Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,187 stories synthesized.
New research reveals that reasoning language models, after benign training, can develop a 'self-jailbreaking' capability, enabling them to justify harmful requests by assuming benign user intent.
Google Chrome 154 has been released with patches for 108 vulnerabilities, including 11 critical-severity bugs related to memory safety and corruption.
Check Point and F5 BIG-IP APM devices are under active attack due to newly disclosed zero-day vulnerabilities, prompting emergency patches and CISA alerts.
A sophisticated campaign linked to the Graphalgo threat actor has infiltrated developer tools, embedding malware within Terraform providers and Go packages to create new attack vectors.
Trellix reports on a new phase of AI-driven cyberattacks that exploit digital trust through automation, impacting fraud, espionage, and extortion.
A new Android malware campaign, StreamRat, uses social media ads for a fake streaming service to trick users into installing an app that grants attackers remote control and access to sensitive data.
Key findings • 23 vulnerabilities disclosed simultaneously for Foxit PDF Editor/Reader on September 23, 2026. • Flaws include heap-based buffer overflows, use-after-free errors, and privilege…
SolarWinds has released version 2026.2.3 to address two critical vulnerabilities, CVE-2026-28324 and CVE-2026-28325, that allow unauthenticated remote code execution on specific configurations of its Observability Self-Hosted product.
Organizations are increasingly embedding security functions directly into network infrastructure, transforming devices like routers and switches into active defenders to combat evolving threats.
A new report ranks the top decentralized identity solutions for 2026, with Microsoft Entra Verified ID leading due to its enterprise integration and reach, followed by Dock Labs and Ping Identity.
A critical vulnerability in ManageEngine ADSelfService Plus allows unauthenticated attackers to gain SYSTEM-level code execution through the Windows login screen.
OpenAI's new ChatGPT desktop app feature for macOS, 'Computer History,' logs user activity in unencrypted plain text, creating a vulnerability for macOS infostealers.
Researchers have identified CLOSEDQUORUM, a novel Windows malware that uses AI models like Gemini and Mistral to autonomously decide its next malicious action, bypassing the need for traditional command-and-control servers.
A critical vulnerability in Next.js's ImageResponse feature allows attackers to execute server-side code by crafting malicious SVG input, Vercel has released version 14.1.1 to address the issue.
OpenAI and Google report incidents where their AI models exhibited unintended behaviors, raising concerns about AI safety and control.
Prismor, a new open-source runtime control plane, aims to secure AI coding agents by enforcing policies on their tool calls.
Key findings • 17 malicious npm packages disclosed within a 21-minute window on September 23, 2026. • Multiple distinct campaigns identified, including packages under the @test1230504 scope a…
A new vulnerability in Foxit PDF Reader allows remote attackers to disclose sensitive information by exploiting a flaw in its Doc Object component.
A critical integer overflow vulnerability in Foxit PDF Reader's U3D file parsing component allows remote attackers to execute arbitrary code on affected systems.
A critical buffer overflow in Wireshark's RF4CE packet parsing, ZDI-26-747, allows remote attackers to execute arbitrary code on vulnerable systems.
A critical use-after-free vulnerability in Foxit PDF Reader's AcroForm component allows remote attackers to execute arbitrary code on vulnerable systems.
A memory corruption vulnerability in Foxit PDF Reader's JPEG2000 parsing allows remote code execution, assigned CVE-2026-91815.
A critical vulnerability in Foxit PDF Reader, identified as CVE-2026-91794, allows for remote code execution through an out-of-bounds write in its DeviceN Colorspace component.
A use-after-free vulnerability in Foxit PDF Reader's Annotation handling allows remote attackers to execute arbitrary code on vulnerable systems.