Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,180 stories synthesized.
Cybersecurity researchers have identified 16 malicious Firefox extensions masquerading as popular cryptocurrency wallets like Rabby and OKX, designed to steal users' recovery phrases and private keys.
GitHub is enhancing its push protection with an AI-powered classifier to detect and block the accidental submission of sensitive credentials to code repositories.
Russia-aligned threat group UAC-0099 is using the MATCHBOIL malware to install a spying backdoor on Windows systems, exclusively targeting organizations in Ukraine.
ESET Research details the ongoing evolution of the MATCHBOIL malware, used by the Russia-aligned UAC-0099 APT group, highlighting new obfuscation techniques and sandbox evasion methods observed between 2024 and 2026.
Three critical vulnerabilities in Cisco Nexus 3000 and 9000 Series switches, affecting the NGOAM feature, allow unauthenticated remote attackers to execute code with root privileges.
Oracle Health's Cerner EHR system breach, initially reported in 2025, has now affected an estimated 20 million patients, making it one of the largest health data compromises of that year.
A small construction company ceased operations within months of a devastating ransomware attack that encrypted all its data and its sole backup, after previously rejecting cybersecurity services as too expensive.
A persistent npm malware campaign dubbed MALFEX has been discovered, targeting Windows developers by disguising malicious executables within PNG files and employing sophisticated decryption techniques to deliver RATs and info-stealers.
A new ranking of the top 10 secrets detection tools for 2026 highlights GitGuardian for its platform depth and honeytoken capabilities, with Truffle Security and GitHub's native scanning also recognized.
A new ranking of the top ten software supply chain security tools for 2026 emphasizes Chainguard for its zero-CVE hardened images, followed by Sonatype and Snyk, highlighting the need for advanced strategies beyond static checklists.
A new ranking of the top 10 API security tools for 2026 emphasizes discovery depth and behavioral detection, with Salt Security taking the top spot.
A new ranking of the top 10 Application Security Posture Management (ASPM) platforms for 2026 highlights Cycode as the leader, emphasizing its native engines and open ingestion capabilities for consolidating security findings.
Key findings • 25 Brocade vulnerabilities disclosed on October 8, 2026, impacting ASCG, Fabric OS, and SANnav products. • High-severity flaws include command injection, authentication bypass,…
Key findings • 25 Brocade Fabric OS vulnerabilities disclosed on October 8, 2026, impacting multiple versions. • High-severity flaws include command injection, authentication bypass, and priv…
A new ranking of the top ten Software Composition Analysis (SCA) tools for 2026 highlights Snyk as the best developer platform, with Sonatype and Endor Labs rounding out the top three.
A public Proof of Concept (PoC) is available for CVE-2026-59346, a critical integer overflow in VMware's VMXNET3 virtual network adapter, potentially allowing guest-to-host code execution.
A newly registered domain, teams-online[.]com, is impersonating the Microsoft Teams login page and user interface in a sophisticated phishing attempt to steal work credentials.
Key findings • Nineteen vulnerabilities disclosed simultaneously for Broadcom Fabric OS, affecting versions prior to 10.0.1. • Multiple high-severity flaws include OS command injection, privi…
Key findings • 25 security advisories for Drupal disclosed simultaneously on October 8, 2026. • All advisories link to the official Drupal security page for details. • The large number of…
Elastic has released security updates addressing 14 vulnerabilities across its Elasticsearch, Kibana, and Elastic Agent/Endpoint products, with a critical Kibana flaw allowing data interception.
Key findings • 19 vulnerabilities disclosed simultaneously for Brocade Fabric OS versions prior to 10.0.1. • Multiple high-severity flaws include authorization bypass, command injection, and …
A Florida man, Zohar Pinhasi, faces federal fraud charges for allegedly defrauding ransomware victims by claiming to possess decryption tools but instead pocketing client funds after paying ransoms.
Key findings • 25 WordPress plugins disclosed with vulnerabilities between Oct 7-8, 2026, including critical and high-severity flaws. • Key vulnerabilities include PHP Object Injection, SQL I…
Key findings • CISA added Apache Struts 2 RCE vulnerability CVE-2016-3081 to its KEV catalog. • The flaw is actively exploited, posing a significant risk to unpatched systems. • CVE-2016-…