Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,785 stories synthesized.
Healthcare organizations have enhanced cyberthreat intelligence sharing, but persistent security gaps, ransomware, and underinvestment continue to expose patient data and critical infrastructure.
OpenAI's threat intelligence team has identified two Chinese influence operations that leveraged ChatGPT to generate content aimed at manipulating public discourse on data centers and tariffs.
GitHub is introducing significant security enhancements to npm v12, set to block automatic script execution and dependency fetching during 'npm install' to combat supply-chain threats.
A recent webinar highlighted how threat actors are increasingly using AI to craft personalized and advanced social engineering attacks, moving beyond basic phishing tactics.
The ShinyHunters extortion gang is actively compromising Oracle PeopleSoft servers, stealing data from over 100 organizations and demanding ransom.
Key findings • Seventeen vulnerabilities disclosed for Fission on June 10, 2026, with Critical and High severities. • Multiple Critical flaws (CVSSv3 9.9) related to insecure PodSpec configur…
Key findings • Ten vulnerabilities affecting Splunk Enterprise, Cloud Platform, and SOAR disclosed on June 10, 2026. • Includes a critical severity flaw (CVE-2026-20253) allowing arbitrary fi…
A sophisticated cryptojacking campaign is leveraging fake software download sites and AI chatbot recommendations to trick users into installing ScreenConnect for remote access and GPU miners.
Hackers are deploying sophisticated in-memory malware through fake Indian tax notification phishing emails, a campaign known as Operation TaxShadow.
A critical supply chain attack has compromised the npm package 'dbmux,' embedding malware that gives attackers complete control over developer systems.
Researchers demonstrated that the OpenClaw AI agent can be tricked into leaking sensitive credentials via convincing phishing emails, highlighting AI's vulnerability to social engineering.
A critical vulnerability in the UpdraftPlus WordPress plugin, affecting over 3 million sites, allows unauthenticated attackers to execute arbitrary commands as an administrator, potentially leading to full site compromise.
Cybercriminals are exploiting TikTok and Instagram Reels to distribute the Vidar infostealer, tricking users with promises of free premium services into running malicious commands.
Rapid7 has developed an automated threat hunting pipeline that leverages large language models to rapidly translate threat intelligence into actionable detection queries.
Key findings • Seven vulnerabilities disclosed for Erlang OTP on June 10, 2026. • High-severity flaws include a VM crash via SCTP ERROR chunk (CVE-2026-49759) and SSL authentication bypass (C…
Key findings • 14 vulnerabilities disclosed for Roxy-WI on June 10, 2026. • Includes multiple Critical (9.9 CVSSv3) and High (8.1-8.8 CVSSv3) severity flaws. • Vulnerabilities affect vers…
Key findings • Eight vulnerabilities disclosed by Palo Alto Networks on June 10, 2026. • Affected products include PAN-OS, Cortex XSOAR, GlobalProtect App, and Prisma Access Agent. • Vuln…
Microsoft has open-sourced ASSERT, a new framework designed to transform natural-language AI behavior specifications into executable evaluations, streamlining the testing and refinement of AI systems.
A new Malware-as-a-Service (MaaS) trojan named SilabRAT is being sold on dark web forums, specifically designed to hijack user sessions and steal cryptocurrency by employing advanced techniques like Hidden Virtual Network Computing (HVNC) and browser cloning.
Australia's second-largest sugar producer has been crippled by a cybersecurity incident, forcing a shutdown of operations and disrupting its crucial harvest season.
A zero-day vulnerability in Windows' Collaborative Translation Framework (CTFMON), CVE-2026-45586, allows local attackers to escalate privileges to SYSTEM.
Ivanti, Fortinet, and SAP have released patches for multiple critical vulnerabilities, including command injection and authentication bypass flaws, that could lead to arbitrary code execution and data compromise.
A critical path traversal vulnerability in the open-source Langflow AI application platform, CVE-2026-5027, is being actively exploited, allowing unauthenticated attackers to write files to arbitrary locations and potentially achieve remote code execution.
The JDY botnet, associated with Chinese threat actors including Volt Typhoon, has significantly broadened its reconnaissance efforts, now actively scanning and targeting U.S. military networks.