Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,180 stories synthesized.
AT&T will pay $177 million to settle lawsuits stemming from two significant customer data breaches in 2024 that exposed personal details and call records for millions.
The FBI has arrested Edward Dubrovsky, co-founder of Canadian cybersecurity firm Cypfer, in Pennsylvania, linking him to the ShinyHunters ransomware group.
A war game simulation revealed how China could employ cyberattacks and information warfare to coerce Taiwan, potentially crippling communications and infrastructure without a physical invasion.
Cloudflare has launched Clef-omni, an open-weight decision model capable of processing audio, video, image, and text inputs simultaneously, alongside price reductions and performance improvements for its Clef family of models.
Key findings • Eight GIMP vulnerabilities disclosed between Oct 6-9, 2026, primarily due to integer overflows in buffer size calculations. • Vulnerabilities affect various image loaders and e…
Wordfence Intelligence has disclosed 501 vulnerabilities affecting 367 WordPress plugins and 9 themes between September 28 and October 4, 2026, with immediate firewall protection deployed for premium users against one undisclosed critical flaw.
A free, comprehensive checklist offers 222 tests across 20 categories to rigorously assess autonomous AI systems, moving beyond traditional prompt injection vulnerabilities.
Biosensor firm iRhythm disclosed a data breach affecting at least 360,000 individuals, with sensitive personal and health information accessed by attackers.
Oleg Korniev, a key figure in the Your Mule Cashout (YMCO) network, has pleaded guilty to facilitating the laundering of illicit funds for cybercriminal enterprises.
Key findings • 18 vulnerabilities disclosed across Cisagov products (N-Tron, openPDC, openHistorian, Malcolm) on Oct 8-9, 2026. • Critical and High severity flaws include hardcoded credential…
CastleStealer, a C#-based information stealer, now bypasses Chromium's App-Bound Encryption and includes a remote shell, expanding its threat beyond credential theft.
Cisco Talos researchers caution that autonomous AI agents may transition from noisy penetration tests to sophisticated, undetectable red team operations, posing a significant new threat.
A sophisticated supply-chain attack is leveraging trojanized Terraform provider workflows to distribute cross-platform malware, targeting developer systems with tools designed for macOS, Linux, and Windows.
Key findings • 25 CVEs disclosed across Apache Camel, CXF, DolphinScheduler, Geode, Jackrabbit, and YuniKorn from Oct 7-9, 2026. • Multiple Apache CXF vulnerabilities include input validation…
Cloudflare now allows developers to generate on-demand CPU and memory profiles for Workers and Durable Objects, visualized as interactive flamegraphs, to pinpoint performance bottlenecks.
Sophisticated AI agents are poised to become the next target for Business Email Compromise (BEC) attacks, as threat actors aim to manipulate these autonomous systems for infiltration.
Researchers have released a working exploit for a critical AnyDesk Linux vulnerability that allows attackers to gain root access remotely without user interaction.
A new Rust-based information stealer, Warden Stealer, is rapidly spreading through malvertising, cracked software, and fake game cheats, targeting browser data, cryptocurrency, and AI assistant credentials.
A weekly cybersecurity news roundup covers a novel AI-driven botnet, the sentencing of an Empire Market co-founder, and ongoing supply chain threats including a compromised npm SDK.
Ransomware attacks reached an unprecedented quarterly volume in Q3 2026, with a 27% increase over the previous quarter and a 61% rise year-over-year, impacting critical sectors globally.
Rapid7's Metasploit Framework has been updated with a wide array of new modules, enhancing its utility for security professionals with exploits targeting LLMs, Linux, Windows, and legacy systems.
Two critical vulnerabilities in AhsayCBS, CVE-2026-105133 and CVE-2026-105134, are being actively exploited by threat actors to achieve unauthenticated remote code execution.
Key findings • 19 vulnerabilities disclosed in Dell Secure Connect Gateway (SCG) Policy Manager on October 9, 2026. • All vulnerabilities affect versions prior to 5.34.00.16 and are fixed in …
A Proof of Concept (PoC) is available for CVE-2026-107181, a high-severity vulnerability in Telegram Desktop versions prior to 7.2.9, allowing attackers to steal local files and potentially take over accounts.