minutes.
Law enforcement disruptions of Lumma and Rhadamanthys have propelled the Vidar has vaulted to become the most-used infostealer on Russian Market, driven by a major upgrade and expanded distribution network.
Check Point Research has discovered that the Vect ransomware, used in recent supply-chain attacks, is actually a wiper that permanently destroys files larger than 128KB, making data recovery impossible even for the attackers.
Researchers at Wiz have disclosed a critical command injection vulnerability in GitHub.com and GitHub Enterprise Server that allows authenticated attackers to achieve remote code execution with a single git push.
Brazilian threat group LofyGang has resurfaced after three years with a new campaign targeting Minecraft players, distributing a stealer disguised as a fake game hack.
A critical remote code execution vulnerability in GitHub's git push pipeline, discovered by Wiz researchers, allowed any user with push access to execute arbitrary commands on GitHub servers.
The ongoing GlassWorm supply-chain attack has released a fresh wave of 73 malicious VS Code extensions on the Open VSX marketplace, using a 'sleeper' tactic to evade detection and deliver self-replicating malware.
ShinyHunters has leaked 8.2 million unique email addresses, names, phone numbers, and physical addresses from logistics tech firm Pitney Bowes, with the breach confirmed by Have I Been Pwned on April 27, 2026.
A critical encryption flaw in the VECT 2.0 ransomware permanently destroys files larger than 131KB instead of encrypting them, making recovery impossible even for the operators.
Attackers are probing Vercel deployments with a custom, undocumented HTTP header that may trick servers into setting a bypass cookie, potentially relaxing security controls.
Check Point Research reveals that VECT 2.0 ransomware permanently destroys files larger than 128 KB due to a nonce-handling bug in its ChaCha20-IETF implementation, making recovery impossible even for the attackers.
Ransomware groups 0APT and KryBit have engaged in a damaging turf war, publicly leaking each other's operational data and revealing fabricated victim claims.