Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,184 stories synthesized.
The European Union Agency for Cybersecurity (ENISA) reports a significant increase in intrusion claims targeting operational technology and industrial environments across the EU, with pro-Russia hacktivist groups like NoName057(16) leading the charge.
Academics have detailed a new Spectre variant, dubbed Branch Target Reuse (BTR), affecting JIT engines in browsers, runtimes, and Linux kernels across multiple CPU vendors, bypassing existing defenses.
A recent webinar emphasized the growing security challenges posed by autonomous AI agents, urging organizations to implement robust controls for visibility and management.
US SOCs and MSSPs must leverage advanced threat intelligence to combat increasingly complex phishing operations that utilize legitimate cloud services and multi-stage redirects.
CISA has issued an advisory detailing two critical vulnerabilities in Lantronix G520 Series Cellular Gateway devices, versions 2.6.0.4R6_stable, that could allow for arbitrary code execution with root privileges.
CISA has issued an advisory detailing multiple critical vulnerabilities in Toptech TMS7 and TopHAT software, versions 7.6.3, which could allow attackers to access sensitive data or execute arbitrary code.
CISA has issued a critical alert regarding a command injection vulnerability (CVE-2026-22755) affecting numerous VIVOTEK camera firmware models, enabling remote system compromise.
CISA has issued a critical advisory for a denial-of-service vulnerability in Baicells Nova 430H eNodeB devices, impacting cellular network availability.
CISA has issued an advisory detailing multiple critical vulnerabilities in Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4, potentially allowing attackers to gain full control of affected devices.
A critical integer underflow vulnerability in MikroTik RouterOS could allow unauthenticated attackers to achieve remote code execution or denial of service.
CISA alerts users to two critical vulnerabilities in the Viidure Dashcam Android Application, versions up to 3.3.1.260403, due to misconfigured cloud storage and hard-coded credentials.
Microsoft DART details how threat actor Storm-3068 exploited a self-service password reset to gain access to Azure DevOps, harvest Kubernetes credentials, and deploy remote access tools.
Researchers discovered over 13,000 sensitive screenshots from 343 companies exposed on public GitHub repositories by AI agents, revealing internal data and unreleased product details.
Russian state-sponsored threat actor Star Blizzard is employing a new malware delivery technique called RedFlick, significantly enhancing its phishing campaigns and ability to deploy the CosmicPulse backdoor.
Malware operators are embedding malicious loaders within the unpacking routines of modified 7-Zip self-extracting installers, bypassing traditional security analysis.
LastPass introduces AI Monitoring & Protect and Web Monitoring & Protect features to its Business Max offering, providing organizations with visibility and control over employee use of AI tools and websites.
Researchers uncover 101 malicious npm packages exploiting the 'Baileys' WhatsApp project to forcibly add developers to unwanted WhatsApp groups in the 'PhantomSub' campaign.
Postman's new Fabric Gateway provides a protocol-agnostic control plane for governing AI agent access to APIs and MCP servers, addressing critical security gaps in enterprise AI adoption.
The Silver Fox threat group is employing deceptive fake software websites to trick users into downloading malware, primarily targeting Chinese-speaking Windows users across various industries.
Ransomware attacks force a critical divergence in organizational response, pitting executive concerns over payment against CISO priorities for system restoration. Proactive, documented recovery testing in isolated environments, coupled with robust network segmentation, is presented as the key to aligning these objectives and ensuring business continuity.
Attackers are scanning for the 'wordfence-waf.php' script on WordPress sites, potentially to enumerate Wordfence-protected installations and identify targets for exploitation.
Key findings • 25 vulnerabilities disclosed for Firefox ESR, Thunderbird, and Firefox on September 29, 2026. • Critical sandbox escape flaws (CVE-2026-100819, CVE-2026-100818) and high-severi…
Cloudflare introduces Application Profiles, a new feature that enforces positive security by learning and allowing only expected HTTP request structures, significantly reducing the attack surface.
Cloudflare introduces a new IPsec protocol extension to defend against quantum downgrade attacks, ensuring connections default to post-quantum cryptography.