Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,180 stories synthesized.
Veeam Backup & Replication 12.3.2 P4 addresses four vulnerabilities, including a critical RCE flaw via insecure deserialization and an XSS vulnerability in Enterprise Manager.
A new ranking of the top 10 Dynamic Application Security Testing (DAST) tools for 2026 highlights the evolution of black-box testing, with PortSwigger's Burp Suite taking the top spot.
Attackers maintained a two-year presence within a medical organization by hiding the Vasilek backdoor inside legitimate VMware Tools installations, evading detection and exfiltrating data.
Threat actors are leveraging over 100 compromised websites to distribute the LunexStealer information-stealing malware by tricking users with fake Cloudflare verification pages.
Google's October 2026 security updates address 25 vulnerabilities across Android's Framework and System components, with one critical flaw in the System component allowing for privilege escalation.
Tuskira releases AI Agent Gateway, an open-source tool designed to prevent sensitive credentials and API keys from being embedded directly into AI agent configurations.
OpenSSH 10.6 has been released, featuring experimental support for a post-quantum signature algorithm and patching numerous security vulnerabilities, many identified with AI assistance.
A Palo Alto Networks survey reveals critical infrastructure operators struggle with network visibility due to widespread legacy equipment, despite using multiple security tools.
Ernst & Young (EY) has disclosed a data breach impacting clients of Goldman Sachs and Man Group, stemming from a vulnerability in a third-party tax support platform.
X.Org has released updates for its X server and Xwayland components, addressing twelve security vulnerabilities, nine of which could allow for arbitrary code execution.
Key findings • 24 vulnerabilities disclosed for IBM Langflow OSS on October 7, 2026, affecting versions 1.0.0 through 1.12.2. • Multiple critical and high-severity flaws allow for remote code…
Anthropic has consolidated its Cyber Verification Program (CVP) and Project Glasswing into a new three-tiered structure to provide tiered access to its AI models for security research and vulnerability discovery.
Key findings • 25 Gitea vulnerabilities disclosed on October 6, 2026, ranging from Medium to Critical severity. • Flaws impact authentication, repository permissions, and automated workflows.…
Key findings • 20 vulnerabilities disclosed for SSSD between October 5-6, 2026. • Multiple DoS vulnerabilities due to memory management, input validation, and cache issues. • Access contr…
The FortiBleed campaign remains an active threat, enabling attackers to compromise Fortinet firewalls and VPNs, leading to user lockout or serving as an entry point for ransomware attacks.
Two U.S.-bound supertankers were boarded by Coast Guard and FBI cyber specialists in August after cyberattacks exploited known, unpatched vulnerabilities in their on-board systems, a federal official revealed.
Key findings • 20 vulnerabilities disclosed simultaneously for HPE ClearPass Policy Manager on October 6, 2026. • Critical vulnerabilities include SQL injection (up to CVSS 9.9) and command i…
Key findings • Arista Networks disclosed 24 vulnerabilities on October 6, 2026, affecting Wi-Fi access points and CloudVision platforms. • Vulnerabilities range from Medium to Critical severi…
CrowdStrike researchers detail a novel attack method where adversaries break down malicious prompts into seemingly benign subtasks to bypass AI safety classifiers, enabling the generation of harmful content.
Key findings • Critical RCE vulnerability CVE-2026-55330 disclosed in Android's Bluetooth component. • Three privilege escalation flaws (CVE-2026-56952, CVE-2026-0198, CVE-2026-28625) patched…
Key findings • Google Chrome version 155.0.8059.39 patched 25 vulnerabilities disclosed on October 6, 2026. • The batch includes critical and high-severity flaws enabling arbitrary code execu…
Key findings • 25 vulnerabilities in Chromium disclosed on October 6, 2026, fixed in Chrome 155.0.8059.39. • Batch includes critical and high-severity flaws like use-after-free and race condi…
A sophisticated phishing platform is impersonating ad portals for popular AI chatbots like ChatGPT, Gemini, and Claude, aiming to steal user credentials and multi-factor authentication codes.
Former NSA Director Paul Nakasone stated a significant reorganization of the agency is likely necessary to address the accelerating pace of cyber threats, the rise of AI, and geopolitical competition.