Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,785 stories synthesized.
Siemens, Schneider Electric, and Phoenix Contact have released patches for numerous vulnerabilities affecting their industrial control systems (ICS) products, as part of the monthly ICS Patch Tuesday.
Microsoft's June 2026 Patch Tuesday addresses 206 vulnerabilities, including three publicly disclosed zero-days affecting Windows BitLocker, HTTP.sys, and the Windows Collaborative Translation Framework.
CrowdStrike's 2026 Technology Threat Landscape Report reveals China-nexus adversaries are the primary threat to the technology sector, driven by national ambitions for technological self-sufficiency and intellectual property acquisition.
Microsoft is grappling with a trifecta of security incidents, including a breach of its GitHub repositories, the disclosure of a critical Microsoft Defender zero-day, and a record-breaking Patch Tuesday.
Microsoft has patched CVE-2026-50507, a critical BitLocker security feature bypass vulnerability that allows attackers with physical access to circumvent encryption and access sensitive data.
BlueRock's NOVA Microhypervisor now supports DMA remapping for AMD platforms, bolstering hardware-level isolation crucial for secure shared AI infrastructure.
Six vulnerabilities in the protobuf.js library, a JavaScript implementation of Protocol Buffers, could allow attackers to achieve remote code execution (RCE) and denial-of-service (DoS) attacks.
Zero Day Initiative has disclosed CVE-2026-27220, a use-after-free vulnerability in Adobe Acrobat Reader DC's annotation handling that permits remote code execution.
Anthropic has released Claude Fable 5, its most advanced public AI model, alongside the more powerful, restricted Mythos 5, incorporating enhanced reasoning and software engineering capabilities with new safeguards against misuse.
Key findings • Twelve QNAP QuTS hero vulnerabilities disclosed between June 9-10, 2026. • Includes critical and high-severity command injection flaws allowing arbitrary code execution. • …
Key findings • Twelve QNAP QTS vulnerabilities disclosed between June 9-10, 2026. • Includes critical and high-severity command injection flaws allowing arbitrary code execution. • A high…
Bitdefender's Global Scam Intelligence Report 2026 indicates a significant shift, with social media surpassing email as the leading attack vector for scams, which are now structured like legitimate businesses with budgets and targets.
Ivanti Sentry, a gateway for mobile device management, is affected by CVE-2026-10520, a critical OS command injection flaw enabling unauthenticated root-level remote code execution.
Key findings • 25 vulnerabilities disclosed for Spring Projects components between June 9-10, 2026. • High severity flaws include SpEL injection, arbitrary class instantiation, and code execu…
Key findings • Seven denial-of-service vulnerabilities disclosed in Nimiq Core Rs Albatross. • Vulnerabilities impact versions prior to 1.5.0 and 1.4.0. • High-severity flaws (CVE-2026-46…
Key findings • 22 vulnerabilities disclosed for Apache HTTP Server and Apache Answer between June 8-10, 2026. • Critical severity flaws (CVSSv3 9.8) include buffer underwrite and use-after-fr…
GitLab has issued patch versions 19.0.2, 18.11.5, and 18.10.8 to fix a range of security flaws, including high-severity issues in its Group SAML Identity API and Analytics Dashboard.
Key findings • Nine MongoDB vulnerabilities disclosed on June 9, 2026, including High and Medium severity flaws. • Multiple aggregation pipeline stages are affected, leading to crashes and me…
A newly disclosed zero-day vulnerability in Microsoft Defender, dubbed 'RoguePlanet', allows attackers to escalate privileges to SYSTEM level on fully patched Windows systems.
Microsoft's June 2026 Patch Tuesday addressed a record 206 CVEs, including 38 critical flaws, with the sheer volume raising questions about the increasing role of AI in vulnerability discovery and patch development.
Key findings • Seven vulnerabilities disclosed for Adobe CAI Content Credentials on June 9, 2026. • Two high-severity (7.5 CVSSv3) denial-of-service flaws identified. • Five medium-severi…
New research from Unit 42 details sophisticated techniques attackers use to manipulate or disable cloud logging services, blinding security defenses and enabling prolonged undetected operations.
ServiceNow has revealed a security incident where attackers exploited an unauthenticated API endpoint vulnerability, leading to unauthorized access and querying of customer data.
Key findings • Adobe disclosed 25 vulnerabilities on June 9, 2026, affecting multiple products. • Critical vulnerabilities include Incorrect Authorization in ACC and Improper Input Validation…