Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,783 stories synthesized.
Key findings • Seven vulnerabilities disclosed for Soplanning v1.55 and below on June 1, 2026. • Critical SQL injection (CVE-2026-40546) allows full database control. • High-severity auth…
Key findings • Three medium-severity SSRF vulnerabilities disclosed in Jeecgboot. • Vulnerabilities affect Jeecgboot versions up to 3.9.1 and 3.9.2. • CVE-2026-10240 and CVE-2026-10239 ha…
Key findings • Ten memory-safety CVEs disclosed together in Assimp up to v6.0.4 • Five bugs in the Half-Life 1 MDL loader, including four heap buffer overflows • Four null pointer derefer…
Microsoft will require explicitly registered authentication methods for Entra ID Self-Service Password Reset, removing reliance on unverified directory-stored contact info, with enforcement starting September 7, 2026.
Palo Alto Networks has issued an urgent warning that a high-severity vulnerability in its PAN-OS firewall operating system is being actively exploited in the wild, with hotfixes now available.
North Korean threat group Famous Chollima compromised a legitimate PHP package on Packagist, hiding a JavaScript malware loader that retrieves encrypted payloads from blockchain transactions.
MediaTek disclosed four vulnerabilities on June 1, 2026, including three out-of-bounds write flaws in the GenieZone TEE and a heap buffer overflow in the WLAN AP driver, all with patches available.
Five vulnerabilities, including four stack-based buffer overflows, were disclosed for the Tenda W12 router, all remotely exploitable with public exploit code already circulating.
Key findings • Eight SQL injection CVEs disclosed across five code-projects applications in a 48-hour window • Public exploit code is available for all eight vulnerabilities • Three of th…
OWASP has released Agent Memory Guard, an open-source runtime defense layer that protects AI agents from memory poisoning attacks targeting persistent stores like conversation history and vector databases.
A logic-layer vulnerability in Instagram's Meta AI account recovery tool allowed attackers to hijack premium short-handle accounts by tricking the chatbot into forwarding password reset codes without any identity verification.
CVE-2026-41089, a critical 0-click RCE in Windows Netlogon, is under active exploitation, enabling unauthenticated attackers to take over domain controllers with SYSTEM privileges.
Researchers detail an infection chain starting with an unidentified RAT that delivered a NetSupport Manager RAT payload through the SmartApeSG ClickFix campaign.
Key findings • 32 legitimate packages under the @redhat-cloud-services npm scope were simultaneously compromised • Affected packages include high-download libraries active for over 7 years, s…
The Pwn2Own Berlin 2026 hacking competition saw a record $1.29 million awarded for the exploitation of 47 zero-day vulnerabilities, with AI-powered targets and tools dominating the event.
Key findings • CISA added Oracle WebLogic Server vulnerability CVE-2024-21182 to its KEV catalog on June 1, 2026. • The flaw allows unauthenticated attackers to compromise WebLogic servers vi…
Pakistan-linked SideCopy APT targeted Afghanistan's Ministry of Finance with XenoRAT malware, compromising all 34 provincial finance directorates via spear-phishing emails.
A previously unknown hacking group has been quietly targeting Russian maritime universities, energy facilities, diplomatic missions, and government agencies for nearly two years, researchers at Kaspersky revealed.
Key findings • 35 of 40 malicious packages belong to the @antv/ npm scope, a popular visualization toolkit • All 40 advisories were published simultaneously on 2026-05-19, indicating a coordi…
Twelve malicious npm packages were disclosed within the same minute on May 18, 2026, all registered that day and impersonating utility names like safe-env-reader and validate-api-key in a coordinated supply-chain attack.
Security researchers disclosed 14 malicious npm packages impersonating the Zentra Finance DeFi protocol, all published within the same minute on May 18, 2026, in a coordinated supply-chain attack targeting blockchain developers.
A coordinated burst of 12 malicious npm packages impersonating developer utilities was disclosed within 14 minutes on May 22–23, 2026, targeting AI/LLM and DevOps workflows.
Key findings • 40 malicious npm packages disclosed in the same instant across three scopes • All packages share the same C2 host: oob.moika.tech • Post-install scripts exfiltrate process.…
Key findings • All 16 packages share the @t-in-one/ npm scope, registered on May 28, 2026 • Every package was disclosed in a single coordinated advisory push on May 29 • All packages exec…