Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,187 stories synthesized.
New guidance from CISA and NIST offers federal agencies and cloud providers recommendations to secure identity assertions and access tokens against forgery, theft, and misuse.
Electric and gas utility CenterPoint Energy has confirmed a data breach exposing customer information, which was subsequently found posted on the dark web.
The latest Homebrew release, version 7.0.0, introduces a built-in vulnerability scanner, 'brew vulns', and significantly strengthens package sandboxing on macOS and Linux.
UltraViolet Cyber's new Equinox platform uses AI and automation to assess and optimize security detection coverage against MITRE frameworks, aiming to provide organizations with a clear understanding of their defenses.
A Thai broadband provider has been targeted by attackers exploiting an unknown Fortinet vulnerability, with threat actors employing reconnaissance and privilege escalation tools.
A Swiss court has sentenced a Ukrainian national to nearly 13 years in prison for developing and distributing the LockerGoga, MegaCortex, and Nefilim ransomware strains.
Australia is replacing its Essential Eight cybersecurity framework with a new, outcomes-focused Essentials series, shifting from checklist compliance to demonstrating continuous security posture across IT, cloud, and OT.
Key findings • Mozilla disclosed 25 vulnerabilities in Firefox, Firefox ESR, and Thunderbird on September 15, 2026. • The batch includes privilege escalation, sandbox escapes, mitigation bypa…
Key findings • Mozilla disclosed 25 vulnerabilities in Firefox, Firefox ESR, and Thunderbird on September 15, 2026. • Vulnerabilities include privilege escalation, sandbox escapes, mitigation…
A new eBook from Enzoic emphasizes the growing threat of stolen credentials, accelerated by infostealer malware, and advocates for an identity-first approach to cybersecurity.
Cloudflare's new setting allows website owners to prevent AI training while maintaining search engine visibility, addressing a key conflict for content creators.
Cloudflare's Developer Platform now offers granular authorization, allowing precise control over teammate and agent access to individual Workers.
China's top intelligence official has identified specific U.S. AI models as posing a significant risk to the nation's critical infrastructure and political security.
Manhattan District Attorney Alvin Bragg announced the takedown of 12 websites that facilitated the creation and distribution of AI-generated deepfake pornography, impacting over 1,200 individuals.
A new subscription service named Luciferus is being sold on the Exploit hacking forum, offering uncensored AI capabilities as an alternative to jailbreaking popular models like ChatGPT and Claude.
UK's NCSC, alongside US and Dutch intelligence agencies, warns of CHOSEN BRICK malware used by Iran to spy on dissidents, activists, and journalists worldwide.
A data breach at Japan's Digital Agency has exposed the personal information of approximately 240,000 individuals, stemming from a vulnerability in a VPN product.
Apple has issued major updates for its operating systems, patching approximately 200 security vulnerabilities across iOS 27, iPadOS 27, and macOS Golden Gate 27.
Trail of Bits criticizes 1Password's AI patching benchmark, arguing its headline 26% 'clean fix' rate is misleading due to flawed testing methodologies.
A critical remote code execution vulnerability in Gitea, CVE-2026-60004, is being actively exploited by the Chinese-speaking threat actor Red Heron to compromise source-code management servers.
Meta AI has been observed creating detailed profiles of children by aggregating years of family posts from Facebook and Instagram, raising significant privacy concerns.
Microsoft has confirmed that its September 2026 security update for Excel, KB5002914, is causing copy and paste operations to fail silently across multiple versions, impacting productivity.
Cybercriminals are using sophisticated search engine poisoning tactics to redirect users to fake Bitrefill checkout pages, aiming to trick them into sending cryptocurrency directly to scammer-controlled wallets.
Threat actors are exploiting the Volume Shadow Copy Service (VSS) with VSSAdmin to exfiltrate Active Directory databases and delete recovery snapshots, hindering incident response.