Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 323 stories synthesized.
A cyberattack that disabled Taiwan's bullet train system for nearly an hour has sparked global concerns regarding the resilience of critical infrastructure against state-sponsored threats.
A new Linux vulnerability known as 'Dirty Frag' (CVE-2026-43284 and CVE-2026-43500) has been disclosed, with reports suggesting it may already be under exploitation.
A malicious repository impersonating OpenAI's 'Privacy Filter' on Hugging Face has been used to distribute a Rust-based information stealer to over 244,000 users.
The latest weekly security roundup from Malwarebytes Labs summarizes key incidents and developments from May 4th through May 10th, 2026.
Rustinel is a new open-source endpoint detection agent that provides a unified telemetry collection framework for both Windows and Linux systems.
The second edition of Jason Andress's 'Foundations of Cybersecurity' has been released, updating core security concepts to include cloud, mobile, IoT, and AI threats.
A World Economic Forum report reveals that 77% of organizations are now utilizing AI to manage cybersecurity alert overload and improve incident response.
A multi-year phishing campaign has impacted more than 500 organizations across critical infrastructure, aviation, and energy sectors.
The latest SANS Internet Storm Center Stormcast podcast provides a summary of cybersecurity news and technical updates for May 11th, 2026.
YARA-X version 1.16.0 has been released, featuring four improvements and four bug fixes to enhance the tool's performance.
A malvertising campaign is using deceptive Google Ads and Claude.ai shared chats to trick Mac users into downloading and installing malware.
German authorities have shut down a relaunched version of the criminal marketplace 'Crimenetwork' and arrested its operator in Spain.
A critical out-of-bounds read vulnerability in Ollama, codenamed 'Bleeding Llama,' could allow remote attackers to leak process memory.
Help Net Security's weekly review covers the active exploitation of a cPanel vulnerability, the DigiCert breach, and concerns over data collection by workplace apps.
The JDownloader website was compromised to distribute malicious installers that deploy a Python-based remote access trojan to Windows and Linux systems.
A malicious repository impersonating OpenAI's "Privacy Filter" project on Hugging Face was used to distribute information-stealing malware.
cPanel has released patches for three vulnerabilities in cPanel and WHM that could lead to privilege escalation, code execution, and denial-of-service.
A cryptographic vulnerability in the MAXHUB Pivot client application could allow unauthorized access to sensitive tenant information or cause a denial-of-service.
CISA has added a SQL injection vulnerability in BerriAI LiteLLM to its Known Exploited Vulnerabilities catalog following reports of active exploitation.
The latest 'Friday Squid Blogging' post covers the discovery of giant squid in Western Australia while inviting discussion on current security news.
General Motors will pay over $12 million in a California privacy settlement, marking the largest fine under the California Consumer Privacy Act to date.
The administrator of the illicit Kingdom Market platform has been sentenced to 16 years in prison for his role in facilitating criminal activity.
A new Brazilian banking trojan named TCLBANKER is targeting financial platforms by spreading through WhatsApp and Outlook worms.
Research suggests that insider trading may be occurring on the prediction market platform Polymarket, particularly regarding bets on military and defense actions.
