Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,785 stories synthesized.
Microsoft's June 2026 Patch Tuesday addresses 200 vulnerabilities, with a notable focus on uncoordinated disclosures by researcher 'Nightmare Eclipse' and new denial-of-service vulnerabilities affecting HTTP/2 implementations.
A vulnerability dubbed 'Ghost-Sender' allows attackers to spoof any email address on Microsoft Exchange Online and hybrid deployments by exploiting misconfigurations in third-party mail servers.
Key findings • Ten buffer overflow vulnerabilities disclosed for Tenda W15E router. • All vulnerabilities affect version v15.11.0.10. • Each vulnerability can be exploited to cause a Deni…
Microsoft's June 2026 Patch Tuesday update resolves 206 vulnerabilities, with a significant focus on 32 critical flaws, including several remote code execution (RCE) vulnerabilities.
Microsoft has issued the KB5094127 update for Windows 10, addressing June 2026 Patch Tuesday vulnerabilities and introducing new features for managing expiring Secure Boot certificates.
A new Android trojan named MagicAd is infecting devices via app stores, displaying intrusive ads by exploiting system vulnerabilities and bypassing standard restrictions.
Key findings • 25 vulnerabilities disclosed for Adobe Experience Manager, InDesign, and InCopy on June 9, 2026. • Critical and High severity flaws include stored/reflected XSS and memory corr…
Key findings • Three medium-severity 'Link Following' vulnerabilities disclosed by Dell on June 9, 2026. • Vulnerabilities affect Dell/Alienware Purchased Apps, Dell Inventory Collector Clien…
Key findings • Three medium-severity vulnerabilities disclosed together on June 9, 2026. • AMD uProf affected by resource allocation and kernel memory write flaws. • AMD Secure Processor …
A new phishing technique uses a convincing fake login popup embedded within a malicious webpage to steal Microsoft 365 credentials and OAuth tokens.
Microsoft's June 2026 Patch Tuesday addresses a record 200 vulnerabilities, with nearly three dozen critical flaws and three zero-days actively exploited in the wild.
Microsoft has released a new investigator playbook to help security teams reconstruct and analyze activity within AI systems like Microsoft 365 Copilot and Azure AI services.
Microsoft's June 2026 Patch Tuesday fixes 204 vulnerabilities, including 38 critical flaws and three previously disclosed issues, with a notable increase in Chromium/Edge vulnerabilities attributed to AI-assisted discovery.
Key findings • Microsoft's June 2026 Patch Tuesday addressed 25 vulnerabilities, including three zero-days. • Multiple high-severity privilege escalation and security bypass flaws affect Wind…
Microsoft's June 2026 Patch Tuesday addresses 198 vulnerabilities, notably including three zero-days that were actively exploited in the wild.
Key findings • Sixteen Netgear vulnerabilities disclosed on June 9, 2026, primarily affecting local network access. • Most flaws are Medium severity, allowing command execution or configurati…
OpenSSL has released critical security updates addressing 18 vulnerabilities, including a high-severity use-after-free flaw potentially found with AI.
CISA is shifting its approach to vulnerability management, moving from rapid patching to a risk-based strategy that considers factors like internet exposure and exploitability.
CISA has issued an advisory for a critical vulnerability (CVE-2026-6866) in Schneider Electric's EcoStruxure Panel Server, potentially allowing unauthorized authentication and access to sensitive information.
Multiple vulnerabilities in Siemens KACO Blueplanet inverters could allow attackers to derive credentials and escalate privileges, impacting critical energy infrastructure.
Schneider Electric's Modicon Network Managed Switches are vulnerable to a critical flaw in the RADIUS protocol, potentially allowing attackers to disrupt network services and compromise data.
Security researchers have identified a significant risk where AI assistive agents within Microsoft Entra ID can be manipulated to perform malicious actions while impersonating legitimate users.
ANY.RUN's Threat Intelligence Feeds integrate verified malware analysis data into security systems to automate SOC workflows and significantly reduce Mean Time To Respond (MTTR).
A cybersecurity researcher has uncovered evidence that the U.S. military has likely been broadcasting its global encryption keys through public GPS signals for nearly 20 years, a practice previously unknown to the public.