Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,387 stories synthesized.
Threat actors are leveraging public blockchain networks as a resilient command-and-control (C2) layer for supply chain malware, evading traditional defenses and enabling dynamic infrastructure rotation.
Raheim Hamilton, a co-creator of the notorious dark web marketplace Empire Market, has been sentenced to 40 years in federal prison for his role in facilitating over $430 million in illegal transactions.
Researchers discovered thousands of inexpensive Android phones pre-loaded with unremovable ad-fraud malware, bypassing typical security measures.
Tenable has launched the Exchange Inspector, a security vetting process for open-source AI agents, leveraging OpenAI's GPT models and its own AI Exposure platform.
The GhostAction supply chain campaign has compromised 772 public GitHub repositories by injecting malicious GitHub Actions workflow files to steal CI/CD credentials.
UK and international partners have exposed a China-linked company, Integrity Technology Group, for enabling sophisticated cyberattacks using AI and botnets to steal sensitive data worldwide.
A critical unauthenticated arbitrary file upload vulnerability (CVE-2026-85097) in the Bricksforge WordPress plugin is being actively exploited in the wild, allowing attackers to achieve remote code execution.
Anthropic's latest budget-friendly AI model, Claude Haiku 5.5, demonstrates significant improvements in identifying vulnerabilities and generating exploits, alongside enhanced safeguards against misuse and prompt injection attacks.
Dictatorships are increasingly leveraging artificial intelligence to bolster surveillance, automate propaganda, and reduce reliance on potentially disloyal human subordinates, according to a new analysis.
Gitea has released version 28.1.0, addressing 27 vulnerabilities, notably a critical SSH authentication bypass (CVE-2026-103059) and several SSRF flaws.
A new phishing kit named Wazza employs sophisticated multi-stage routing and filtering to evade detection and target banking, government, and manufacturing sectors across the US, EU, and Australia.
The wolfSSH library has been updated to version 1.6.0, patching five security vulnerabilities, with the most critical allowing for man-in-the-middle attacks and server impersonation.
A sophisticated APT campaign is using AI-generated lures and an advanced adversary-in-the-middle framework to target Taiwanese research institutions, aiming to steal credentials and MFA codes.
Cisco Talos Intelligence has identified a new malware archetype, 'A3: AI-Analysis Evasion,' which embeds natural-language instructions to deceive automated AI analysis tools, marking a new front in the battle between attackers and defenders.
The accelerating development of quantum computers poses a significant risk to current encryption standards, potentially compromising sensitive data globally and necessitating immediate action from Washington.
Cybersecurity researchers have identified 16 malicious Firefox extensions masquerading as popular cryptocurrency wallets like Rabby and OKX, designed to steal users' recovery phrases and private keys.
GitHub is enhancing its push protection with an AI-powered classifier to detect and block the accidental submission of sensitive credentials to code repositories.
Russia-aligned threat group UAC-0099 is using the MATCHBOIL malware to install a spying backdoor on Windows systems, exclusively targeting organizations in Ukraine.
ESET Research details the ongoing evolution of the MATCHBOIL malware, used by the Russia-aligned UAC-0099 APT group, highlighting new obfuscation techniques and sandbox evasion methods observed between 2024 and 2026.
Three critical vulnerabilities in Cisco Nexus 3000 and 9000 Series switches, affecting the NGOAM feature, allow unauthenticated remote attackers to execute code with root privileges.
Oracle Health's Cerner EHR system breach, initially reported in 2025, has now affected an estimated 20 million patients, making it one of the largest health data compromises of that year.
A small construction company ceased operations within months of a devastating ransomware attack that encrypted all its data and its sole backup, after previously rejecting cybersecurity services as too expensive.
A persistent npm malware campaign dubbed MALFEX has been discovered, targeting Windows developers by disguising malicious executables within PNG files and employing sophisticated decryption techniques to deliver RATs and info-stealers.
A new ranking of the top 10 secrets detection tools for 2026 highlights GitGuardian for its platform depth and honeytoken capabilities, with Truffle Security and GitHub's native scanning also recognized.