Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,562 stories synthesized.
DigiCert has confirmed a data breach involving an internal business system that stored customer contact details and identity documents, including passports and driver's licenses.
A Paubox survey reveals a significant governance gap in healthcare, with 70% of organizations finding unapproved AI tools processing patient data, despite 90% claiming to review AI-generated code.
White House staffers are inadvertently renting out their internet addresses through residential proxy services, exposing the Executive Office of the President's network to potential exploitation.
Web hosting provider DreamHost has confirmed a data breach resulting from the exploitation of its web-based File Manager, leading to the exposure of customer FTP/SFTP and webmail credentials.
An automated research pipeline powered by OpenAI's advanced cyber model has identified 948 distinct privilege escalation vulnerabilities within the Linux kernel.
Infisical has raised $40 million in Series B funding to develop advanced security features for AI agents, focusing on credential isolation and secure operational workflows.
Advanced AI models, with human guidance, can now autonomously execute individual stages of multi-stage attacks against unfamiliar OT networks, lowering the barrier to entry for attackers.
Apple will begin scanning publicly shared iCloud links for "harmful content" in upcoming OS versions, disabling end-to-end encryption for these shared items.
A deceptive campaign is using fake $750 Apple Cash reward offers to trick users into downloading apps and engaging with promotions, leveraging Apple's brand recognition for credibility.
Security Operations Center leaders face increasing pressure to enhance threat detection and investigation capabilities by integrating advanced threat intelligence into daily workflows.
SonicWall has announced it will not issue patches for two critical vulnerabilities affecting its end-of-life Global Management System (GMS) versions 9.5.2 and earlier.
A vulnerability in Debian's APT package manager, CVE-2026-109518, enables network attackers to replace verified software packages with malicious versions, leading to root code execution.
Key findings • 25 vulnerabilities disclosed in FreeRDP, affecting versions prior to 3.32.2. • Critical vulnerabilities include use-after-free and out-of-bounds writes (CVE-2026-121953, CVE-20…
The Kyiv Independent, a prominent Ukrainian news outlet, experienced a cyberattack attributed to suspected Russian actors, disrupting its website and newsletter distribution.
An IT specialist with Top Secret clearance has pleaded guilty to espionage charges for transmitting classified US government documents to Ethiopia, admitting to accessing and copying over 100 intelligence reports without authorization.
Researchers have developed a novel technique to elevate HTTP header injection vulnerabilities into critical CRLF-powered desynchronization attacks, enabling redirection of users to attacker-controlled servers with a single malicious prompt.
Cycurion introduces Habit, an AI-driven Security Operations Center designed to proactively identify and validate threats by learning normal system behavior, marking a strategic shift towards predictive cybersecurity.
Sysdig has launched Sysdig AI Defense, a new platform designed to provide runtime security and governance for autonomous AI agents, addressing the growing risks associated with their increasing capabilities.
Descope's new Envoy capability allows personal AI agents to authenticate with consumer applications, treating them as distinct users without requiring developers to overhaul existing authentication systems.
BlueFlag Security's updated platform provides granular control over AI agents operating under developer credentials, addressing risks from shadow AI to autonomous code commits.
Russian state hackers, identified as APT29/Cozy Bear, are conducting a sophisticated watering hole campaign against iOS and Android users to steal browser cookies and sensitive data.
Russian web hosting provider Beget is grappling with a severe cyberattack that has destroyed data across its cloud infrastructure, impacting hundreds of websites and services.
Cloudflare introduces new analytics and access policies to help website owners manage the growing traffic from personal AI agents.
Joe Security introduces Adaptive Detonation, a new feature for its Joe Sandbox Cloud platform that uses AI agents to overcome malware evasion techniques, enhancing threat analysis.