Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,180 stories synthesized.
Key findings • 18 vulnerabilities disclosed for hMailServer on October 8, 2026, affecting versions 6.0.0 through 6.3.5. • Multiple denial-of-service vulnerabilities exist due to inefficient a…
Key findings • 25 medium-severity vulnerabilities disclosed for ImageMagick between Oct 7-8, 2026. • Issues span multiple decoders (CALS, MAT, MVG, RSVG) and encoders (CUT, PostScript). •…
Microsoft Teams will soon allow certified third-party providers to detect synthetic audio and video, aiming to combat deepfake attacks within meetings.
Generative AI is transforming phishing attacks into highly personalized, sophisticated threats that bypass traditional defenses, prompting the development of AI-driven counter-measures.
A critical business-logic flaw in Sungrow's iSolarCloud platform enabled attackers to bypass password authentication and gain unauthorized access to solar plant management systems.
Insignary has released Clarity AIR, a new tool designed to scan source code directly and identify open-source and AI-generated code that developers may not have declared in manifests or SBOMs.
Leaked chats reveal a Russian-based extortion group, linked to Silent Ransom Group, plotted to send operatives into US law firms to steal data and extort victims.
Threat actors are targeting hotels with phishing emails containing fake negative reviews, leading staff to download malware that uses public blockchains for command and control.
A dark web seller is reportedly offering a VirusTotal Enterprise API key for $350, sparking concerns about potential misuse of threat intelligence data.
Threat actors are leveraging public blockchain networks as a resilient command-and-control (C2) layer for supply chain malware, evading traditional defenses and enabling dynamic infrastructure rotation.
Raheim Hamilton, a co-creator of the notorious dark web marketplace Empire Market, has been sentenced to 40 years in federal prison for his role in facilitating over $430 million in illegal transactions.
Researchers discovered thousands of inexpensive Android phones pre-loaded with unremovable ad-fraud malware, bypassing typical security measures.
Tenable has launched the Exchange Inspector, a security vetting process for open-source AI agents, leveraging OpenAI's GPT models and its own AI Exposure platform.
The GhostAction supply chain campaign has compromised 772 public GitHub repositories by injecting malicious GitHub Actions workflow files to steal CI/CD credentials.
UK and international partners have exposed a China-linked company, Integrity Technology Group, for enabling sophisticated cyberattacks using AI and botnets to steal sensitive data worldwide.
A critical unauthenticated arbitrary file upload vulnerability (CVE-2026-85097) in the Bricksforge WordPress plugin is being actively exploited in the wild, allowing attackers to achieve remote code execution.
Anthropic's latest budget-friendly AI model, Claude Haiku 5.5, demonstrates significant improvements in identifying vulnerabilities and generating exploits, alongside enhanced safeguards against misuse and prompt injection attacks.
Dictatorships are increasingly leveraging artificial intelligence to bolster surveillance, automate propaganda, and reduce reliance on potentially disloyal human subordinates, according to a new analysis.
Gitea has released version 28.1.0, addressing 27 vulnerabilities, notably a critical SSH authentication bypass (CVE-2026-103059) and several SSRF flaws.
A new phishing kit named Wazza employs sophisticated multi-stage routing and filtering to evade detection and target banking, government, and manufacturing sectors across the US, EU, and Australia.
The wolfSSH library has been updated to version 1.6.0, patching five security vulnerabilities, with the most critical allowing for man-in-the-middle attacks and server impersonation.
A sophisticated APT campaign is using AI-generated lures and an advanced adversary-in-the-middle framework to target Taiwanese research institutions, aiming to steal credentials and MFA codes.
Cisco Talos Intelligence has identified a new malware archetype, 'A3: AI-Analysis Evasion,' which embeds natural-language instructions to deceive automated AI analysis tools, marking a new front in the battle between attackers and defenders.
The accelerating development of quantum computers poses a significant risk to current encryption standards, potentially compromising sensitive data globally and necessitating immediate action from Washington.