Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,702 stories synthesized.
Key findings • Google Chrome version 150.0.7871.125 patches 15 vulnerabilities disclosed on July 16, 2026. • Two critical use-after-free vulnerabilities in the Ozone component (CVE-2026-15764…
Key findings • 11 CVEs disclosed on July 16, 2026, impacting Chromium. • Two critical "Use after free" vulnerabilities in the Ozone component were patched. • High-severity flaws found in …
Key findings • Four memory exhaustion and infinite loop vulnerabilities disclosed for Python's Pillow imaging library. • Vulnerabilities affect EPS, PDF, and JPEG2000 parsing, with heap corru…
Tenable's Exposure Management Platform now unifies application security risks with enterprise-wide exposure data, offering code-to-runtime visibility.
A critical flaw in Shark RV2320EDUS robot vacuums allows attackers to hijack other vacuums in the same AWS region, enabling camera control, data theft, and Wi-Fi credential harvesting.
The Kratos PhaaS operation is actively targeting Microsoft 365 users across the US and Europe with advanced phishing techniques designed to steal credentials and sensitive data.
Lineation.ai introduces a new platform designed to secure autonomous AI agents at runtime, addressing critical vulnerabilities as these agents interact with sensitive data and execute workflows.
Microsoft introduces a new registry-based policy for Windows 11, allowing IT administrators to automatically accept Single Sign-On permissions for Entra ID-managed devices.
Splunk has released security updates to address three vulnerabilities in Splunk Enterprise and Splunk Cloud Platform, impacting REST API and Web components.
Visual Studio Code's latest update separates AI coding assistants like Copilot and Claude into their own process for improved stability and resource management.
A law firm's internal system featured a master password allowing any user to impersonate any other staff member or client, including access to sensitive health records.
A stealthy Windows backdoor named Backdoor.Stupig has emerged, enabling attackers to gain SYSTEM shell access by typing a specific username prefix at the Windows login screen.
A tech support scam targeting a contact center agent led to a massive data breach at Qantas, but the Australian Privacy Commissioner has ruled the airline did not breach its obligations.
Four major cybersecurity vendors have released patches for severe vulnerabilities affecting their respective products, urging customers to update promptly.
Sophisticated AI agents are poised to become a significant threat vector in supply chain attacks, automating reconnaissance and exploitation with unprecedented efficiency.
Key findings • Six vulnerabilities in AutomationDirect Productivity Suite disclosed on July 16, 2026, primarily involve memory corruption. • Flaws include out-of-bounds reads/writes and a div…
Key findings • 11 Rockwell Automation vulnerabilities disclosed July 14-16, 2026, including one critical flaw. • High-severity DoS vulnerabilities affect Flex 5000, Compact/ControlLogix contr…
A new study analyzing German government funding for open-source projects shows that financial support significantly increases development activity but does not attract new contributors or reduce existing backlogs.
A significant disconnect exists between identifying software vulnerabilities and effectively fixing them, leaving many organizations exposed to known threats.
OpenAI's automated red-teaming model, GPT-Red, has demonstrated superior performance over human red teamers in identifying prompt injection vulnerabilities in large language models.
F5 has released patches for three high-severity vulnerabilities in NGINX Plus and Open Source, with one flaw potentially allowing unauthenticated attackers to execute arbitrary code.
Threat actors are increasingly using phishing emails that mimic routine financial communications to bypass security controls and gain initial access, according to a Cofense report.
Mandiant outlines best practices for integrating AI agents into CI/CD pipelines for vulnerability management, addressing architectural risks and proposing operational guardrails.
A cyberattack on Nichirei Group, a major Japanese frozen food logistics firm, has caused system failures, disrupting operations and impacting KFC Japan's supply chain, leading to order cancellations and potential store closures.