Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,785 stories synthesized.
Netskope introduces the One AI Command Center, a platform designed to discover AI assets, assess risks, and automate responses, addressing critical visibility gaps in enterprise AI adoption.
A new open-source detection rule format, Agent Threat Rules (ATR), has been released to standardize the identification of security threats targeting AI agents.
A vulnerability in Docker Desktop's grpcfuse kernel module allows low-privileged attackers within a container to crash the host system.
A new Google projection places cryptographically relevant quantum computers within reach by 2029, compelling CISOs to accelerate post-quantum migration planning within the next two years.
A Cloud Security Alliance survey reveals that 80% of organizations suffered application security incidents stemming from known, unpatched vulnerabilities, highlighting a critical gap in timely remediation.
A critical vulnerability in Visual Studio Code's webview implementation allows attackers to steal GitHub OAuth tokens via a single malicious link, granting access to private repositories.
Key findings • 25 WordPress plugin and theme vulnerabilities disclosed together on June 2, 2026. • Vulnerabilities range from Medium to Critical severity, including SQLi, XSS, RFI, and Auth B…
Key findings • Three Go standard library vulnerabilities disclosed on June 2nd, 2026. • CVE-2026-42504 (High) allows excessive CPU consumption via crafted MIME headers. • CVE-2026-42507 (…
Key findings • Fifteen vulnerabilities affecting Dräger medical devices were disclosed on June 1-2, 2026. • High-severity flaws include remote data injection, denial-of-service, and privileg…
A ransomware affiliate known as Nova has been banned from its operation after mistakenly targeting Eriell Group, an oilfield services company with significant ties to Russia and Uzbekistan.
A widespread malware campaign named WeedHack has compromised more than 116,000 systems globally since January, primarily targeting players of the popular game Minecraft.
Key findings • Six vulnerabilities in authentik disclosed on June 2, 2026, including two critical and three high-severity flaws. • Critical flaws include an authentication bypass via empty PO…
Key findings • Four distinct vulnerabilities in Mozilla Firefox disclosed between June 1-2, 2026. • Two critical vulnerabilities found in the JavaScript Engine's JIT compilation and graphics …
A new ransomware toolkit, reportedly built with AI, automates critical stages of an attack, including Active Directory discovery and evading endpoint detection and response systems.
A solo Russian-speaking threat actor has been running a five-year influence and cryptocurrency fraud campaign on Telegram, leveraging stolen Google Gemini API keys to automate AI-generated content and operations.
A sophisticated phishing campaign is impersonating Google to trick Chrome extension developers into revealing their login credentials.
Multiple US federal agencies, including CISA and the FBI, have issued a joint warning about cyber threats targeting Automatic Tank Gauge (ATG) systems, urging immediate hardening measures.
Microsoft announced the expanded preview of its multi-model agentic scanning harness (MDASH) at Build 2026, an AI system designed to discover and validate exploitable vulnerabilities in codebases.
Cybercriminals are increasingly abusing major cloud platforms like AWS, Google Cloud, and Microsoft Azure to host command and control infrastructure and disguise malicious network traffic.
The U.S. Department of Defense is strategically integrating cyber capabilities into all military operations and emphasizing the foundational security of artificial intelligence systems.
A significant outage impacting Microsoft Exchange Online has caused widespread email delays and failures for users across North America and Germany.
The Trump administration has issued a revised executive order on artificial intelligence, significantly weakening previous drafts by adopting a voluntary framework for industry engagement and model testing.
A critical authentication bypass vulnerability in the WordPress Burst Statistics plugin (CVE-2026-8181) is being actively exploited, allowing unauthenticated attackers to take over websites by impersonating administrators.
A single line of debug code left in six Microsoft 365 Android apps could have exposed billions of app downloads to unauthorized access to Microsoft account tokens.