Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,563 stories synthesized.
North Korean threat actor Void Dokkaebi has weaponized fake job interviews to turn compromised developer repositories into worm-like infection vectors, infecting over 750 repos in March 2026 alone.
A surge in phishing emails with empty subject lines is targeting high-value users, exploiting blind spots in email defenses and leveraging legitimate remote monitoring tools for persistence.
A malicious website posing as an AI-powered trading assistant called TradingClaw is distributing Needle Stealer, a modular Golang infostealer that can hijack browser sessions, steal cryptocurrency wallets, and install malicious browser extensions.
The UK National Cyber Security Centre has developed SilentGlass, a plug-and-play hardware device that protects HDMI and DisplayPort connections from malicious data injection, now licensed to Goldilock Labs for global commercial sale.
Cisco Talos Incident Response Q1 2026 trends show phishing surged to over a third of engagements, with public administration and healthcare tied as most targeted verticals.
Unit 42 researchers have unveiled AirSnitch, a set of novel attack techniques that bypass WPA2 and WPA3-Enterprise encryption by exploiting low-level protocol-infrastructure interactions, affecting devices from multiple major vendors.
Apple released iOS 26.4.2 on April 22, 2026, with security patches that the company has not detailed in its public release notes, urging users to update promptly.
Apple released iPadOS 26.4.2 (build 23E261) on April 22, 2026, addressing undisclosed security vulnerabilities in the operating system.
Infrawatch researchers have identified ProxySmart, a Belarus-based software platform that provides a turnkey 'SIM Farm as a Service' solution, powering over 90 phone farms across 17 countries and 19 US states.
This week's Risky Business podcast covers a Vercel security incident tied to an infostealer infection, Mozilla's use of Anthropic's Mythos to fix 271 Firefox bugs, and NIST's decision to limit vulnerability analysis amid a swelling CVE backlog.
GitLab released versions 18.11.1, 18.10.4, and 18.9.6 on April 22, 2026, fixing multiple high-severity vulnerabilities including a CSRF in the GraphQL API and a path-equivalence issue in the Web IDE.
Oracle's second quarterly security update of 2026 fixes 241 unique CVEs with 481 patches, including 34 critical-severity fixes, with Oracle Communications receiving the most patches.
Threat actors are using three publicly available proof-of-concept exploits—BlueHammer, RedSun, and UnDefend—to turn Microsoft Defender's cleanup functions into attack vectors, granting SYSTEM-level access and degrading threat detection.
ESET has uncovered a new NGate malware variant that uses a trojanized version of the legitimate HandyPay NFC relay app to steal payment app to steal card data and PINs from Android users, primarily in Brazil.
Attackers are actively exploiting a critical unauthenticated RCE vulnerability in BeyondTrust Remote Support (Bomgar) to deploy LockBit ransomware and compromise downstream clients via MSP supply chains.
Google has fixed a critical vulnerability in its Antigravity agentic IDE that allowed attackers to escape the Secure Mode sandbox and achieve remote code execution through a prompt injection attack.
Rapid7 has analyzed Kyber ransomware, a new cross-platform family that simultaneously encrypts VMware ESXi datastores and Windows systems using distinct cryptographic implementations.
The Gentlemen ransomware-as-a-service operation has claimed over 320 victims since mid-2025, with affiliates using cross-platform encryptors and post-exploitation tools like SystemBC and Cobalt Strike.
Cisco Talos reports that phishing remained the top initial access vector in 2025, with attackers increasingly using cascaded campaigns from compromised trusted accounts and abusing Microsoft 365 Direct Send to spoof internal emails.
Chinese state-sponsored APT Mustang Panda is targeting Indian banks, including HDFC Bank, alongside US and South Korean policy circles using spear-phishing and DLL sideloading to deploy the LotusLite backdoor.
Cisco Talos has published research detailing how adversaries can abuse native macOS features like Remote Application Scripting and Spotlight metadata for lateral movement, payload staging, and persistence, bypassing traditional security monitoring.
Vercel confirmed a cyber incident where a sophisticated attacker exploited a third-party tool, Context.ai, to compromise an employee's Google Workspace account and access internal environments.
ESET researchers have uncovered a new NGate malware variant that trojanizes the legitimate Android NFC relay app HandyPay, enabling attackers to steal payment card data and PINs for contactless ATM cash-outs.
North Korea's Lazarus Group is accused of stealing $293 million from liquid restaking protocol KelpDAO by exploiting a single-point-of-failure configuration in LayerZero's cross-chain messaging infrastructure.