Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,561 stories synthesized.
The UK's National Cyber Security Centre (NCSC) has issued a stark warning that critical national infrastructure could face AI-powered ransomware attacks by 2028, urging immediate investment in cyber resilience.
CrowdStrike and Deloitte are expanding their partnership to integrate CrowdStrike's AI-powered Falcon platform into Deloitte's advisory services, aiming to translate security risk findings into actionable business strategies.
CrowdStrike announced its intent to acquire Dreadnode, a company specializing in automated AI security testing, to integrate its capabilities into the Falcon platform.
CrowdStrike introduces AI Kill Switch, a new security control designed to detect and terminate malicious or misaligned AI agents, offering organizations a critical safety net in the expanding agentic era.
NATO's Cooperative Cyber Defence Centre of Excellence is incorporating AI agents into its annual Crossed Swords exercise, focusing on synchronizing cyber operations with kinetic military actions.
Cryptocurrency exchange BYDFi is offering new users up to 8,100 USDT in welcome rewards, but frames the promotion as a security-first guide to protect users from common onboarding threats.
Zero Day Initiative has disclosed ZDI-26-854, a critical remote code execution vulnerability in Quest Foglight for Databases, allowing unauthenticated attackers to execute arbitrary code with SYSTEM privileges.
A critical XML External Entity (XXE) vulnerability in Quest Foglight for Databases allows unauthenticated remote attackers to disclose sensitive information.
A denial-of-service vulnerability in Microsoft Windows' Aero theme, disclosed by ZDI, allows local attackers to cause system instability.
A vulnerability in Quest Foglight for Databases allows authenticated attackers to disclose sensitive system information through improper file path validation.
A critical vulnerability in Quest Foglight for Databases allows unauthenticated attackers to achieve remote code execution by exploiting an external control of file path flaw.
A directory traversal vulnerability in Quest Foglight for Databases allows authenticated attackers to execute arbitrary code with SYSTEM privileges.
AI coding agents are installing deprecated MCP servers due to outdated training data, a pattern dubbed MCPhantom, leaving systems vulnerable to unpatched, high-severity exploits.
Attackers are actively exploiting CVE-2026-81648, a critical vulnerability in the CryptoPayment Gateway WordPress plugin, allowing unauthenticated users to delete arbitrary files and expose sensitive wallet credentials.
The IPFire project has released fireperf, a new open-source tool designed to measure how network devices handle a high volume of connections, offering a distinct approach from traditional bandwidth testers.
OpenAI is initiating an internal security sprint, partnering with Cathedral Systems and enhancing bug bounty rewards to proactively discover and remediate vulnerabilities across its platforms, leveraging AI for efficiency.
Leading AI labs OpenAI and Anthropic have enhanced their monitoring systems for AI agent misbehavior but admit significant limitations remain in detecting novel threats.
WorkOS confirmed a data breach exposing customer contact information and sales conversations, attributed to the ARTEX AI offensive security framework.
Key findings • CVE-2026-119977, a WordPress vulnerability, is actively exploited in the wild. • CISA added this flaw to its Known Exploited Vulnerabilities Catalog on November 3, 2026. • …
Palo Alto Networks' Unit 42 highlights ongoing cyberespionage and financial extortion campaigns, noting a significant trend of threat actors integrating AI tools to enhance their operations.
Intel's federal CTO, Steve Orrin, provides a roadmap for organizations to prepare for the post-quantum era, emphasizing discovery, prioritization, and phased migration.
A maximum-severity vulnerability in the widely used Node-RED programming tool is being actively exploited to deliver Linux malware, posing a significant threat to operational technology and industrial control systems.
Key findings • Ten malicious npm packages were disclosed on November 2, 2026. • All advisories were published within a tight seven-minute window. • Packages were first published around 2.…
Microsoft's extensive analysis of over 383,000 disclosed vulnerabilities shows that only a small fraction are actively exploited, with threat actors heavily favoring flaws that enable system takeover.