Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,768 stories synthesized.
Google announced that Android developer verification enforcement will begin on September 30, 2026, in Brazil, Indonesia, Singapore, and Thailand, with global expansion planned for 2027.
A supply chain attack on competitive intelligence platform Klue has compromised Salesforce instances belonging to its customers, including cybersecurity firms Huntress and Recorded Future, with data exfiltration attributed to the emerging Icarus extortion group.
A stealthy China-linked malware framework called Showboat has been targeting Middle Eastern telecom companies since mid-2022, evading all 65 AV engines on VirusTotal until April 2026.
Key findings • All 16 packages were registered and disclosed on the same day (June 19, 2026), indicating a disposable-account attack pattern • The packages fall into three thematic clusters: …
Node.js released security updates fixing 12 vulnerabilities across versions 22.x, 24.x, and 26.x, including two high-severity authentication bypass flaws and multiple denial-of-service bugs.
A phishing campaign targeting a Belgian bank uses IPv4-mapped IPv6 addresses to evade security controls that parse URLs with simple regex.
Key findings • 25 CVEs across 23 WordPress plugins disclosed on June 18–19, 2026 • Critical unauthenticated file deletion in Avada Builder (CVE-2026-8713) affects ~1M sites • Three SSRF…
A research paper describes Safecloud, a browser-based decentralized storage system where storage nodes see only ciphertext, turning ordinary browser tabs into encrypted storage for others' files.
CrowdStrike researchers have documented how threat actors abuse Microsoft's ClickOnce deployment technology to bypass Mark-of-the-Web protections and deliver malware with minimal user interaction.
Microsoft Security researchers disclosed AutoJack, an exploit chain targeting AutoGen Studio that allows a malicious web page rendered by an AI agent to execute arbitrary commands on the host via a local MCP WebSocket.
Key findings • All four CVEs are stack buffer overflows in the same /goform/AdvSetMacMtuWan endpoint • Firmware version 15.03.06.44 is affected; no patched build has been released yet • R…
Key findings • Five CVEs disclosed together in PraisonAI, affecting versions before 1.5.128 • Path traversal in MultiAgentMonitor allows arbitrary file read/write (CVE-2026-56078) • Dupli…
MCNA Dental has agreed to a proposed multimillion-dollar settlement to resolve class action claims stemming from a 2023 LockBit ransomware attack that exposed the data of nearly 9 million individuals, including children.
Key findings • Four CVEs disclosed together on June 18, 2026 across Dynamics 365, M365 Copilot, Azure Bot Service, and Cost Management • Two elevation-of-privilege bugs (CVE-2026-47647, CVE-2…
The ShinyHunters extortion gang published over 42 GB of data allegedly stolen from Madison Square Garden, including customer records and internal files, after the company failed to meet a ransom deadline.
A leaked GitHub authentication token was used to breach Novo Nordisk's software development pipeline, exposing proprietary source code and secrets.
Key findings • Five CVEs disclosed June 18, 2026, spanning race conditions, DoS, and memory-scrubbing bugs • TOCTOU symlink race (CVE-2026-48983) and missing O_EXCL flag (CVE-2026-48982) in O…
Cisco Talos detailed a new reverse-engineering approach that pairs local AI agents with the VB6 disassembler vbdec, transforming it into an interactive, queryable data server via a live COM interface.
Researchers link the Popa Android botnet, infecting millions of TV boxes for proxy traffic, to NetNut, a residential proxy provider owned by publicly-traded Alarum Technologies.
F5 has released patches for two critical NGINX Open Source vulnerabilities, including a use-after-free in the HTTP/3 module and a heap buffer overflow in HTTP/2 proxying, both rated CVSS 9.2.
Wordfence's weekly vulnerability report for June 8-14, 2026, discloses 102 flaws across 90 plugins and 5 themes, with 78 patched and 24 still unpatched.
A hardware-level BootROM vulnerability in Apple A12, S4/S5, and A13 SoCs allows attackers to achieve full boot-chain compromise, bypassing all signature verification and Secure Boot protections.
A majority of internet-accessible REDCap servers are running outdated software, leaving them vulnerable to exploitation by the China-linked threat actor UNC6508 for initial access and backdoor deployment.
CISA issued an advisory for CVE-2026-4827, an insufficient entropy vulnerability affecting dozens of Schneider Electric products across Easergy, EcoStruxure, PowerLogic, and Saitel lines, potentially allowing unauthenticated network attackers to bypass session management.