Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 7,960 stories synthesized.
Threat actors compromised CPUID's download API on April 9, 2026, serving trojanized CPU-Z, HWMonitor, and PerfMonitor binaries through the official download button for 19 hours, with SentinelOne's AI EDR autonomously blocking the attack.
Microsoft's April 2026 Patch Tuesday addresses 167 vulnerabilities, including three zero-days: an actively exploited SharePoint spoofing flaw, a publicly disclosed Defender privilege escalation, and a critical for VPN-adjacent IKE remote code execution.
Microsoft's April 2026 Patch Tuesday addresses 167 vulnerabilities, including a SharePoint Server zero-day under active attack and a publicly disclosed Windows Defender privilege-escalation bug, while Adobe and Google also release emergency patches for exploited flaws.
Microsoft's April 2026 Patch Tuesday addresses 165 vulnerabilities, eight rated critical, with one SharePoint spoofing flaw already under active exploitation.
GitHub Security Lab released Season 4 of its Secure Code Game, a free open-source course where players hack a deliberately vulnerable AI assistant to learn agentic AI security risks.
Security researchers at Socket have uncovered a campaign of 108 malicious Chrome extensions that steal session cookies, harvest Google account data via OAuth2, and inject ads, affecting roughly 20,000 users.
Fortinet has disclosed multiple relative path traversal vulnerabilities in FortiWeb that could allow a local privileged attacker to execute unauthorized code on the underlying system.
Fortinet has disclosed a server-side request forgery vulnerability in FortiSOAR that could allow authenticated attackers to probe local ports and discover services running on the host.
The Axios npm package was compromised on March 31, 2026, via a maintainer account takeover, with malicious versions deploying a cross-platform RAT on Windows, macOS, and Linux.
Fortinet disclosed a stored cross-site scripting vulnerability in FortiSOAR that allows authenticated remote attackers to execute malicious scripts via crafted HTTP requests.
Fortinet disclosed a critical OS command injection vulnerability in FortiSandbox, allowing unauthenticated attackers to execute arbitrary code via crafted HTTP requests.
Fortinet disclosed an improper authentication vulnerability in FortiSOAR's web GUI that allows unauthenticated attackers to bypass two-factor authentication by replaying a captured request.
Fortinet disclosed a missing authentication vulnerability in the CAPWAP daemon of FortiOS and FortiSwitchManager, allowing local unauthenticated attackers to write device configuration.
Fortinet has disclosed a high-severity SQL injection vulnerability in FortiDDoS-F that could allow authenticated attackers to execute arbitrary SQL queries via crafted HTTP requests.
Fortinet disclosed an information exposure vulnerability in FortiNDR and FortiVoice that allows authenticated attackers with read-only access to retrieve backup files via crafted HTTP requests.
Fortinet has disclosed a stored cross-site scripting vulnerability in FortiSandbox and FortiSandbox Cloud that allows a privileged attacker to execute malicious scripts via crafted HTTP requests.
Fortinet disclosed a path traversal vulnerability in FortiSandbox that allows privileged attackers with super-admin profiles and CLI access to delete arbitrary directories via crafted HTTP requests.
Fortinet has disclosed a path traversal vulnerability in the File Content Extraction connector of FortiSOAR, allowing authenticated remote attackers to traverse directories.
Fortinet has disclosed a reflected cross-site scripting vulnerability in FortiSandbox and FortiSandbox Cloud, tracked as FG-IR-26-109, with a CVSSv3 score of 4.9.
Fortinet has disclosed a stored password vulnerability in its FortiSOAR security orchestration platform that could allow an authenticated attacker to retrieve clear-text LDAP service account credentials.
Fortinet has disclosed a path traversal vulnerability in the CLI of FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager that could allow privileged attackers to write or delete arbitrary files.
Fortinet has disclosed a vulnerability in FortiSOAR that allows authenticated attackers to retrieve stored connector passwords by modifying the server address in connector configuration.
Fortinet disclosed a heap-based buffer overflow in the oftpd daemon of FortiAnalyzer Cloud that could allow remote unauthenticated attackers to execute arbitrary code, though exploitation requires significant effort.
Fortinet has disclosed a cleartext transmission vulnerability in FortiSOAR that could allow authenticated attackers to view passwords in API responses for Secure Message Exchange and Radius queries.