Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,184 stories synthesized.
Attackers are distributing legitimate MSP360 Remote Monitoring and Management and ConnectWise ScreenConnect installers disguised as Zoom or PDF updates via phishing emails, tricking users into granting administrator access.
Higher education institutions are facing an unprecedented surge in cyberattacks, with fragmented security operations exacerbating vulnerabilities and increasing response costs.
AI-discovered vulnerabilities are more likely to lead to remote code execution (RCE) compared to those found by human researchers, according to new analysis from Google's Project Zero.
Ukrainian researchers have identified a surge in Russian-linked mobile malware campaigns, including the 'DarkSword' exploit kit specifically targeting iPhones, alongside new Android malware.
Microsoft Threat Intelligence tracked exploitation of CVE-2026-73570, an unauthenticated OS command injection vulnerability in Zimbra Collaboration Suite, impacting internet-facing mail servers.
Attackers exploited two chained zero-day vulnerabilities in PaperCut MF to gain initial access, moving from a print server to a domain controller in under two days to steal credentials and exfiltrate sensitive data.
Cloudflare's new "Issues" feature for Workers automatically groups production errors and forwards them to AI coding agents for automated triaging and potential fixes.
Cloudflare's new AI Gateway Auto Router beta aims to cut AI token costs by up to 30% by intelligently routing requests to the most cost-effective capable model.
Cloudflare has launched a beta version of its Monetization Gateway, a new service designed to allow website owners to charge AI agents for accessing their resources using the HTTP 402 status code.
Cloudflare's new beta service, Pay Per Use, aims to create a direct revenue stream for publishers whose content is consumed by AI models, addressing the growing issue of AI scraping without compensation.
Cloudflare has revamped its domain registration service, introducing an AI-friendly API, a new command-line interface, and a significantly improved search experience for domain discovery.
AI agents now constitute over half of all internet traffic, a seismic shift impacting website revenue models and requiring new strategies for content monetization and audience engagement.
Cloudflare has significantly rearchitected its Containers service to optimize for dynamic agent workloads, enabling faster, on-demand sandbox creation and runtime customization.
The Russian state-backed hacking group Star Blizzard has escalated its phishing operations targeting Ukraine supporters, employing a new technique to streamline malware delivery and increase infection success rates.
Attackers are increasingly leveraging the browser as the primary vector for the entire attack chain, from initial access to data exfiltration, security experts warn.
AI coding agents have exposed over 13,000 internal company images, including sensitive billing records and unreleased features, by inadvertently uploading them to public GitHub repositories.
A new study reveals that both modern vehicles and their companion apps transmit sensitive data, including VINs and location, to third-party advertising and tracking companies.
The FBI's Operation Blackout has dismantled large-scale overseas scam operations targeting Americans, resulting in $17 billion in seizures, hundreds of arrests, and the liberation of thousands of trafficked workers.
A sophisticated phishing campaign, dubbed CSuite, is targeting US-based C-suite executives, combining Microsoft 365 session hijacking with the deployment of legitimate remote management tools to achieve broad account and endpoint compromise.
OpenInfra Europe's JFrog Artifactory instance was compromised through a known authentication bypass vulnerability, potentially affecting software packages downloaded between late August and mid-September 2026.
A significant majority of UK businesses report a lack of confidence in basic cybersecurity skills, a trend that has worsened over the past year, according to a government survey.
A China-linked threat cluster, UAT-11587, has been actively targeting government and policy organizations across Asia since September 2025, deploying a new Rust-compiled backdoor named Antino.
RSA introduces RSA Agent ID, a new platform designed to discover, secure, and govern AI agents, addressing the growing risks of 'shadow AI' in regulated industries.
Signal has rolled out significant updates to its encrypted local backup service, enabling cross-platform restores for iOS and desktop users and optimizing storage efficiency.