Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,561 stories synthesized.
Cloudflare has launched Clef-omni, an open-weight decision model capable of processing audio, video, image, and text inputs simultaneously, alongside price reductions and performance improvements for its Clef family of models.
Key findings • Eight GIMP vulnerabilities disclosed between Oct 6-9, 2026, primarily due to integer overflows in buffer size calculations. • Vulnerabilities affect various image loaders and e…
Wordfence Intelligence has disclosed 501 vulnerabilities affecting 367 WordPress plugins and 9 themes between September 28 and October 4, 2026, with immediate firewall protection deployed for premium users against one undisclosed critical flaw.
A free, comprehensive checklist offers 222 tests across 20 categories to rigorously assess autonomous AI systems, moving beyond traditional prompt injection vulnerabilities.
Oleg Korniev, a key figure in the Your Mule Cashout (YMCO) network, has pleaded guilty to facilitating the laundering of illicit funds for cybercriminal enterprises.
Biosensor firm iRhythm disclosed a data breach affecting at least 360,000 individuals, with sensitive personal and health information accessed by attackers.
Key findings • 18 vulnerabilities disclosed across Cisagov products (N-Tron, openPDC, openHistorian, Malcolm) on Oct 8-9, 2026. • Critical and High severity flaws include hardcoded credential…
CastleStealer, a C#-based information stealer, now bypasses Chromium's App-Bound Encryption and includes a remote shell, expanding its threat beyond credential theft.
Cisco Talos researchers caution that autonomous AI agents may transition from noisy penetration tests to sophisticated, undetectable red team operations, posing a significant new threat.
A sophisticated supply-chain attack is leveraging trojanized Terraform provider workflows to distribute cross-platform malware, targeting developer systems with tools designed for macOS, Linux, and Windows.
Key findings • 25 CVEs disclosed across Apache Camel, CXF, DolphinScheduler, Geode, Jackrabbit, and YuniKorn from Oct 7-9, 2026. • Multiple Apache CXF vulnerabilities include input validation…
Sophisticated AI agents are poised to become the next target for Business Email Compromise (BEC) attacks, as threat actors aim to manipulate these autonomous systems for infiltration.
Cloudflare now allows developers to generate on-demand CPU and memory profiles for Workers and Durable Objects, visualized as interactive flamegraphs, to pinpoint performance bottlenecks.
Researchers have released a working exploit for a critical AnyDesk Linux vulnerability that allows attackers to gain root access remotely without user interaction.
A new Rust-based information stealer, Warden Stealer, is rapidly spreading through malvertising, cracked software, and fake game cheats, targeting browser data, cryptocurrency, and AI assistant credentials.
A weekly cybersecurity news roundup covers a novel AI-driven botnet, the sentencing of an Empire Market co-founder, and ongoing supply chain threats including a compromised npm SDK.
Ransomware attacks reached an unprecedented quarterly volume in Q3 2026, with a 27% increase over the previous quarter and a 61% rise year-over-year, impacting critical sectors globally.
Rapid7's Metasploit Framework has been updated with a wide array of new modules, enhancing its utility for security professionals with exploits targeting LLMs, Linux, Windows, and legacy systems.
Two critical vulnerabilities in AhsayCBS, CVE-2026-105133 and CVE-2026-105134, are being actively exploited by threat actors to achieve unauthenticated remote code execution.
Key findings • 19 vulnerabilities disclosed in Dell Secure Connect Gateway (SCG) Policy Manager on October 9, 2026. • All vulnerabilities affect versions prior to 5.34.00.16 and are fixed in …
A Proof of Concept (PoC) is available for CVE-2026-107181, a high-severity vulnerability in Telegram Desktop versions prior to 7.2.9, allowing attackers to steal local files and potentially take over accounts.
A new ranking of container image scanning tools for 2026 emphasizes context and prioritization over raw CVE detection, with Aqua's Trivy leading as the best free option.
A critical vulnerability in the GoBalance tool allows attackers to recover the private key controlling a .onion address, enabling the hijacking of dark web sites.
Anthropic introduces OSS Scanner, a free AI-powered tool designed to automatically identify and report security vulnerabilities in critical open-source software repositories.