Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,561 stories synthesized.
Wiz researchers report a 'dangerous convergence' as the TeamPCP supply chain threat group partners with Lapsus$ and Vect ransomware to validate, exfiltrate, and monetize stolen cloud and Kubernetes credentials.
The UK National Cyber Security Centre and CISA are urging organizations to urgently patch CVE-2025-53521, a critical remote code execution vulnerability in F5 BIG-IP Access Policy Manager that was reclassified from a denial-of-service flaw and is now under active exploitation.
A high-severity vulnerability in the Linux kernel's Analog Device Driver allows local attackers to escalate privileges to kernel level via improper validation of array indices in debugfs commands.
Attackers hijacked the lead maintainer's npm account to publish malicious versions of the Axios HTTP client, deploying a cross-platform RAT via a phantom dependency.
Mandiant has identified a supply chain attack on the widely used Axios npm package, with North Korea-nexus threat actor UNC1069 injecting malicious code that deploys the WAVESHAPER.V2 backdoor across Windows, macOS, and Linux.
Check Point Research has uncovered a hidden outbound communication channel in ChatGPT's code execution runtime that allows a single malicious prompt to silently exfiltrate user messages, uploaded files, and other sensitive data to external servers without triggering any safeguards or user approval.
Check Point's weekly threat intelligence report details a breach of FBI Director Patel's personal Gmail by Iranian group Handala Hack, a ransomware attack on Spain's Port of Vigo, and critical patches for Cisco and Citrix products.
The UK National Cyber Security Centre has issued an urgent alert over CVE-2025-53521, a critical unauthenticated remote code execution vulnerability in F5 BIG-IP Access Policy Manager that is being actively exploited in the wild.
A new malware campaign called DeepLoad uses ClickFix social engineering and AI-generated obfuscation to steal enterprise credentials, with a WMI-based persistence mechanism that re-infects systems three days after removal.
A critical out-of-bounds read vulnerability in Citrix NetScaler ADC and Gateway is being actively exploited in the wild, with researchers confirming attacks targeting SAML Identity Provider configurations.
The European Commission confirmed a data breach on March 24 affecting its Europa.eu cloud infrastructure, with extortion group ShinyHunters claiming responsibility for stealing over 350GB of data including emails, DKIM keys, and employee PII.
QNAP has released a security update for the QHora-322 router to fix an authentication bypass vulnerability (CVE-2025-62845) discovered at Pwn2Own Berlin 2026 by Team DDOS.
A path traversal vulnerability in OpenClaw's canvas gateway endpoint allows authenticated remote attackers to read arbitrary files on the server, potentially exposing sensitive configuration and user data.
Apple has released a security update addressing CVE-2026-20695, a macOS information disclosure vulnerability in NVRAM variable logging that could allow local attackers to access sensitive data and potentially chain with other flaws for kernel-level code execution.
QNAP has patched an authentication bypass vulnerability in QHora-322 routers, disclosed at Pwn2Own, that allows remote attackers to authenticate using an arbitrary QCloud account.
A vulnerability in NoMachine (CVE-2026-5053) allows local attackers to delete arbitrary files as root due to improper validation of a user-supplied path in environment variable handling.
A medium-severity information disclosure vulnerability in OpenClaw's OAuth PKCE verifier exposes stored credentials in the authorization URL query string, requiring user interaction to exploit.
A critical SQL injection vulnerability in QNAP QHora-322 routers, discovered during Pwn2Own, allows remote authenticated attackers to execute arbitrary code as root; QNAP has released a security update.
The Zero Day Initiative has disclosed CVE-2023-6270, a use-after-free vulnerability in the Linux kernel's ATA over Ethernet (AoE) driver that allows local attackers to escalate privileges to kernel level.
A new information disclosure vulnerability in the QNAP TS-453E NAS device, discovered during Pwn2Own, allows network-adjacent attackers to leak sensitive data via error messages, even bypassing authentication.
Trend Micro's Zero Day Initiative disclosed an authentication bypass vulnerability in OpenClaw Canvas, tracked as CVE-2026-3690, that allows remote attackers to gain unauthorized access without credentials.
A path traversal vulnerability in QNAP TS-453E devices, disclosed at Pwn2Own, allows network-adjacent attackers to execute arbitrary code as the RR2 administrator by bypassing authentication.
A critical command injection vulnerability in aws-mcp-server, CVE-2026-5058, allows unauthenticated remote code execution with a CVSS score of 9.8, and the vendor has rejected the report, leaving no patch available.
A critical out-of-bounds write vulnerability in Digilent DASYLab (CVE-2026-0954) allows remote code execution via malicious DSB files, with a patch now-available patches from the vendor.