Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,187 stories synthesized.
Attackers are actively scanning internet-exposed Vite development servers, exploiting CVE-2026-39364 to steal sensitive AWS and Azure cloud credentials and environment variables.
Chinese threat actor Red Heron is actively exploiting a critical RCE vulnerability in Gitea, targeting at least 13 organizations across six countries.
Wordfence has identified two critical vulnerability chains in The Events Calendar WordPress plugin, enabling unauthenticated remote code execution through PHP Object Injection or arbitrary callable invocation.
A high-severity vulnerability in original Nintendo Switch consoles, patched in firmware 23.0.0, could allow nearby attackers to execute unauthorized code by tricking users into scanning a QR code.
The pro-Ukraine hacktivist group Hacking Cat has shifted from defacements and data leaks to deploying destructive malware like ransomware and wipers against Russian targets.
Microsoft is offering up to $30,000 for critical AI vulnerabilities in Dynamics 365 and Power Platform, focusing on inference manipulation and information disclosure.
Cybercriminals are operating hundreds of fake government and news websites to lure users in Uzbekistan, Belarus, and Tajikistan into phishing scams, aiming to steal money and personal information.
A critical Server-Side Request Forgery (SSRF) vulnerability in AWS Systems Manager Agent allows low-privilege attackers to bypass port-forwarding restrictions and access sensitive EC2 instance metadata, potentially leading to credential theft and unauthorized resource access.
This week's cybersecurity landscape was dominated by the increasing use of AI in attacks, a novel WeChat worm, ongoing exploitation of PaperCut, and a resurgence of older vulnerabilities.
Google's implementation of opaque google.com/goto?url= redirects for some search results hinders users' ability to verify links before clicking, raising security and usability issues.
Key findings • Five vulnerabilities disclosed for MISP on September 14, 2026, ranging from Critical to Medium severity. • Authentication bypass in LdapAuth and LinOTPAuth plugins (CVE-2026-90…
A human threat actor exploited a Marimo RCE vulnerability and gained access to an SSH bastion host in just eight seconds, demonstrating sophisticated, rapid exploitation tactics.
Wordfence's May 2026 Bug Bounty Program report highlights a significant influx of 1095 vulnerability submissions for WordPress plugins and themes, underscoring the ongoing need for robust security research in the WordPress ecosystem.
Entrust's updated Cryptographic Security Platform now operationalizes Cryptographic Bill of Materials (CBOM) data, enabling organizations to better manage machine identities, compliance, and the transition to post-quantum cryptography.
Bitsight introduces Beacon, a new platform integrating threat intelligence and continuous exposure monitoring to combat escalating third-party cybersecurity risks.
The notorious Cyclops Blink malware has resurfaced as a potent x86-64 Linux implant, targeting Cisco Firewall Management Center devices with advanced capabilities for network reconnaissance and traffic inspection.
A critical vulnerability in the Linux kernel, CVE-2026-43502 (ZcopyReaper), allows unprivileged local attackers to escalate privileges to root by exploiting improper memory cleanup in the RDS zero-copy send path.
The EU Agency for Cybersecurity (ENISA) has launched its Cyber Resilience Act (CRA) Single Reporting Platform, centralizing the reporting of actively exploited vulnerabilities and severe incidents for products with digital elements.
Check Point Research's latest threat intelligence report details significant data breaches at IDScan.net and Mathspace, novel AI attack techniques, and numerous critical vulnerabilities across major software vendors.
Chinese threat actors are exploiting a critical vulnerability in Tencent's Windows input method editor, allowing for remote code execution with a single click.
Microsoft's September 2026 Patch Tuesday update fixes a record-breaking 972 vulnerabilities, with 112 classified as critical, reflecting an accelerating trend in vulnerability discovery.
Airrived introduces Agentic Observability, a new feature for its Agentic OS, providing deep visibility into AI agent actions, data flows, and outcomes to enhance enterprise control and security.
Unit 42 introduces a novel behavioral clustering model to map cloud identities to functional roles, enhancing threat detection by analyzing activity patterns in audit logs.
Apple has issued tvOS 27.0 (24J361), a new version for its Apple TV devices that includes important security fixes.