Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,734 stories synthesized.
Researchers have discovered a method to circumvent ChatGPT's safety filters, enabling the generation of disturbing violent and sexual imagery, highlighting persistent challenges in AI content moderation.
Anthropic's latest AI model, Claude Sonnet 5, features improved reasoning and tool-use capabilities with integrated safeguards against malicious cyber applications.
Adobe has released urgent patches for seven maximum-severity vulnerabilities affecting its ColdFusion and Campaign Classic platforms, with some flaws already being targeted by exploits.
Anthropic has restored worldwide access to its Claude Fable 5 AI model following the U.S. Commerce Department's decision to lift export controls imposed due to concerns over potential misuse, particularly jailbreaking.
Google has released a significant update for its Chrome browser, addressing 382 security vulnerabilities, with 15 classified as critical and 67 as high severity.
A new episode of Risky Business highlights China's rapid advancement in AI vulnerability development, juxtaposed with US regulatory actions on advanced AI models like Anthropic's Fable 5 and OpenAI's GPT-5.6.
Payments company PhonePe has open-sourced Nika, a Java microservice security tool that uses cross-file taint analysis to uncover complex vulnerabilities missed by single-file scanners.
Cloudflare's latest report reveals AI training crawlers now constitute 52% of identified crawler traffic, signaling a fundamental shift in the internet's economic model and challenging traditional content monetization.
An automated password spray campaign has targeted Microsoft's Azure CLI, attempting over 81 million password combinations against at least 78 accounts.
Researchers at the University of Cologne have developed the RAMSES supercomputer, capable of encrypting data even while it is actively being processed in memory, closing a critical security gap.
A new phishing campaign is targeting Metamask users by tricking them into revealing their secret recovery phrases through a fake wallet security alert.
A recent survey indicates nearly half of engineering organizations are deploying AI-generated code in production, raising significant concerns for security, legal, and compliance teams.
Two critical vulnerabilities in Apache Tomcat, CVE-2026-55957 and CVE-2026-55956, allow attackers to bypass authentication and access protected resources.
Attackers are weaponizing Large Language Models' tendency to invent non-existent domains, creating a new 'phantom squatting' threat vector targeting software supply chains.
Key findings • CVE-2026-45659, a Microsoft vulnerability, has been added to CISA's KEV Catalog. • The vulnerability is confirmed to be under active exploitation by threat actors. • Organi…
CrowdStrike highlights that attackers increasingly leverage known, unpatched browser flaws combined with social engineering and chained exploits, moving beyond solely relying on zero-days.
Google Threat Intelligence reports Russia is expanding AI-enabled influence operations beyond Ukraine to target the EU and NATO, leveraging proxy networks and hacktivists.
Medical device manufacturer Medtronic has begun notifying patients of a data breach claimed by the ShinyHunters ransomware group, which alleges the theft of over 9 million records.
Proton has upgraded its AI assistant, Lumo 2.0, introducing advanced multimodal features, memory functions, and enhanced web search, all while maintaining its core zero-access encryption for user privacy.
Aikido Security has acquired Root for $70 million, integrating automated vulnerability remediation into its application security platform to enhance open-source package hardening and reduce supply-chain risk.
Microsoft is fast-tracking its transition to quantum-resistant cryptography, aiming to secure critical products and services by 2029 due to accelerating advances in quantum computing.
New research reveals that AI models can be tricked into executing harmful commands by mimicking legitimate user input, bypassing critical safety controls.
A persistent campaign has been distributing trojanized Python packages on PyPI, granting attackers the ability to read arbitrary files on compromised Telegram bot servers.
Fake Amazon job offers via SMS and email are luring victims into task scams, promising high pay for minimal work and leading to financial loss or data theft.