Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,782 stories synthesized.
Researchers at TwoSixTech have found that Russian and Chinese influence operations on X now use AI to mimic human behavior, posting less frequently, using AI-generated images, and simulating sleep patterns to evade bot detection.
Microsoft Teams can now analyze Wi-Fi hotspot data from employee devices, collecting SSID and connection metadata to enforce conditional access and detect unsecured network risks.
Police officers across the U.S. have been caught using Flock automated license-plate recognition cameras to stalk individuals illegally, exposing weak access controls in the widely deployed surveillance network.
DragonForce ransomware is the first known malware to abuse Microsoft Teams' TURN relay infrastructure to mask command-and-control traffic, evading network detection.
Unit 42 discovered a vulnerability in the Google Cloud Vertex AI Python SDK that allows attackers to hijack model uploads and achieve remote code execution across tenants via bucket squatting.
A coalition of over two dozen organizations, including Cisco, Cloudflare, and JPMorganChase, has launched the Athena platform to triage and fix open-source vulnerabilities before patches are publicly disclosed.
A new ENISA report finds that organizations are ramping up Software Bill of Materials adoption in preparation for the EU Cyber Resilience Act, which will make SBOMs a legal requirement in December 2027.
Attackers are exploiting Wallpaper Engine's 'application wallpaper' feature on Steam Workshop to distribute malware, targeting gamers in China and Russia with backdoors, crypto miners, and account-stealing payloads.
ESET researchers have discovered two undocumented Windows variants of the China-linked SprySocks backdoor, tied to the FishMonger threat actor and iSoon hacking contractor, targeting government organizations across Asia and Central America.
Check Point recorded a 122% cumulative increase in attacks on hospitality firms since 2023, with 47,318 travel-related domains registered in May—one in 112 malicious or suspicious.
A malicious ZIP archive containing a VHDX file delivers Remcos RAT through a multi-stage JavaScript, WMI, and PowerShell chain, with most payloads remaining undetected by antivirus.
Q1 2026 saw 2,122 new ransomware victims, the second-highest first-quarter total, as former LockBit and Qilin operators launched new RaaS programs Hyflock and The Gentlemen.
A Phishing-as-a-Service operation called The Quarry, run by an actor known as RockyBelling, has been selling toolkits to nearly 200 operators since April 2025, targeting U.S. taxpayers with IRS and SSA lures and deploying legitimate ConnectWise ScreenConnect RMM software as a silent payload.
Digital healthcare firm iRhythm Technologies disclosed a data breach after attackers stole personal and health information from third-party-hosted business applications.
Cisco has patched CVE-2026-20262, a medium-severity arbitrary file write flaw in Catalyst SD-WAN Manager exploited in limited, targeted attacks; CISA added it to the KEV catalog.
Labcorp has agreed to a $35 million settlement to resolve a class-action lawsuit stemming from the 2018 breach of its third-party vendor, American Medical Collections Agency, which exposed data of nearly 10.3 million patients.
CISA has added CVE-2026-20262 (Cisco Catalyst SD-WAN Manager path traversal) and CVE-2026-54420 (LiteSpeed cPanel symlink following) to its Known Exploited Vulnerabilities catalog, citing active exploitation.
Malwarebytes uncovers a malicious infrastructure distributing EtherRAT, a Node.js RAT that retrieves its C2 server from the Ethereum blockchain, alongside phishing pages and other malware.
A critical vulnerability in SimpleHelp remote management software allows unauthenticated attackers to create privileged technician accounts via OIDC authentication, granting persistent remote access.
Google Threat Intelligence Group has discovered UNC6508, a previously unknown Chinese state-sponsored espionage group that has been stealing data from US and Canadian government, medical, and military organizations since September 2023.
Proofpoint reports a North Korean threat cluster targeting nearly 100 organizations via phishing emails with malicious GitHub repos that execute cross-platform malware using VS Code's 'runOn: folderOpen' technique.
A chain of three vulnerabilities in the open-source AI gateway LiteLLM allows low-privilege users to escalate to full admin and achieve remote code execution, exposing provider API keys and secrets.
The open-source DPAPISnoop tool has been updated to extract CREDHIST entries from Windows systems, enabling offline cracking of historical credentials.
The Anubis ransomware group breached the Adriatic Port Authority in Italy, stealing sensitive operational data and demanding a $10 million Bitcoin ransom, highlighting growing maritime cyber risks.