Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,187 stories synthesized.
A vulnerability in Visual Studio Code allows attackers to trick developers into installing malicious extensions with a single click, bypassing Workspace Trust protections and granting persistent system access.
A 2026 review of cloud compliance tools categorizes leading solutions into technical posture scanners and audit evidence automation platforms, emphasizing the need for both to achieve continuous compliance.
Global phishing campaigns impersonating parcel delivery services are tricking users into visiting fake courier websites to steal sensitive personal and financial information.
The recently standardized HTTP QUERY method, designed as a 'GET with a body,' introduces significant security risks due to its potential to bypass existing web security controls.
Researchers found that nearly 75% of abandoned Android IoT companion apps contain vulnerable dependencies and transmit sensitive user data to defunct or insecure servers.
Research by Hush Security found that 12% of analyzed AI coding tool configuration files on GitHub contained hardcoded credentials, posing significant identity security risks.
A type confusion vulnerability in Linux Mint's Xreader PDF parsing component, ZDI-26-715, allows remote attackers to execute arbitrary code with a CVSS score of 7.8.
A critical command injection vulnerability in Cisco Identity Services Engine allows authenticated attackers to achieve remote code execution.
A deserialization flaw in Cisco Identity Services Engine allows authenticated remote attackers to achieve arbitrary code execution.
Researchers leveraged Anthropic's Claude Opus 5 to exploit a Discourse vulnerability, gaining RCE on OpenAI's forum and accessing internal code repositories via a separate identity misconfiguration.
Dataminr has launched Dataminr Advanced for Corporate Security, a new platform leveraging agentic AI to proactively predict and verify security threats.
International security agencies have issued a warning about the North Korean hacking group WaterPlum, also known as Contagious Interview, which is targeting job seekers worldwide to steal cryptocurrency and sensitive data.
A zero-day vulnerability in Valve's Steam client service for Windows, dubbed 'BrokenPipe,' allows unprivileged local users to escalate privileges to SYSTEM.
A new report highlights Venezuela's adoption of Chinese AI surveillance technology, posing a challenge for the US as it assumes control of the nation.
US states are increasingly providing cybersecurity assistance to local utilities and critical infrastructure operators beyond their direct control, facing challenges with funding and expertise.
A critical 'Plugin4Shell' vulnerability allows attackers to achieve zero-click remote code execution in popular AI coding agents, potentially compromising sensitive data and systems.
China's top cyber official has urged stronger state control over artificial intelligence, citing risks to political security and sensitive data, as the nation grapples with AI-linked breaches and sophisticated cyberattacks.
Key findings • Seven vulnerabilities in Google Chrome disclosed on September 17, 2026, patched in version 153.0.8010.52. • Includes three High severity flaws: incorrect authorization (ORB), u…
A critical PHP object injection vulnerability in the Tutor LMS WordPress plugin, affecting over 100,000 sites, allows authenticated users to achieve remote code execution.
WordPress 7.1.1, a critical maintenance and security release, addresses eleven vulnerabilities including stored XSS, API bypasses, and path traversal flaws.
Flock Safety ALPR cameras, designed for vehicle tracking, have been found to detect people, and a separate incident shows police using the data to track officers, amplifying privacy concerns.
Wordfence Intelligence's latest weekly report, covering September 7-13, 2026, identifies 260 vulnerabilities across 207 WordPress plugins, with a majority rated medium severity.
Key findings • 25 vulnerabilities disclosed in the Linux kernel on September 17, 2026. • Issues span multiple subsystems including networking, graphics, and storage. • Vulnerabilities inc…
Key findings • 25 Linux kernel vulnerabilities disclosed together on September 17, 2026. • Issues span multiple subsystems including networking, graphics, storage, and HID. • Vulnerabilit…