Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,783 stories synthesized.
A critical PHP object injection vulnerability in the Mirasvit Cache Warmer plugin for Magento and Adobe Commerce allows unauthenticated attackers to achieve remote code execution.
A critical CORS misconfiguration in MCP Toolbox allows attackers to exploit DNS rebinding, potentially exposing enterprise database connectors to unauthorized access.
A firmware regression in Cloudflare's Gen12 bare-metal fleet caused boot times to balloon from minutes to hours due to inefficient UEFI network interface polling.
Meta is rolling out enhanced fraud detection and content moderation systems to combat a surge in World Cup-themed phishing, counterfeit ticket sales, and hospitality scams.
A new Android banking trojan dubbed OverlayPhantom is targeting users across ten countries by abusing Accessibility Services to steal credentials from over 180 financial applications.
A critical unauthenticated privilege escalation vulnerability in the Kirki WordPress plugin, tracked as CVE-2026-8206, allows attackers to take over administrator accounts.
Check Point's weekly threat intelligence report covers Carnival Corp's 6M-record breach, Charter Communications' ShinyHunters leak, AI-driven attacks by GREYVIBE, exploited PAN-OS and Ghost CMS flaws, and more.
A fake website impersonating the BlueWallet Bitcoin wallet tricks Mac users into running a malicious AppleScript that steals passwords, browser logins, cryptocurrency wallets, and performs clipboard hijacking.
Attackers hijacked GitHub Actions OIDC tokens to backdoor over 30 official @redhat-cloud-services npm packages, deploying a credential-stealing worm variant of the Mini Shai-Hulud malware family.
Key findings • Four high-severity vulnerabilities disclosed together for Praisonai platform on June 1, 2026. • CVE-2026-47412 allows any workspace member to delete the entire workspace. •…
A data breach at Atlas Menu, a cheat service for GTA V and CS2, leaked 64,000 email addresses, bcrypt-hashed passwords, and Rockstar Games account identifiers after an attacker dumped the database on GitHub.
This week's cybersecurity roundup covers active exploitation of a PAN-OS flaw, a critical unpatched Gogs RCE, the takedown of the GlassWorm C2 operation, and AI-powered attacks against Ukraine.
depthfirst has introduced Dependency Firewall, a product that inspects every open-source package download across an organization and blocks malicious dependencies before they reach developers or AI agents.
Rapid7 disclosed CVE-2026-0826, a critical unauthenticated stack-based buffer overflow in HP Poly VVX and Trio VoIP phones, enabling remote code execution and posing risks of eavesdropping and AI-driven voice impersonation.
A China-aligned cyber espionage campaign dubbed Operation Dragon Weave is targeting government, research, and financial sectors in the Czech Republic and Taiwan using spear-phishing emails to deliver an AdaptixC2 agent.
A critical XPath injection vulnerability in Plesk, CVE-2026-44962, allows authenticated users to execute arbitrary OS commands on affected servers, with patches now available.
Password manager Dashlane temporarily suspended customer accounts over the weekend after detecting brute-force login attempts, primarily originating from Korea and Russia.
Russian state-linked APT group Gamaredon is using a fileless worm that hides components in NTFS alternate data streams, allowing it to spread across Ukrainian networks with minimal forensic traces.
Microsoft has resolved a known issue causing installation failures and 0x800f0922 errors when deploying the May 2026 Windows 11 security update KB5089549.
Iran-linked hackers operating as 'Ababil of Minab' have destroyed IT systems, backups, and recovery infrastructure at multiple US and Middle East organizations, including LA Metro.
Silent Push researchers have identified DriveSurge, a sophisticated threat actor using ClickFix social engineering and fake browser update pages to compromise thousands of legitimate websites.
A new Securelist report breaks down the primary attack vectors targeting Docker and Kubernetes environments, highlighting real-world exploitation by APT groups like TeamPCP and detailing supply-chain compromises, container escape attempts, and orchestration API abuse.
Microsoft is investigating an outage affecting MFA enrollment and the mysignins.microsoft.com portal, potentially blocking users under Conditional Access policies.
Key findings • 17 Apache Airflow vulnerabilities disclosed on June 1, 2026, impacting multiple components. • Issues include authentication bypass, sensitive data exposure, and improper author…