Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,785 stories synthesized.
A Booz Allen Hamilton report reveals that U.S. developers using low-cost Chinese AI coding models may be introducing significant security vulnerabilities into their software.
Key findings • Three medium-severity vulnerabilities in Totolink routers disclosed together. • All flaws affect the vsftpd component and relate to least privilege violations. • Exploits f…
An autonomous security agent has identified 21 zero-day vulnerabilities in FFmpeg, a widely used media processing library, with one critical flaw allowing remote code execution via a small network packet.
Key findings • Twelve SAP vulnerabilities disclosed simultaneously on June 9, 2026. • Critical flaws include memory corruption, unauthorized data access, and path traversal. • Vulnerabili…
Key findings • 25 vulnerabilities in Google Chrome were disclosed simultaneously on June 9, 2026. • 23 of the disclosed vulnerabilities were rated as High severity. • Common vulnerability…
Key findings • 23 vulnerabilities in Google Chrome disclosed simultaneously on June 9, 2026. • Multiple critical 'use after free' flaws allow for arbitrary code execution and sandbox escapes.…
Key findings • Twelve Netty vulnerabilities disclosed together on June 8, 2026. • Multiple high-severity DoS vulnerabilities related to unbounded resource consumption. • Critical DNS cach…
Senator Bill Cassidy is probing New York City officials about cybersecurity practices following a 2025 breach at NYC Health + Hospitals that impacted 1.8 million individuals.
NFCShare Android malware is being distributed through fake banking app updates hosted on GitHub, posing a significant threat to users seeking legitimate software.
SoFi's Hong Kong subsidiary has confirmed a data breach originating from unauthorized access at a third-party vendor, exposing customer information.
Apple's upcoming iOS 27 will introduce an AI-powered feature within Safari and the Passwords app to automatically detect and reset compromised user credentials.
Emerging AI tools can rapidly identify and exploit software vulnerabilities, prompting healthcare organizations to re-evaluate their cybersecurity strategies.
Key findings • Three medium-severity vulnerabilities in Devolutions Server disclosed on June 8, 2026. • CVE-2026-10787 allows enumeration of deleted user group metadata due to missing authori…
Key findings • Four high-severity DoS vulnerabilities disclosed in Netty on June 8, 2026. • CVE-2026-44892: Unbounded header size in HTTP/3 codec default config leads to DoS. • CVE-2026-4…
Key findings • Thirteen vulnerabilities disclosed on June 8, 2026, affecting multiple Tenda router models. • Includes a critical (CVSSv3 9.8) stack-based buffer overflow in Tenda HG7HG9 and H…
Key findings • Three D-Link vulnerabilities disclosed on June 8th, 2026, all related to least privilege violation. • Affected devices include DGS-1100-08PD, DCS-5615, and DIR-823G. • Two …
Key findings • 25 Linux kernel vulnerabilities disclosed simultaneously on June 8, 2026. • Vulnerabilities span multiple subsystems including graphics, media, networking, and storage. • I…
Key findings • Ten Linux kernel vulnerabilities affecting Google's Android SDK were disclosed on June 8, 2026. • Vulnerabilities impact graphics, media, and networking subsystems within the L…
A critical vulnerability in Zcash's Orchard privacy pool, discovered by researcher Taylor Hornby, could have allowed attackers to mint new ZEC coins by bypassing input validation checks.
A use-after-free vulnerability in the Linux kernel's nftables subsystem, tracked as CVE-2026-23111, enables unprivileged local attackers to gain root privileges on Debian and Ubuntu systems.
Microsoft is now delivering Defender for Endpoint EDR updates via Microsoft Update, enabling more frequent security enhancements independent of monthly Windows OS patches.
Key findings • 11 vulnerabilities in Apache HTTP Server versions 2.4.0-2.4.67 disclosed on June 8, 2026. • CVE-2026-49975 is part of the 'HTTP/2 Bomb' DoS attack, affecting multiple web serve…
Threat actors are leveraging the hype around AI brands like ChatGPT and Claude in sophisticated social engineering attacks, including phishing, malvertising, and SEO scams, to steal credentials and financial data or deploy malware.
Evanston Township High School in Illinois has been forced to close its doors and cancel all activities due to a significant ransomware attack that began on Sunday, June 7.