Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,283 stories synthesized.
Dictatorships are increasingly leveraging artificial intelligence to bolster surveillance, automate propaganda, and reduce reliance on potentially disloyal human subordinates, according to a new analysis.
Gitea has released version 28.1.0, addressing 27 vulnerabilities, notably a critical SSH authentication bypass (CVE-2026-103059) and several SSRF flaws.
A new phishing kit named Wazza employs sophisticated multi-stage routing and filtering to evade detection and target banking, government, and manufacturing sectors across the US, EU, and Australia.
The wolfSSH library has been updated to version 1.6.0, patching five security vulnerabilities, with the most critical allowing for man-in-the-middle attacks and server impersonation.
A sophisticated APT campaign is using AI-generated lures and an advanced adversary-in-the-middle framework to target Taiwanese research institutions, aiming to steal credentials and MFA codes.
Cisco Talos Intelligence has identified a new malware archetype, 'A3: AI-Analysis Evasion,' which embeds natural-language instructions to deceive automated AI analysis tools, marking a new front in the battle between attackers and defenders.
The accelerating development of quantum computers poses a significant risk to current encryption standards, potentially compromising sensitive data globally and necessitating immediate action from Washington.
Cybersecurity researchers have identified 16 malicious Firefox extensions masquerading as popular cryptocurrency wallets like Rabby and OKX, designed to steal users' recovery phrases and private keys.
GitHub is enhancing its push protection with an AI-powered classifier to detect and block the accidental submission of sensitive credentials to code repositories.
Russia-aligned threat group UAC-0099 is using the MATCHBOIL malware to install a spying backdoor on Windows systems, exclusively targeting organizations in Ukraine.
ESET Research details the ongoing evolution of the MATCHBOIL malware, used by the Russia-aligned UAC-0099 APT group, highlighting new obfuscation techniques and sandbox evasion methods observed between 2024 and 2026.
Three critical vulnerabilities in Cisco Nexus 3000 and 9000 Series switches, affecting the NGOAM feature, allow unauthenticated remote attackers to execute code with root privileges.
Oracle Health's Cerner EHR system breach, initially reported in 2025, has now affected an estimated 20 million patients, making it one of the largest health data compromises of that year.
A small construction company ceased operations within months of a devastating ransomware attack that encrypted all its data and its sole backup, after previously rejecting cybersecurity services as too expensive.
A persistent npm malware campaign dubbed MALFEX has been discovered, targeting Windows developers by disguising malicious executables within PNG files and employing sophisticated decryption techniques to deliver RATs and info-stealers.
A new ranking of the top 10 secrets detection tools for 2026 highlights GitGuardian for its platform depth and honeytoken capabilities, with Truffle Security and GitHub's native scanning also recognized.
A new ranking of the top ten software supply chain security tools for 2026 emphasizes Chainguard for its zero-CVE hardened images, followed by Sonatype and Snyk, highlighting the need for advanced strategies beyond static checklists.
A new ranking of the top 10 API security tools for 2026 emphasizes discovery depth and behavioral detection, with Salt Security taking the top spot.
A new ranking of the top 10 Application Security Posture Management (ASPM) platforms for 2026 highlights Cycode as the leader, emphasizing its native engines and open ingestion capabilities for consolidating security findings.
Key findings • 25 Brocade vulnerabilities disclosed on October 8, 2026, impacting ASCG, Fabric OS, and SANnav products. • High-severity flaws include command injection, authentication bypass,…
Key findings • 25 Brocade Fabric OS vulnerabilities disclosed on October 8, 2026, impacting multiple versions. • High-severity flaws include command injection, authentication bypass, and priv…
A new ranking of the top ten Software Composition Analysis (SCA) tools for 2026 highlights Snyk as the best developer platform, with Sonatype and Endor Labs rounding out the top three.
A public Proof of Concept (PoC) is available for CVE-2026-59346, a critical integer overflow in VMware's VMXNET3 virtual network adapter, potentially allowing guest-to-host code execution.
A newly registered domain, teams-online[.]com, is impersonating the Microsoft Teams login page and user interface in a sophisticated phishing attempt to steal work credentials.