Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,180 stories synthesized.
OpenAI's release of over 700 mathematical proofs could rapidly accelerate AI's ability to solve complex problems, potentially rendering current public key cryptography vulnerable and necessitating a swift transition to post-quantum solutions.
Microsoft's security blog emphasizes the critical need for organizations to begin testing their certificate ecosystems for post-quantum cryptography (PQC) readiness, highlighting authentication as a distinct challenge from data confidentiality.
A critical vulnerability in AWS Bedrock AgentCore, now patched, allowed attackers to compromise entire AWS environments with a single malicious prompt.
Over 100 members of Congress are urging Google and the defunct Spirit Airlines to halt a proposed $10 million deal that would allow Google to train its AI models using sensitive internal airline data.
Zohar Pinhasi, owner of MonsterCloud, faces federal charges for allegedly defrauding ransomware victims by falsely advertising proprietary decryption tools while secretly paying ransoms and pocketing millions.
An international law enforcement coalition has seized digital tools and infrastructure belonging to Beijing-based Integrity Tech, a firm accused of aiding China's state-sponsored cyber operations, including the Flax Typhoon campaign.
Key findings • Four RabbitMQ vulnerabilities disclosed between Oct 6-8, 2026, affecting Java client and amqp091-go. • High-severity CVE-2026-106122 in Java client allows DoS via malformed UTF…
US authorities have arrested Anibal Alexander Canelon Aguirre, a key figure in the Tren de Aragua cartel, for allegedly developing and distributing ATM jackpotting malware.
A high-severity vulnerability in Nvidia's DCGM Exporter could allow unauthenticated attackers to crash GPU monitoring services, disrupting AI workloads.
Malware authors are increasingly embedding natural-language instructions within their code to trick AI-powered security analysis tools, a trend Cisco Talos has dubbed 'A3: AI-Analysis Evasion'.
A ransomware affiliate has reportedly double-crossed his own gang, stealing profits and publishing victim data on a private leak site.
OpenAI has shut down sophisticated influence operations from Russia and Iran that leveraged AI tools like ChatGPT to create fake journalists and think tanks, successfully planting narratives in mainstream media.
A US federal jury convicted Maryland cybersecurity consultant Jonathan Spalletta for stealing over $54 million from cryptocurrency exchange Uranium Finance through two sophisticated smart contract exploits.
The Shai-Hulud worm has infiltrated Tensorlake's npm SDK, a platform for AI agents, stealing credentials and cloud secrets, and posing a risk to thousands of weekly downloads.
Two Python scripts, opencode-chat-replay.py and hermes_forensic_extract.py, have been released to help investigators reconstruct activity logs from popular AI coding assistants.
CISA has issued an advisory detailing multiple critical vulnerabilities in Grid Protection Alliance's openPDC and openHistorian software, potentially allowing unauthenticated remote code execution.
CISA has issued an advisory detailing three critical vulnerabilities in Satel Netco Design, versions prior to v2.1.7, including cross-site scripting, denial of service, and path traversal flaws.
CISA has issued an advisory for Red Lion Controls N-Tron 700 Series devices, detailing multiple vulnerabilities that could allow unauthorized administrative access and device reboots.
A 25-year-old man has received a two-and-a-half-year prison sentence in London for his role in a cryptocurrency theft scheme that pilfered nearly $260,000.
GreyNoise observed a surge in exploitation attempts against CVE-2021-36260, a critical command injection vulnerability in Hikvision products, targeting devices in Ukraine.
Cisco has released patches for 35 vulnerabilities, including over a dozen critical flaws affecting its Meraki, License On-Prem, NX-OS, and APIC products.
Russia-aligned threat actor UAC-0099, also known as Earth Sirrush, is using a new .NET infostealer and RAT called ASHVEIN to target Ukrainian government employees, with commands cleverly hidden within HTML files.
Key findings • 25 vulnerabilities disclosed for IBM DataPower Gateway on October 8, 2026. • Critical vulnerabilities include remote code execution via buffer overflows (CVE-2026-14269, CVE-20…
Key findings • 18 vulnerabilities disclosed for hMailServer on October 8, 2026, affecting versions 6.0.0 through 6.3.5. • Multiple denial-of-service vulnerabilities exist due to inefficient a…