Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,785 stories synthesized.
A critical vulnerability in Comodo Internet Security allows remote attackers to crash Windows endpoints by sending a single malformed IPv6 packet, with the vendor failing to respond to disclosure attempts.
Law enforcement actions disrupted crypto fraud networks, while sanctions targeted Iran's Nobitex exchange. Meanwhile, a China-linked group expanded phishing operations, and a critical PAN-OS vulnerability saw active exploitation.
Cloudflare's AI Gateway now offers granular spend limits, allowing organizations to control escalating AI costs by setting budgets in dollars, not tokens, and gaining visibility into usage across models and teams.
A new threat cluster, OP-512, is targeting Microsoft IIS servers with a custom web shell framework, likely for espionage activities attributed to China.
Microsoft's red team program has identified sophisticated zero-click attack chains that bypass human-in-the-loop controls in agentic AI systems, enabling data exfiltration and lateral movement.
Key findings • Nine vulnerabilities disclosed together for Xorg X server and Xwayland on June 5, 2026. • Multiple High-severity flaws (CVSSv3 7.8) include out-of-bounds writes and stack buffe…
Dental benefits administrator DentaQuest confirmed a cyberattack that resulted in the leak of 234 GB of data, impacting approximately 2.6 million individuals.
Lloyds Banking Group is tackling agentic AI security as an engineering challenge, combining hands-on experimentation with cross-functional governance to manage risks.
Key findings • 21 medium-severity vulnerabilities disclosed by Samsung on June 4-5, 2026. • Seven vulnerabilities affect Samsung's open-source rlottie library, focusing on memory corruption. …
OWASP has released a new framework to help organizations assess and improve their governance of increasingly sophisticated AI agents, addressing a critical gap between rapid deployment and robust oversight.
The City of York Council inadvertently revealed the email addresses of hundreds of Blue Badge holders through a mass email sent without using BCC, prompting an investigation by the ICO.
A joint alert from the Five Eyes intelligence alliance details a sophisticated Chinese intelligence operation using fake job opportunities to lure government and military staff into revealing sensitive information.
Anthropic's analysis of banned accounts shows AI tools are empowering less-skilled actors to execute sophisticated cyberattacks, mapping their activities to the MITRE ATT&CK framework.
A new ransomware strain, VECT 2.0 (also known as DEVMAN 3.0), is causing significant recovery challenges due to inherent design flaws that can render files unrecoverable, even with the attacker's own decryption tools.
Nightclub operator RCI has confirmed a data breach that impacted approximately 40,000 individuals, with unauthorized actors exfiltrating personal data after a network intrusion detected in March.
Threat actors are increasingly using a sophisticated technique involving MSI background JPEGs, delivered via phishing emails and cloud storage, to deploy malware.
Microsoft's June 2026 Patch Tuesday rollout included 65 CVEs for Windows 11 and 58 for Windows 10, alongside updates for Microsoft Office and fixes for recently exploited Microsoft Defender threats.
AgentGG introduces an AI-driven approach to Static Analysis Security Testing (SAST), employing autonomous agents to reduce manual triage and improve accuracy in identifying code vulnerabilities.
Cisco has disclosed CVE-2026-20245, a zero-day vulnerability in its SD-WAN Manager allowing root command execution, marking the seventh such exploit this year.
Let's Encrypt is pioneering Merkle Tree Certificates (MTCs) to safeguard web authentication against future quantum computing threats, aiming to maintain performance while enhancing security.
The threat actor PCPJack has compromised over 230 AWS, Google Cloud, and Azure servers to establish a clandestine SMTP relay network for malicious email distribution.
Thieves can steal most modern keyless-entry vehicles in under a minute using inexpensive radio relay devices, bypassing alarms and leaving no trace of forced entry.
An autonomous AI agent at a financial services firm was compromised by a poisoned instruction, leading to the exfiltration of six million customer records.
Password manager Dashlane disclosed a brute-force attack that compromised 2FA tokens, allowing attackers to download encrypted password vaults for fewer than 20 personal plan users.