Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,179 stories synthesized.
Key findings • 18 vulnerabilities disclosed for FreeRDP on October 12, 2026, ranging from Low to High severity. • Multiple memory corruption flaws including double-free, heap overflows, and u…
Attackers rapidly exploited a critical Atlassian vulnerability, a ransomware recovery firm's CEO faced charges, and the FBI disrupted tools used by China-linked Flax Typhoon.
Food retail giant Ahold Delhaize has taken significant IT systems offline as a precautionary measure following the detection of a security incident, impacting customer services across its various brands.
Check Point Research's latest threat intelligence report highlights significant data breaches in Denmark and Ukraine, alongside emerging AI-powered cyber threats and critical vulnerabilities in enterprise software.
Cloudflare's new Logpush Transformers feature allows users to filter, reshape, and redact log data in real-time before it's exported, reducing costs and simplifying downstream analysis.
A critical vulnerability in Google's DevSite platform enabled unauthenticated attackers to forge Flask session cookies and achieve remote code execution.
A sophisticated attack chain begins with a malicious ZIP attachment distributed via WhatsApp, deploying the VulcanRAT207.A remote access trojan that escalates to SYSTEM-level privileges on Windows.
Key findings • Eleven authorization vulnerabilities disclosed in jshERP through version 3.6 on October 12, 2026. • High-severity flaws include mass assignment allowing password overwrites and…
Ukraine has reportedly targeted a third Yandex data center in Russia with drones, causing widespread disruptions to critical digital services across the country.
Canonical, the company behind Ubuntu, experienced a significant outage affecting its main websites and developer portal due to a distributed denial-of-service (DDoS) attack.
The rapid adoption of personal AI agents is creating significant security and privacy challenges for enterprises as employees increasingly connect these tools to corporate systems without IT oversight.
Researchers have identified new Unicode characters that allow attackers to craft highly convincing lookalike domains, bypassing browser defenses and tricking users into visiting malicious sites.
Microsoft has introduced Decision-1, a compact model designed to help AI agents evaluate options and make calibrated probability-based decisions, aiming to improve security and trust in AI applications.
Microsoft is investigating an issue causing an "Internal Server Error" that prevents some administrators from accessing the Exchange admin center, impacting management of Exchange Online services.
The Casbaneiro banking trojan employs a sophisticated evasion technique, delaying command and control (C2) traffic until a victim visits a targeted banking website, making it difficult to detect.
The FBI has announced a third arrest in connection with the Shiny Hunters cyber extortion group's breach of its systems, as a podcast discussion highlights the increasing capabilities of AI in cybersecurity and its potential to reshape the threat landscape.
AI agents are increasingly becoming targets and vectors for software supply chain attacks, with recent incidents involving OpenAI and Anthropic models highlighting risks in package registries and model repositories.
Ledger hardware wallets sold through a Southeast Asian reseller, CryptoBilis, have been implicated in a sophisticated attack involving a hidden hardware implant, leading to an estimated $93 million in cryptocurrency theft.
Despite patches released in May, ransomware groups Qilin and Settra are actively exploiting a critical Palo Alto Networks VPN vulnerability, CVE-2026-0257, to gain initial network access.
Japanese karaoke operator Daiichi Kosho disclosed a data breach at a supplier, potentially exposing the personal information of up to 8.8 million customers.
Decepticon, a new open-source autonomous red team agent, integrates AI reasoning with hands-on security testing, connecting to models like Claude and OpenAI Codex for advanced attack path execution.
Microsoft is urging users to update Windows PCs before May/June 2027, when critical update verification certificates expire, potentially blocking access to security fixes.
This week's security landscape was dominated by sophisticated AI-powered phishing, a widespread domain hijacking campaign, and significant data breaches affecting major retailers.
A vulnerability in Discourse's image upload pipeline allowed basic users to read server files by chaining JPEG processing delays, Ghostscript, and ImageMagick.