Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,687 stories synthesized.
A substantial portion of Windows 10 devices remain in use, posing a growing security risk as official support wanes and Extended Security Updates approach their end dates.
A new application for the Flipper Zero, named Specter, turns the popular hacking device into a passive tool for detecting active 13.56 MHz NFC readers, potentially identifying hidden skimming devices.
Splunk and Zoom have released patches for critical and high-severity vulnerabilities affecting their platforms, with potential impacts ranging from credential theft to account takeover.
Romania's National Agency for Cadastre and Land Registration (ANCPI) has been hit by a cyberattack that disrupted its e-Terra system, with threat actors claiming to offer stolen data on the dark web.
While AI tools can rapidly identify potential vulnerabilities, human knowledge and judgment are still essential for proving exploitability and real-world risk.
Cisco Talos explores the 'Hunter's Paradox,' where the overwhelming volume of security data necessitates AI, yet attackers' deceptive tactics challenge AI's reliability in threat hunting.
A Russian financially motivated threat actor is distributing a new backdoor, Starland RAT, by trojanizing legitimate software installers like WebEx and Zoom, targeting users for credential and cryptocurrency theft.
A nascent ransomware operation dubbed Spirals has demonstrated alarming speed, completing network intrusion, data exfiltration, and file encryption within a single day, posing a significant challenge to incident response.
Key findings • 14 ImageMagick vulnerabilities disclosed together, primarily memory leaks and DoS flaws. • Affected versions include ImageMagick before 7.1.2-26 and 6.9.13-51. • Multiple m…
Key findings • Google Chrome version 150.0.7871.125 patches 15 vulnerabilities disclosed on July 16, 2026. • Two critical use-after-free vulnerabilities in the Ozone component (CVE-2026-15764…
Key findings • 11 CVEs disclosed on July 16, 2026, impacting Chromium. • Two critical "Use after free" vulnerabilities in the Ozone component were patched. • High-severity flaws found in …
Key findings • Four memory exhaustion and infinite loop vulnerabilities disclosed for Python's Pillow imaging library. • Vulnerabilities affect EPS, PDF, and JPEG2000 parsing, with heap corru…
Tenable's Exposure Management Platform now unifies application security risks with enterprise-wide exposure data, offering code-to-runtime visibility.
A critical flaw in Shark RV2320EDUS robot vacuums allows attackers to hijack other vacuums in the same AWS region, enabling camera control, data theft, and Wi-Fi credential harvesting.
The Kratos PhaaS operation is actively targeting Microsoft 365 users across the US and Europe with advanced phishing techniques designed to steal credentials and sensitive data.
Lineation.ai introduces a new platform designed to secure autonomous AI agents at runtime, addressing critical vulnerabilities as these agents interact with sensitive data and execute workflows.
Microsoft introduces a new registry-based policy for Windows 11, allowing IT administrators to automatically accept Single Sign-On permissions for Entra ID-managed devices.
Splunk has released security updates to address three vulnerabilities in Splunk Enterprise and Splunk Cloud Platform, impacting REST API and Web components.
Visual Studio Code's latest update separates AI coding assistants like Copilot and Claude into their own process for improved stability and resource management.
A law firm's internal system featured a master password allowing any user to impersonate any other staff member or client, including access to sensitive health records.
A stealthy Windows backdoor named Backdoor.Stupig has emerged, enabling attackers to gain SYSTEM shell access by typing a specific username prefix at the Windows login screen.
A tech support scam targeting a contact center agent led to a massive data breach at Qantas, but the Australian Privacy Commissioner has ruled the airline did not breach its obligations.
Four major cybersecurity vendors have released patches for severe vulnerabilities affecting their respective products, urging customers to update promptly.
Sophisticated AI agents are poised to become a significant threat vector in supply chain attacks, automating reconnaissance and exploitation with unprecedented efficiency.