Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,758 stories synthesized.
Meta paused its Model Capability Initiative after an internal security review found keystroke, mouse-movement, and screen-capture data from staff laptops was accessible across thousands of internal data tables.
A high-severity use-after-free vulnerability in Samsung's KNOX security framework, present for eight years, exposed millions of Galaxy devices to kernel-level attacks.
Key findings • Five CVEs disclosed June 21–23, 2026, affecting ImageMagick 7.1.x and 6.9.x • CVE-2026-56379 is a command injection in the SVG decoder via MVG commands • Two heap out-of-…
Key findings • Nine RCE vulnerabilities in picklescan disclosed between June 21-23, 2026, due to detection bypasses. • Flaws involve bypassing detection of standard library modules and functi…
Key findings • Four vulnerabilities disclosed in Nuxt framework between June 22-23, 2026. • Includes arbitrary file read (CVE-2026-56301) via world-connectable IPC socket on Linux dev servers…
Key findings • Nine vulnerabilities disclosed for Flowise between June 20-23, 2026, impacting versions prior to 3.1.2. • Critical flaws include Remote Code Execution (CVE-2026-56274, CVE-2024…
Abdellah Belmili, a 26-year-old Algerian national, has been extradited to the US for allegedly operating the cybercrime marketplaces Market0Day and Spoxy, which sold phishing kits and bulk SMS services targeting major financial institutions.
Hackers are using compromised Microsoft 365 accounts to power the CodeStorm phishing kit, which bypasses SPF, DKIM, and DMARC and replays credentials against Microsoft's live identity infrastructure to defeat MFA.
Arvin Shivram earned $148,337 from Google for uncovering CVE-2026-2031, a critical access control flaw in Google Cloud Application Integration that enabled remote code execution in production.
Two British teenagers linked to the Scattered Spider hacking collective have pleaded guilty to orchestrating a 2024 cyberattack on Transport for London that cost £29 million and disrupted services.
Scammers are exploiting anticipation for Grand Theft Auto VI by setting up fraudulent websites that offer 'VIP early access' for a fee paid in cryptocurrency, leaving victims with no game and no recourse.
Researchers have uncovered three malicious npm packages posing as PostCSS tools that deliver a multi-stage Windows remote access trojan, targeting developers in a supply-chain attack.
A critical integer overflow vulnerability in libssh2 (CVE-2026-55200, CVSS 9.2) lets unauthenticated attackers execute arbitrary code by sending crafted SSH packets, affecting all versions up to 1.11.1.
OpenAI has expanded its Daybreak cybersecurity initiative, combining AI models and Codex Security to help organizations identify, validate, and fix software vulnerabilities.
Fortra warns that attackers are abusing Outlook Groups and Microsoft 365 collaboration features to make phishing campaigns appear routine.
Healthcare AI company Xsolis disclosed a data breach affecting nearly 1.4 million individuals after a targeted phishing attack in January exposed personal and medical information.
Researchers developed EVOHUNT, a system that evolves a plain-text playbook to guide AI agents, achieving a 11.3% vulnerability detection rate against Codex Security's 9.2% for just $1,400.
Spur Intelligence found that 34% of scanned smart TV apps on LG webOS and Samsung Tizen contain residential proxy SDKs, turning home connections into proxy exit nodes without clear user consent.
A financially motivated threat actor has deployed the custom Golang tool FortigateSniffer across over 430,000 FortiGate firewalls globally, harvesting more than 110 million credentials since February 2026.
Ransomware group World Leaks published over 200,000 files from Tata Electronics, including confidential Apple iPhone specs and Tesla engineering drawings, exposing critical supply-chain risks.
OpenAI released GPT-5.5-Cyber, its strongest vulnerability-finding model, and launched Patch the Planet with Trail of Bits to secure open-source projects.
A SANS ISC audit of 14 patched SonicWall firewalls reveals that 12 still harbor stale local accounts and 11 never rotated passwords after firmware upgrades, explaining why Akira and Fog ransomware groups continue exploiting CVE-2024-40766 two years after the patch.
Microsoft reports that North Korean threat actor BlueNoroff compromised a Mastra npm maintainer account and published over 140 malicious packages targeting AI development environments.
The open-source CVE Lite CLI, endorsed by OWASP, now audits dependency overrides for stale or broken entries that silently leave transitive vulnerabilities unpatched.