Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,785 stories synthesized.
A critical OS command injection vulnerability (CVE-2026-25089) in Fortinet's FortiSandbox web UI allows unauthenticated attackers to execute arbitrary commands, potentially leading to full system compromise.
Attackers are leveraging newly registered domains to bypass SPF, DKIM, and DMARC email authentication, with malicious links only detected upon user interaction.
A critical authentication bypass vulnerability in phpBB, tracked as PTT-2026-004, enables attackers to hijack any user account, including administrators, with a single crafted request.
Meta's smart glasses are under scrutiny again as unreleased face-recognition code, codenamed 'NameTag,' was discovered embedded within the Meta AI companion app, raising significant privacy and surveillance concerns.
A new espionage group, SiribClone, is using fake romantic advances and malicious applications to steal sensitive data and compromise Telegram accounts of Russian military personnel.
Lloyds Bank reports that Meta's platforms are the source of 68% of fraud incidents from its customers, leading to an estimated annual loss of £66 million.
Atsign's new AI Architect platform aims to secure AI-built applications by making their identities cryptographically invisible to attackers, addressing a growing concern about the security of AI-generated code.
Identity theft scams are escalating into sophisticated, AI-assisted multi-stage attack chains, moving beyond simple impersonation to account takeovers and widespread fraud.
A proof-of-concept AI worm, built entirely on local, open-weight large language models, can autonomously navigate networks, devise custom attack plans, and propagate itself without human intervention.
Key findings • Thirteen backend vulnerabilities in TYPO3 CMS disclosed simultaneously on June 9, 2026. • High severity flaws include unauthorized file access and arbitrary SQL execution via f…
Hackers compromised Tchap, the French government's secure messaging service, by exploiting a legitimate user account, potentially exposing sensitive data.
Key findings • Six vulnerabilities disclosed on June 9, 2026, impact Siemens SINEC INS and other Siemens products. • High-severity flaws (up to CVSSv3 8.8) include unrestricted file system ac…
Google has released an emergency patch for its Chrome browser to address CVE-2026-11645, a critical vulnerability that has been actively exploited in the wild.
Microsoft Defender for Endpoint now offers deep visibility into abuse of the Remote Procedure Call (RPC) protocol, detecting lateral movement, credential theft, and privilege escalation attempts.
Anthropic's Mythos Preview AI can now weaponize disclosed but unpatched (N-day) vulnerabilities within hours, drastically reducing exploit development timelines.
Jaguar Land Rover's former CISO required over 30,000 employees to reset passwords in person following a significant cyber-attack that crippled operations and cost the UK economy billions.
Key findings • Four QNAP vulnerabilities disclosed on June 9, 2026. • Three High-severity flaws impact QuMagie and QTS. • CVE-2026-44083 and CVE-2026-26236 are authorization bypass issues…
Key findings • Ten Huawei vulnerabilities disclosed together on June 9, 2026, within a 3-hour window. • Vulnerabilities affect diverse modules including package management, IPC, and file syst…
CISA has added CVE-2026-42271, a critical command injection flaw in BerriAI's LiteLLM, to its Known Exploited Vulnerabilities catalog, with evidence of active exploitation.
As AI accelerates exploit development, cybersecurity must shift from reactive patching to proactive attack path erasure, argues a new analysis.
Cloudflare has revealed its internal security architecture, dubbed 'customer zero,' designed to defend against advanced AI models that accelerate vulnerability discovery and exploit development.
Starburst CISO Paras Malhotra discusses treating AI agents as service accounts to enhance security in federated query systems, focusing on layered access controls and robust audit trails.
Key findings • 13 Spring Framework vulnerabilities disclosed simultaneously on June 9, 2026. • High severity issues include arbitrary class instantiation via JMS and multiple Denial of Servic…
A significant portion of leaked malware projects contain exploitable vulnerabilities, offering defenders potential avenues to disrupt malicious operations.