Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,736 stories synthesized.
The sole registrar for India's mandated .bank.in domains allegedly exposed an API, leaking credentials and personal information of thousands of bank employees, undermining the initiative's security goals.
Anahi Santiago, CISO of ChristianaCare, warns that expanding hospital-at-home programs and AI integration are significantly increasing cloud security risks for healthcare organizations.
Four years into the Ukraine invasion, Russian influence operations are shifting focus back to the US and Europe, employing AI for planning and content generation to undermine Western coalitions and promote Kremlin interests.
An independent security researcher has identified 14 vulnerabilities, including critical flaws, in Indian government IT systems, potentially exposing millions of citizens' personally identifiable information.
CISA has added CVE-2026-48558, a SimpleHelp authentication bypass vulnerability, to its Known Exploited Vulnerabilities (KEV) Catalog, citing active exploitation.
An anonymous researcher has published exploit code for 15 zero-day vulnerabilities, with at least two already being exploited in the wild, raising concerns about rapid attacker adoption.
A critical pre-authentication remote code execution vulnerability, CVE-2026-8037, has been discovered in Progress Kemp LoadMaster load balancers, allowing unauthenticated attackers to gain control.
Nation-state threat actors from Iran, Russia, and China are increasingly targeting US water and wastewater facilities, exploiting common vulnerabilities for disruptive sabotage.
The latest rewrite of the Model Context Protocol (MCP) fixes a known AI agent authentication flaw but introduces new risks by offloading security responsibilities to developers.
Researchers demonstrate how a clean-looking GitHub repository can exploit AI coding agents like Claude Code to establish a reverse shell on a developer's system, granting attackers full control.
A public proof-of-concept exploit is available for CVE-2026-20251, a critical RCE vulnerability in Splunk Secure Gateway, allowing low-privileged users to execute arbitrary code.
GitHub's Advisory Database experienced an unprecedented surge in advisories in May 2026, leading to significant delays in processing and publication.
Researchers have identified a new class of weak RSA cryptographic keys containing numerous zeros, found in expired certificates for major organizations and on NetApp software, alongside a separate pattern affecting SSH hosts running CompleteFTP.
WhatsApp is rolling out an optional username feature, allowing users to create a unique handle to connect with others without revealing their phone number.
A malicious Chromium extension disguised as the AI search engine Perplexity AI has been discovered intercepting user search queries and redirecting traffic through attacker-controlled infrastructure.
Dell has released a critical security advisory for its Wyse Management Suite (WMS) versions prior to 5.5 HF1, addressing two vulnerabilities that could allow remote code execution.
A critical remote code execution vulnerability in Microsoft 365 Apps and other Office versions, CVE-2025-60727, is being exploited through specially crafted malicious Excel files.
A critical vulnerability (CVE-2026-12537) in Google's Gemini CLI and its GitHub Action enables arbitrary code execution in CI/CD pipelines, impacting versions prior to 0.39.1 and 0.1.22 respectively.
China-aligned threat group Mustang Panda is targeting Indian government and hydropower entities with new malware, leveraging Zoho WorkDrive as a covert command and control channel.
Companies like Uber and Amazon are using opaque algorithms to set worker pay, leading to unpredictable earnings and potentially controlling behavior, according to research.
A newly discovered vulnerability in the Linux kernel, dubbed DirtyClone, allows local users to escalate privileges to root by exploiting network packet manipulation.
Check Point Research's latest threat intelligence report highlights a diverse array of cyber incidents, including a supply chain attack on Polymarket, a massive data breach at Japanese telecom KDDI, and emerging AI-driven threats.
The rapid adoption of agentic AI tools introduces significant identity and access management challenges, creating new vulnerabilities for attackers to exploit.
Attackers are actively exploiting CVE-2026-46817, a critical remote code execution vulnerability in Oracle E-Business Suite, posing a significant risk to financial operations.