Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,742 stories synthesized.
China's open-weight GLM-5.2 AI model matches Anthropic's Claude Mythos in detecting specific software vulnerabilities at a fraction of the cost, raising concerns about US export controls.
A new Remote Access Trojan, TONResolver, is targeting Japan's hotel sector by impersonating Booking.com in phishing attacks, uniquely leveraging the TON blockchain for resilient command-and-control communications.
Key findings • Three high-severity vulnerabilities in Google Chrome patched on June 28, 2026. • Vulnerabilities include two use-after-free flaws and one integer overflow. • Exploitation v…
The YARA-X pattern-matching tool has been updated with two new releases, adding a CPU-limit option and multiple bugfixes for malware analysts.
Mozilla researchers demonstrate a technique where a clean-looking GitHub repository tricks AI coding agents into executing hidden malware via a three-step indirection chain.
OpenAI released GPT-5.6 Sol, Terra, and Luna as a limited preview with restricted access and enhanced cybersecurity safeguards, in coordination with the U.S. government.
Infoblox reveals that over 200,000 scam websites are built using the legitimate Chinese open-source framework Uni-App, enabling a massive ecosystem of investment fraud.
Key findings • 25 Linux kernel vulnerabilities disclosed on June 27, 2026, affecting multiple subsystems. • Vulnerabilities include null pointer dereferences, use-after-free bugs, and incorre…
Key findings • Eleven Linux kernel vulnerabilities disclosed on June 27, 2026, affecting multiple subsystems. • Vulnerabilities include null pointer dereferences, hangs, and incorrect memory …
Rapid7's latest Metasploit update adds four new modules targeting critical vulnerabilities in Audiobookshelf, LiteLLM, Next.js, and Dalfox, including a CISA KEV-listed SQL injection flaw.
Key findings • Eleven vulnerabilities in Envoy disclosed on June 26, 2026, span DoS, memory corruption, and security bypasses. • Use-after-free bugs in OAuth2 filter and ext_authz, plus a hea…
Threat actors are creating fraudulent OpenAI tenants that impersonate legitimate companies and sending organization invites to employees of cybersecurity firms to steal sensitive data.
The FBI and CISA issued an updated joint advisory warning that Russian intelligence services are intensifying phishing campaigns targeting commercial messaging applications used by government and critical infrastructure personnel.
CVE-2026-46331, dubbed 'pedit COW,' is a critical Linux kernel vulnerability in the act_pedit traffic-control subsystem that lets local attackers gain root by corrupting page-cache memory without touching disk.
A high-severity flaw in Amazon Q Developer allows malicious repositories to execute arbitrary commands and steal cloud credentials via improper handling of MCP server configurations.
Google researchers detail StockStay, a new Turla malware strain developed since 2022 to spy on Ukrainian government and military, with initial samples also found across Europe.
Iranian, Russian, and Chinese state-linked hackers are exploiting weak credentials and internet-facing programmable logic controllers to breach water utilities in the US and Europe, according to a new DomainTools report.
Ukraine's SBU, working with the FBI, has exposed a long-running Russian operation that uses fake tech-support messages to steal credentials for messaging apps from officials and activists across Ukraine, Europe, and the US.
A critical flaw in Schneider Electric's Floating License Manager, CVE-2024-2658, allows local attackers to gain NT AUTHORITY\SYSTEM privileges, potentially disrupting industrial operations.
SentinelLABS has uncovered macOS.Gaslight, a Rust-based macOS implant linked to North Korean threat actors that uses a 3.5 KB prompt-injection payload to feed fabricated system messages to LLM-assisted triage tools, causing them to abort analysis.
A new Linux kernel privilege-escalation vulnerability, CVE-2026-43503 (CVSS 8.8), dubbed DirtyClone, allows local users to gain root by corrupting file-backed memory via cloned network packets.
Japan's Ground Self-Defense Force unknowingly used counterfeit USB drives infected with malware linked to a China-backed hacking group during earthquake relief operations, with the breach going undetected for 11 months.
The Linux Foundation has launched Akrites, an industry initiative that establishes a common process for vulnerability remediation and disclosure in critical open-source software, backed by major tech and financial firms.
A database containing nearly one million passport records from multiple countries was leaked online after a breach at a cannabis dispensary's ID verification platform, highlighting the risks of high-value credentials exposed through low-value ancillary systems.