Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 7,960 stories synthesized.
Fortinet disclosed a vulnerability in FortiSandbox and FortiSandbox PaaS that allows authenticated administrators to read LDAP server credentials via client-side inspection.
Fortinet has disclosed an SQL injection vulnerability in FortiClientEMS that could allow authenticated attackers to execute arbitrary SQL queries on the backend database.
Fortinet has disclosed a critical path traversal vulnerability in FortiSandbox's JRPC API that allows unauthenticated attackers to bypass authentication and escalate privileges.
Fortinet has disclosed an SQL injection vulnerability affecting FortiAnalyzer, FortiManager, and their cloud variants, allowing authenticated privileged attackers to execute unauthorized code or commands.
Fortinet disclosed an open redirect vulnerability in FortiNAC-F that allows privileged attackers to redirect users to arbitrary websites via a crafted CSV file import.
Fortinet disclosed an integer overflow vulnerability in FortiWeb that could allow privileged authenticated attackers to cause denial of service via crafted HTTP requests.
Fortinet disclosed a hardcoded symmetric encryption key vulnerability in FortiClientEMS, rated CVSS 5.2, that allows attackers with an encrypted database dump to decrypt it using the embedded key.
Attackers are actively exploiting CVE-2026-3584, a critical unauthenticated Remote Code Execution vulnerability in the Kali Forms WordPress plugin, with over 312,000 blocked exploit attempts.
Proofpoint reports a surge in mailbox rule abuse, with 10% of breached Microsoft 365 accounts in Q4 2025 having malicious rules created within seconds of initial access.
A new Android banking trojan named Mirax is spreading across Europe via fake streaming apps, combining remote access, keylogging, and residential proxy capabilities to compromise over 200,000 accounts.
Check Point's latest threat intelligence bulletin details a major LAPD data breach, a ransomware attack on Dutch healthcare vendor ChipSoft, and active exploitation of critical vulnerabilities in Ivanti, Adobe, and Fortinet.
The FBI and Indonesian law enforcement have taken down the W3LL phishing network, a sophisticated operation that caused over $20 million in fraud by selling a custom phishing kit and compromised accounts through a members-only marketplace.
The Department of Justice announced Operation Masquerade, a court-authorized takedown of a Russian GRU Unit 26165 (APT28) DNS hijacking network that compromised thousands of TP-Link routers across 23 states since 2024.
Google has rolled out Device Bound Session Credentials (DBSC) in Chrome 146, cryptographically binding authentication sessions to hardware-backed keys to render stolen session cookies useless against infostealers.
A previously undocumented remote access trojan named STX RAT has been discovered targeting the financial services sector, employing multi-stage scripts, XXTEA encryption, and in-memory execution to evade detection.
Bitcoin Depot disclosed a cyber-attack on its internal systems that led to the theft of 50.903 Bitcoin (~$3.66M) on March 23, 2026.
A supply chain attack on Smart Slider 3 Pro version 3.5.1.35 for WordPress distributed a pre-authentication remote command execution backdoor through the official update channel for approximately six hours before detection.
A spear-phishing campaign linked to the South Asian APT group Bitter targeted journalists in Egypt and Lebanon from 2023 to 2025, using fake login pages to deliver ProSpy/ToSpy Android spyware.
Google Threat Intelligence Group has identified UNC6783, a financially motivated threat cluster using live chat social engineering to breach BPOs and helpdesks, bypass MFA, and extort victims.
Trend Micro's Q1 2026 threat intelligence report warns that U.S. government agencies and educational institutions are under unprecedented attack, with Salt Typhoon breaching Congress, ransomware surging, and state systems exposed.
Researchers at Unit 42 have discovered a critical IAM misconfiguration in the AWS Bedrock AgentCore starter toolkit that grants overly broad permissions, enabling a compromised AI agent to escalate privileges and access every other agent in the account.
A structural flaw in Google's API key system automatically grants existing keys access to Gemini AI endpoints, exposing over 500 million Android app installs to data theft and financial abuse.
A critical arbitrary file upload vulnerability (CVSS 9.8) in the Ninja in the Ninja Forms – File Upload Plugin for WordPress allows unauthenticated attackers to upload malicious files and achieve remote code execution, affecting versions up to 3.3.26.