Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,184 stories synthesized.
AI models are identifying software flaws at an unprecedented rate, challenging traditional vulnerability management and demanding faster response times from security teams.
CISA has discontinued its long-running weekly CVE bulletin, a move that signals a shift in how vulnerability information is disseminated, while other reports highlight AI-driven threats and data breaches.
The SectopRAT remote access Trojan has resurfaced, employing a stealthy technique by embedding itself within a legitimate application, highlighting the need for robust application behavior monitoring.
Key findings • 18 vulnerabilities disclosed across multiple Dell products between September 21-24, 2026. • High-severity flaws in Dell ThinOS 10 and Dell Secure Connect Gateway Policy Manager…
Akamai CTO Robert Blumofe advocates for a 'least capability' model for AI agents to enhance visibility and reliability, thereby reducing risks in production environments.
Key findings • Seven MongoDB vulnerabilities disclosed together on September 24, 2026, impacting drivers and Compass. • High severity flaws include integer overflow in Python driver's BSON en…
Three vulnerabilities, dubbed 'SalesBleed', in Salesforce Agentforce allowed attackers to steal CRM data and send phishing messages via AI agents without user interaction.
SCOUTz has launched an open beta for its new prospect intelligence platform, designed to equip Managed Service Providers (MSPs) with crucial, dated evidence about potential clients' environments to bolster sales engagements.
Ardit Kutleshi, accused of operating the illicit Rydox cybercriminal marketplace, has pleaded guilty to aggravated identity theft and money laundering charges.
GitHub Security Lab introduces the Fuzzing Taskflow, an autonomous AI agent designed to automate the entire fuzzing process for C/C++ projects, from identifying entrypoints to triaging crashes.
Two vulnerabilities in OnePlus's OxygenOS allow any installed Android application to gain root access without requiring special permissions, potentially compromising user devices.
A new bill in Congress aims to establish an independent federal body to investigate cyberattacks orchestrated by artificial intelligence agents, addressing concerns over self-reporting by AI developers.
Cisco Talos warns of a social engineering scheme where threat actors pose as recruiters offering lucrative consultancy roles to lure security professionals into revealing sensitive information or abusing their access.
This week's security landscape is shaped by AI tools leaking private code, sophisticated search poisoning tactics, and a surge in one-click code execution vulnerabilities across various platforms.
A novel attack, dubbed eNFS, can break RSA encryption by converting temporary access to signing services into offline forgery capabilities, challenging long-held security assumptions.
Wordfence Intelligence's latest weekly report, covering September 14-20, 2026, identifies 358 vulnerabilities in 243 WordPress plugins and 4 themes, with a stored XSS in WordPress Core also addressed.
The U.S. Treasury Department has sanctioned Iranian cryptocurrency exchange BitBank, alleging it transferred hundreds of millions of dollars in Bitcoin to Iran's Islamic Revolutionary Guard Corps.
Key findings • 25 Linux kernel vulnerabilities disclosed on September 24, 2026, affecting diverse subsystems. • Fixes target issues like null pointer dereferences, out-of-bounds access, and e…
Key findings • Ten Linux kernel vulnerabilities disclosed on September 24, 2026, affecting diverse subsystems. • Fixes target issues like error handling, memory management, and file system in…
Key findings • Three high-severity vulnerabilities in Snipe-IT were disclosed on September 24, 2026. • CVE-2026-63498 allows arbitrary code execution via crafted XML/XSLT file uploads. • …
U.S. and British authorities arrested the CEO and CTO of Oxygen Forensics, a popular digital forensics software company, alleging they hid the firm's Russian ownership.
Researchers have uncovered long-standing vulnerabilities in file notification systems on Android, Linux, macOS, and Windows, enabling unprivileged users to infer sensitive activities like keystrokes and website visits.
Key findings • Critical SSRF vulnerability in GitHub Enterprise Server's notebook viewer (CVE-2026-77987). • High-severity stored XSS flaw in Markdown rendering allows arbitrary HTML injectio…
Microsoft Threat Intelligence tracks Storm-2570, a ransomware affiliate linked to Qilin, DragonForce, Anubis, and BERT, demonstrating consistent post-compromise techniques regardless of the final ransomware payload.