Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,782 stories synthesized.
A critical zero-day vulnerability in the self-hosted Git service Gogs allows authenticated attackers to achieve remote code execution via argument injection through pull requests with malicious branch names.
Nozomi Networks Labs disclosed 12 vulnerabilities in Waterfall WF-500 TX/RX Hosts, including four critical unauthenticated OS command injection flaws in the Console WebUI.
Google is making Device Bound Session Credentials (DBSC) generally available in Chrome to cryptographically bind authentication sessions to devices, thwarting cookie theft by infostealer malware and phishing kits.
A targeted phishing campaign is tricking Signal users into handing over their 64-character backup recovery keys, allowing attackers to decrypt entire message histories.
Researcher Andi Ahmeti disclosed a prompt injection vulnerability in ChatGPT, dubbed ChatGPhish, that allows attacker-controlled Markdown in web pages to inject phishing URLs, fake security alerts, or QR codes into the chatbot's responses.
Fortra's FIRE team uncovered a phishing campaign dubbed RatPressto that targets financial organizations with fake Adobe Document Cloud pages hosted on compromised WordPress sites to silently install ScreenConnect remote access malware.
A polished npm package named codexui-android with 27,000 weekly downloads secretly exfiltrated OpenAI Codex authentication tokens, and the same attacker published Android apps on Google Play that pulled the malicious package.
California Attorney General Rob Bonta has sued 23andMe, now Chrome Holding Co., alleging the company failed to implement basic security measures like multi-factor authentication, leading to a 2023 credential-stuffing attack that compromised 6.9 million user accounts.
Troy Murray was sentenced to 121 months in prison for selling lead lists of over 7 million elderly Americans to Jamaican fraudsters, fueling a lottery scam that caused $9.5 million in victim losses.
Researchers have demonstrated a novel browser-based side-channel attack called FROST that infers user activity by measuring SSD I/O timing through the Origin Private File System API, requiring no malware or extensions.
Google released Chrome 148, fixing 151 vulnerabilities, including critical-severity bugs that could enable remote code execution.
A malicious NuGet package impersonating a C# SDK for Brazil's Sicoob financial system steals client IDs and PFX certificates, while a parallel npm campaign deploys 14 typosquatted packages to harvest cloud secrets.
ESET's 2026 APT Activity Report reveals China-backed threat actors are exploiting regional instability to target maritime and energy companies globally.
A cross-platform RAT distributed via poisoned npm packages exfiltrates credentials, crypto wallets, and SSH keys to private HuggingFace datasets, blending malicious traffic with legitimate API calls.
ESET's Tony Anscombe covers attacks on Polish water treatment facilities, AI-directed attacks that failed in Mexico, and what Google believes is the first AI-generated zero-day exploit.
Kaspersky Container Security now includes the KIRA AI assistant to analyze Docker images for vulnerabilities and misconfigurations, revealing that 90% of popular Docker Hub images contain outdated packages with critical flaws.
Attackers distributed a fake RVTools installer signed with a valid Sectigo certificate to bypass Windows SmartScreen and deploy a Python-based RAT targeting VMware administrators.
A critical unauthenticated remote code execution vulnerability in Samba's printing subsystem, CVE-2026-4480, has been disclosed with a maximum CVSS score of 10.0.
North Korean threat actor Kimsuky targeted South Korean military and corporate entities with new malware HTTPSpy and expanded its toolkit with Rust-based HelloDoor and VS Code tunneling.
New research shows that disciplined feature engineering from sandbox behavioral analysis, not larger deep learning models, is the key to sharpening Trojan malware detection.
A TOCTOU race condition in VS Code's Remote-SSH extension lets attackers on compromised developer machines achieve remote code execution on connected cloud and on-premises servers, bypassing MFA protections.
Threat actors, including Black Basta ransomware affiliates, are exploiting Microsoft Teams' external collaboration features to impersonate IT helpdesk staff and trick victims into granting remote access.
Oracle released its May 2026 Critical Security Patch Update, fixing 35 CVEs across five product families with 11 critical-severity patches.
Microsoft has identified an active supply chain attack on npm where 14 typosquatted packages mimicking OpenSearch and ElasticSearch libraries deploy a Bun-compiled credential harvester targeting AWS, Vault, and CI/CD secrets.