Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,187 stories synthesized.
Key findings • Thirteen malicious npm packages were disclosed on September 16, 2026. • The disclosures occurred within a tight 10-minute window, indicating coordination. • Three packages …
CrowdStrike details PhantomRaven, a JavaScript information stealer allegedly developed with AI assistance, distributed via npm packages by a bug bounty hunter.
Gartner VP Craig Lawson predicts AI tools like Anthropic's Mythos will significantly reduce severe software vulnerabilities by identifying and retiring technical debt, leading to an easier year for security teams in 2027.
A new open-source Python engine named DeepZero automates the discovery of exploitable Windows kernel drivers, aiming to streamline security flaw identification.
A critical flaw in WSO2 API Manager, CVE-2026-5430, is being actively exploited in the wild, allowing attackers to forge admin tokens and bypass JWT authentication for account takeover.
Recent breaches at Vercel and Composio reveal a new attack chain targeting Google Workspace, where OAuth tokens, not email, serve as the initial entry point for attackers.
A critical Server-Side Request Forgery (SSRF) vulnerability in Airbyte's OneDrive connector allows authenticated attackers to initiate arbitrary server-side requests, potentially leading to information disclosure.
A local privilege escalation vulnerability (CVE-2026-92209) in NoMachine software allows attackers with initial low-privilege code execution to gain higher system privileges.
A critical remote code execution vulnerability (CVE-2026-92206) has been discovered in the CrewAI framework, allowing attackers to execute arbitrary code by tricking users into loading malicious agent configurations.
A local privilege escalation vulnerability in Microsoft Windows, ZDI-26-708, allows attackers to disclose NTLM responses and gain elevated privileges by manipulating HTTP proxy settings.
A critical vulnerability in BusyBox's libarchive component, ZDI-26-705, allows remote attackers to create arbitrary files on vulnerable systems.
Zero Day Initiative has disclosed a critical remote code execution vulnerability in MindsDB, allowing authenticated attackers to execute arbitrary code.
A critical server-side request forgery (SSRF) vulnerability in NoMachine's nxhtd server allows unauthenticated attackers to initiate arbitrary requests, potentially leading to information disclosure.
The latest Risky Business podcast delves into the escalating concerns surrounding AI's potential to disrupt cybersecurity, alongside discussions on state-sponsored hacking, FBI and NSA cyber initiatives, and a barrage of newly exploited vulnerabilities.
Key findings • Cisco vulnerability CVE-2026-76460 added to CISA KEV on September 16, 2026. • The flaw is confirmed to be under active exploitation by malicious actors. • Immediate patchin…
Key findings • CVE-2026-58704, a Google vulnerability, has been added to CISA's KEV catalog. • The flaw is confirmed to be under active exploitation by malicious actors. • Organizations m…
Key findings • Six Cisagov product vulnerabilities disclosed together on 2026-09-15, including three critical flaws. • Vulnerabilities primarily exploit authentication and authorization weakn…
The Common Vulnerability Scoring System version 4.0 introduces 'Exploit Maturity' metrics, allowing vulnerability scores to decrease until exploitation evidence emerges.
Key findings • Google Chrome: 25 vulnerabilities disclosed on September 15, 2026, patched in version 153.0.8010.47. • Two Critical (9.6) and numerous High severity flaws, including use-after-…
Key findings • 25 CVEs disclosed for Concrete CMS on 2026-09-15, affecting versions prior to 9.5.3. • Three high-severity vulnerabilities include stored XSS and API-based user property modifi…
Oracle's September 2026 Critical Security Patch Update (CSPU) resolves 672 vulnerabilities across 17 product families, with 104 critical patches released.
Wordfence 9 now offers passwordless login via passkeys, enhancing security and user experience for WordPress and WooCommerce sites at no cost.
CISA's Continuous Diagnostics and Mitigation (CDM) program is undergoing a significant overhaul to enhance its speed and efficiency in providing essential cybersecurity tools and capabilities to federal agencies.
Infoblox research reveals that numerous Chinese-language gambling and adult websites are being repurposed by threat actors, including China-aligned APT groups, as command-and-control infrastructure.