Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,184 stories synthesized.
An AI-powered security research platform has identified a critical Linux kernel vulnerability, CVE-2026-72018, that enables local privilege escalation to root through a limited memory write.
A six-month live facial recognition trial by British Transport Police scanned over 500,000 faces, generating only one false positive and no arrests, sparking criticism over cost and effectiveness.
September 2026 saw a significant escalation in cyber threats with autonomous AI agents reportedly used in hacking incidents and Microsoft issuing an unprecedented number of security patches.
A cyberattack targeting South Africa's air traffic control systems has disrupted services, with a ransomware toolkit identified on an operational network, prompting international assistance requests.
Genea introduces Genea MCP, a Model Context Protocol server that allows AI agents to manage physical access control systems using natural language commands, streamlining administrative tasks.
Anthropic's Claude Enterprise now offers a Compliance API, allowing over 100 security vendors to monitor AI chats and uploaded files for sensitive data.
OWASP Noir, a new open-source static analysis tool, aims to uncover hidden and undocumented API endpoints within application source code, improving security visibility.
The EU's Cyber Resilience Act, effective December 2024, introduces new cybersecurity mandates for digital products, including significant implications for container and Kubernetes environments.
OpenAI introduces Codex Security Cloud, an always-on service for GitHub repositories that continuously scans code, investigates flaws, and prepares patches, aiming to act as a persistent security researcher.
A critical vulnerability in Octopus Server, CVE-2026-101169, allows authenticated users to execute arbitrary code through insecure JSON deserialization, impacting specific Linux and Windows versions.
Research reveals a significant backlog of unpatched critical and high-severity vulnerabilities on internet-facing systems, with many flaws remaining open for over 90 days.
Microsoft's Windows Subsystem for Linux now fully supports Linux containers, offering enhanced development workflows and management controls for IT administrators.
OpenSSL has released security updates to address CVE-2026-84782, a critical vulnerability that can leak server memory in plaintext during DTLS handshakes.
Mandiant's GTIG analysis reveals AI is doubling vulnerability disclosures and increasing exploitation rates, shifting the landscape towards more consequential flaws.
Key findings • Cisco vulnerability CVE-2026-76504 added to CISA KEV on September 30, 2026. • The flaw is confirmed to be under active exploitation in the wild. • Organizations must priori…
Threat actors are distributing legitimate MSP360 Remote Monitoring and Management (RMM) installers via phishing campaigns, masquerading them as meeting invitations or software updates, to establish persistent remote access.
OpenAI has identified a novel 'self-replicating prompt injection' threat where AI models can be tricked into repeating malicious prompts, akin to a computer worm.
A vulnerability in Unsloth Studio enabled malicious AI models to execute arbitrary Python code simply by being inspected, posing a risk to sensitive enterprise AI development environments.
Two former U.S. Air Force members have received prison sentences exceeding six years for orchestrating a sophisticated business email compromise scheme that defrauded organizations of over $2 million.
Key findings • Google Chrome patched 25 vulnerabilities on September 29, 2026, including two critical flaws. • Critical vulnerabilities include buffer overflows and use-after-free bugs in ANG…
Key findings • Google Chrome patched 25 vulnerabilities on September 29, 2026, including two critical and multiple high-severity flaws. • Critical vulnerabilities include use-after-free in Pa…
Key findings • Four vulnerabilities disclosed together for IBM Guardium Data Protection 12.2. • Three command injection flaws allow for arbitrary code execution with root privileges. • On…
Wordfence's latest quarterly report indicates a 24.3% drop in published WordPress vulnerabilities but a concerning 15.2% increase in high-threat vulnerabilities and an 80.3% surge in common and dangerous ones.
Hundreds of thousands of French taxpayers and businesses had their data exfiltrated over seven weeks due to a breach at the national tax administration, exploiting stolen staff credentials and weak security controls.