Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,783 stories synthesized.
CISA disclosed two critical vulnerabilities in Yarbo's Android/iOS mobile app and cloud MQTT infrastructure, including hard-coded broker credentials that could allow attackers to command the entire robot fleet.
CISA disclosed two vulnerabilities in Brickcom cameras that allow unauthenticated access to live snapshots and use default credentials, with no patches available.
GitHub announced a 75.76% reduction in false positive secret scanning alerts by integrating LLM-based contextual reasoning that analyzes how detected values are used in code.
Law enforcement from 11 countries has dismantled AudiA6, a cryptocurrency laundering service that processed over $380 million for ransomware actors and other cybercriminals.
Attackers are weaponizing DMG files to deliver infostealers like AMOS, Poseidon, and Odyssey to macOS users, exploiting social engineering to bypass Gatekeeper protections.
A new Go-based backdoor called BLUERABBIT is targeting Windows systems, linked to an Iran-nexus threat actor and primarily aimed at Israeli organizations.
Great Marlow School in Buckinghamshire, England, closed its campus for a second day after a cybersecurity incident knocked its ICT systems offline, with only exam-taking students allowed on site.
Denis Obrezko, a 36-year-old Russian national linked to the state-sponsored threat group Void Blizzard, has been charged in the U.S. for supporting a cyberespionage campaign targeting American companies.
Infoblox reports that over 65% of its cloud customers connect to residential proxy services, with DNS queries to proxy domains surging from 300 billion to 500 billion monthly by April 2026.
Threat actors are distributing AsyncRAT malware through fake AI study guides and developer resources, using a multi-stage infection chain that leverages trusted system tools for stealth.
Researchers at Flare have uncovered a network of Chinese-language 'guarantee' marketplaces on Telegram that processed over $35 billion in cryptocurrency transactions, using an escrow-based trust model to trade stolen credentials, fraud kits, and deepfake services.
Check Point Research disclosed three vulnerabilities in LangGraph, including a SQL injection that chains with unsafe deserialization to achieve remote code execution in the popular AI agent framework.
A weekly roundup covers a leaked supply chain attack toolkit, a $5,000/month RAT that clones browsers, and research showing AI agents can be tricked into leaking credentials.
A new malware-as-a-service stealer called OnyxC2 is available for $250/month, targeting over 200 applications with advanced evasion techniques.
Rapid7's analysis reveals that criminal AI has evolved into a commercialized ecosystem of jailbreak wrappers, Telegram bots, and subscription services that accelerate phishing, fraud, and data theft without requiring autonomous hacking systems.
South Korea's data protection regulator fined e-commerce giant Coupang a record $409 million over a breach affecting 37 million customers.
CISA issued Binding Operational Directive 26-04, requiring federal agencies to patch critical exploited vulnerabilities within three days, replacing older directives.
Key findings • Two CVSS 8.7 account takeover bugs in GitLab EE: CVE-2026-6552 (group Owner) and CVE-2026-10087 (developer XSS) • An unauthenticated attacker can impersonate the GitLab Support…
A proof-of-concept exploit has been published for CVE-2026-46316, a critical race condition in KVM's vGIC-ITS emulation that allows a guest VM to escape to the host kernel on ARM64 systems.
Oracle released an emergency security alert for CVE-2026-35273, a critical unauthenticated remote code execution vulnerability in PeopleSoft Enterprise PeopleTools versions 8.61 and 8.62, with a CVSS score of 9.8.
Siemens warns that patch files for its Desigo CC building management system are being falsely flagged as malicious by multiple antivirus engines due to a PowerShell script compiled as an executable.
Unauthorized access to VRChat's cloud environment between May 10-12, 2026, exposed usernames, emails, device info, and IP addresses of over 2.4 million users.
Interpol, with support from Group-IB, has dismantled the SniperDz phishing-as-a-service platform, which operated for over a decade enabling large-scale credential theft.
The Khmer Shadow campaign targets Cambodian government agencies using a VMware-signed binary to DLL-sideload the NIGHTFORGE loader, which deploys Havoc Demon for espionage.