Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,781 stories synthesized.
North Korean state-backed group Sapphire Sleet is running a social engineering campaign that uses fake software update prompts to trick macOS users into handing over passwords and cryptocurrency wallet data.
A guest diary reveals a critical blind spot in Cloud Access Security Broker (CASB) enforcement: QUIC (HTTP/3) runs over UDP, which most CASBs cannot inspect, allowing Chrome to circumvent block policies undetected.
A French-speaking attacker compromised a small automotive business using a keylogger, then installed Tailscale and OpenSSH to maintain persistent access even after his Havoc C2 server went offline.
Key findings • 11 CVEs disclosed for Dell PowerFlex Manager on June 17, 2026 • CVE-2026-35065 is a missing-authentication bug that can lead to code execution • CVE-2024-47477 enables man-…
Researchers at Nisos infiltrated a North Korean IT-worker fraud operation that uses AI-generated interview responses and a network of US-based laptop farms to bypass remote hiring checks and steal jobs at American tech firms.
Medical technology firm iRhythm Holdings disclosed a cyberattack on June 8, 2026, that compromised third-party-hosted business applications, leading to the theft of patient protected health information and proprietary data.
Key findings • Two SSRF bugs (CVE-2026-53931, CVE-2026-53927) were reachable without authentication • CVE-2026-53931 bypasses URL allowlist via query-string tricks like ?.csv • CVE-2026-5…
A Russian-speaking threat actor has compromised over 30,000 Fortinet firewalls and VPN gateways across 194 countries in an automated credential-harvesting campaign that feeds stolen passwords back into the attack chain.
Key findings • Critical auth bypass (CVE-2026-48746) lets unauthenticated attackers call the OpenAI API without an API key • High-severity code execution (CVE-2026-41523) via assert bypass wh…
A new phishing kit named GitBait leverages GitHub Pages and the SheetBest API to steal credentials from Mexican banking customers, evading detection by abusing legitimate cloud services.
Cisco updated its February advisory for CVE-2026-20127 (CVSS 10.0), adding the Catalyst SD-WAN Validator to the list of affected products as exploitation by sophisticated group UAT-8616 continues.
A Rust-based clipboard hijacker campaign is luring cryptocurrency traders and online gamblers with fake sniper bots and crash predictors promoted through GitHub, SourceForge, and AI-generated YouTube content.
Homebrew 6.0 introduces a new tap-trust mechanism and a Linux sandbox based on Bubblewrap, alongside a vulnerability scanning subcommand and performance improvements, while phasing out Intel macOS support.
Key findings • Apache disclosed 7 CVEs across Shiro, DolphinScheduler, and Airflow on June 17, 2026 • Five of the seven are authorization bypass flaws in Apache DolphinScheduler, all fixed in…
A new Malware-as-a-Service operation called ErrTraffic uses compromised WordPress sites to trick victims into running malicious PowerShell commands via fake CAPTCHA screens.
Fortra disclosed a critical OS command injection vulnerability (CVE-2026-9862) in its Core Privileged Access Manager (BoKS) that allows unauthenticated remote attackers to execute arbitrary commands.
Rockwell Automation released patches for multiple vulnerabilities across its Logix controllers, FactoryTalk suite, RSLinx software, and Flex I/O adapters, including critical authentication bypass and DoS flaws.
Rapid7 researchers identified a sophisticated campaign by the Dropping Elephant threat actor using a China energy-sector decoy and DLL side-loading via a legitimate Microsoft binary to deliver a heavily reworked in-memory RAT.
Researchers discovered a publicly exposed Elasticsearch cluster containing 24 billion credential records from infostealer logs, Telegram channels, and prior breaches, posing massive account takeover risks.
Android 17 launches on Pixel devices with enhanced security: anti-theft tools, scam detection, location privacy upgrades, and on-device AI threat monitoring.
Key findings • Nine CVEs disclosed on June 17, 2026 for the JetEngine WordPress plugin • Four unauthenticated SQL injection flaws, including CVE-2026-12360 via the listing_load_more AJAX hand…
Researchers uncovered 15 malicious JetBrains plugins stealing AI API keys and two Chrome ad-blocker extensions capturing AI chatbot conversations in a coordinated campaign.
Oracle released its June 2026 Critical Security Patch Update, the second monthly batch, addressing 245 vulnerabilities across major product families, including a PeopleSoft flaw exploited by the ShinyHunters group.
Google and Mozilla released security updates for Chrome and Firefox, fixing over 70 vulnerabilities including critical memory safety bugs that could lead to remote code execution.