Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,785 stories synthesized.
Key findings • Three high-severity vulnerabilities in Nlnetlabs' Routinator disclosed on June 8, 2026. • CVE-2026-49235: Denial-of-service via crafted RRDP DTD. • CVE-2026-49233: Path tra…
A new Windows malware, Lucid Stealer, is being sold as a subscription service and targets 18 browsers, crypto wallets, and Discord tokens, while also featuring hidden remote access capabilities.
The FBI's 2025 Internet Crime Report indicates Americans lost over $893 million to AI-driven scams, with voice cloning and deepfakes fueling sophisticated fraud schemes.
A likely North Korean threat actor is using deceptive coding assignments distributed via GitHub and GitLab to trick software developers into downloading malware designed to steal cryptocurrency and credentials.
A new report from Check Point Research highlights a wide array of cyber incidents, including major data breaches, sophisticated AI-driven attacks, and newly exploited vulnerabilities.
OpenAI introduces Lockdown Mode and Active Sessions for ChatGPT, enhancing user data protection against prompt injection and unauthorized access.
New Relic introduces AI Coding Observability, an open-source tool designed to monitor and manage the use of AI assistants in software development workflows.
GitHub has taken down over 70 Microsoft repositories following suspected infections by the Miasma worm, disrupting CI/CD pipelines and highlighting a potential re-compromise of a previously targeted package.
Key findings • Three vulnerabilities disclosed for Itsourcecode Hospital Management System 1.0. • Two SQL injection flaws (CVE-2026-11514, CVE-2026-11513) affect patient and admin account man…
Cloudflare has enhanced its Web Application Firewall (WAF) by integrating its Threat Events intelligence, enabling security teams to create proactive rules based on live threat data.
The escalating volume and sophistication of AI-generated phishing attacks are overwhelming Security Operations Centers (SOCs), forcing a re-evaluation of detection and response strategies.
A Qilin ransomware affiliate is actively exploiting CVE-2026-50751, an authentication bypass vulnerability in Check Point VPN Remote Access and Mobile Access solutions, potentially granting unauthorized network access.
Key findings • Seven vulnerabilities disclosed for Codeastro products on June 8, 2026. • Six SQL injection flaws affect Leave Management and Ingredients Stock Management systems. • One st…
Meta has asked a US court to hold NSO Group in contempt for allegedly targeting WhatsApp users again, violating a permanent injunction issued after a previous lawsuit.
The Mythos security research project has uncovered a sophisticated attack chain that combines dozens of previously identified SAST-flagged vulnerabilities into a significant new threat.
OWASP's latest report provides a technical blueprint and taxonomy for securing rapidly evolving autonomous AI agents, emphasizing the convergence of AI safety and security.
Ridge Security's latest platform update introduces automated Windows Active Directory penetration testing, simulating end-to-end domain compromise to identify and prioritize exploitable risks.
Lansing Community College has confirmed a data breach that occurred in February 2025, exposing the personal information of approximately 174,000 individuals.
Anthropic's AI initiative to find software flaws, Project Glasswing, is reportedly failing to achieve a high patch rate for the vulnerabilities it discovers, raising concerns about its effectiveness.
A new malware campaign, dubbed RenEngine loader, is distributing password-stealing malware by hiding it within pirated PC games, infecting over 400,000 devices globally.
OWASP researcher Ariel Fogel warns that prompt injection is a fundamental, unresolved security flaw in generative AI, with increasing risks as AI agents gain more capabilities.
Key findings • Four Tenda router vulnerabilities disclosed on June 8, 2026, within a 3-hour window. • Critical vulnerability (CVE-2026-11499) allows remote stack-based buffer overflow on HG7H…
Researchers have detailed a sophisticated attack chain that leverages the legacy Internet Explorer WebBrowser control to achieve remote code execution (RCE) on Windows systems, even after IE's retirement.
Samsung's One UI 9 beta introduces a significant security enhancement by integrating Lockdown mode directly into the power menu of Galaxy phones.