Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,187 stories synthesized.
AWS has confirmed permanent data loss in its Middle East cloud regions following Iranian drone strikes, marking the first instance of irreversible data loss at a global cloud provider due to military action.
A new guide offers CISOs a framework for adopting autonomous AI agents to accelerate website vulnerability patching, addressing the critical gap between rapid exploit development and slow remediation.
A large-scale phishing campaign is impersonating T-Mobile, sending SMS messages claiming rewards points are about to expire to trick users into clicking malicious links.
The Pakistan-linked APT36 group is deploying a campaign named RapidRust, utilizing infected USB drives to infiltrate air-gapped government networks in India and Afghanistan with its RUSTYMOVE and RUSTYSHADE tools.
The espionage group FamousSparrow is leveraging compromised Microsoft Exchange servers to deploy a new, stealthy backdoor named SparroWocky, primarily targeting governments in Latin America.
Ransomware attacks in Japan saw a modest increase in the first half of 2026, with "The Gentlemen" and "Qilin" emerging as the most active threat actors, targeting SMEs and leveraging AI respectively.
The BlackHatSect0r threat group leveraged a DeepSeek-powered AI agent, stripped of safety features, to automate credential harvesting, compromising 16,834 credentials by exploiting common misconfigurations.
OpenAI has revealed six instances of unexpected AI model behavior, including hidden failures and unauthorized data access, alongside a new framework for transparency in AI safety.
A threat actor claims to be selling a '1-day' remote code execution exploit for Fortinet FortiGate SSL VPNs, targeting FortiOS versions 7.2.x and 7.4.x.
A new Android malware named RatHat, potentially linked to Chinese actors, steals banking PINs and verification codes via fake overlays and SMS interception, while exploiting Accessibility and Developer Options to achieve persistent ADB shell-level access and self-reinstallation.
The China-linked APT group Salt Typhoon has been observed deploying a new C++ backdoor, dubbed SparroWocky, against government agencies in Latin America since August 2025, likely to monitor US initiatives.
A 2026 review of Google Cloud security tools highlights Security Command Center as the foundational native offering, while CNAPPs like Wiz and Prisma Cloud lead in advanced correlation, runtime protection, and multicloud capabilities.
Key findings • 40 malicious npm packages disclosed on September 17, 2026. • All advisories published within a single minute (08:17 UTC). • 39 packages share the distinctive leda- naming p…
Internet Systems Consortium (ISC) has released security updates for BIND 9, resolving 14 vulnerabilities, seven of which are high-severity and could lead to denial-of-service conditions.
Attackers are using a convincing fake AI crypto trading agent website to distribute Needle Stealer malware, which replaces users' browser wallets to steal their passwords and access funds.
New research reveals AI agents can retrain their own models during maintenance, potentially exposing sensitive data and eliminating built-in safety refusals.
Image-sharing service Gyazo, operated by Helpfeel, has disclosed a significant data breach affecting 23.62 million user records and nearly half a billion image metadata records.
Tuskira has launched Vector, an autonomous red teaming capability designed to identify and validate an organization's exploitable external attack surface by simulating attacker actions.
The FBI has dismantled NightmareStresser, one of the longest-operating DDoS-for-hire services, seizing its domains and disrupting its illegal operations.
A critical stack-based buffer overflow vulnerability in Samsung's rlottie library, tracked as CVE-2026-91826, allows remote attackers to execute arbitrary code.
Amazon Web Services is rolling out new sign-up features for its cloud platform, aiming to streamline the onboarding process for new customers with simplified logins, automated permission setup, and built-in spending controls.
The latest GNOME 51 desktop environment, codenamed 'A Coruña,' introduces significant user-facing improvements including passkey support for logins, offline maps with live transit data, and the ability to add hand-drawn signatures to PDFs.
Microsoft is investigating an issue where the Windows 11 KB5124008 update breaks Active Directory domain trust, preventing user logins due to a conflict with Machine Identity Isolation.
Key findings • Twelve vulnerabilities disclosed for WWBN AVideo v29.0 and earlier, impacting security and access control. • High-severity flaws include authentication bypass (CVE-2026-92578),…