research1 source
Google Chrome Sync Feature Abused by Cyberstalkers for Espionage
Cyberstalkers are exploiting Google Chrome's sync feature to gain unauthorized access to users' browsing history and stored passwords, researchers warn.
Jul 15, 2026
Stories
Every story we’ve synthesized.
Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,702 stories synthesized.
trend2 sources
Identity Attacks Now Lead Ransomware Infiltration, Sophos Report Finds
Identity compromise, driven by phishing and compromised credentials, has surpassed vulnerability exploitation as the primary entry point for ransomware attacks, according to Sophos's latest research.
Jul 15, 2026 · updated Jul 16, 2026
patch3 sources
Zoom Client Vulnerability Allows Unauthenticated Account Takeover
A critical vulnerability in Zoom's Windows desktop client and SDK (CVE-2026-53412) allows unauthenticated attackers to hijack user accounts.
Jul 15, 2026 · updated Jul 16, 2026
patch1 source
Drupal Core Vulnerable to Cross-Site Scripting via Layout Builder
A moderately critical cross-site scripting vulnerability has been identified in Drupal core's Layout Builder module, requiring specific user interaction for exploitation.
Jul 15, 2026
patch1 source
Drupal Core Vulnerable to Cross-Site Scripting via HTMX Attributes
Drupal core versions 11.2.x, 11.3.x, and 11.4.x contain a moderately critical cross-site scripting vulnerability due to insufficient sanitization of certain HTMX attributes.
Jul 15, 2026
research1 source
Destiny Stealer Malware Expands Reach, Posing Significant Threat to US and European Organizations
The Destiny Stealer malware is increasingly targeting corporate accounts and sensitive data across the US and Europe, with some variants evading initial detection and escalating threats before security teams can respond.
Jul 15, 2026
research3 sources · 1 CVE
Threat Actor Abuses Google Gemini CLI as Hacking Agent and Botnet Controller
A Russian-speaking threat actor has weaponized Google's open-source Gemini CLI AI tool, using it as a sophisticated hacking agent to manage a botnet and compromise sensitive data.
Jul 15, 2026 · updated Jul 20, 2026
research1 source
AI Model GPT-5.6 Sol Ultra Independently Creates Full Chrome Exploit Chain
An advanced AI model, GPT-5.6 Sol Ultra, has successfully constructed a complete exploit chain for Google Chrome by analyzing publicly available security patch commits, demonstrating a significant acceleration in exploit development capabilities.
Jul 15, 2026
breach3 sources
23andMe Settles with 42 States for $18 Million Over Data Breach
Genetic testing company 23andMe has agreed to an $18 million settlement with 42 state attorneys general over cybersecurity failures that led to a massive data breach.
Jul 15, 2026 · updated Jul 17, 2026
research1 source
Hackers Exploit Claude AI and Google Ads to Distribute MacSync Stealer
Threat actors are leveraging Anthropic's Claude AI platform and Google Ads to distribute the MacSync Stealer malware on macOS, tricking users into running malicious commands.
Jul 15, 2026
research1 source
AI 'Harness' Technology Crucial for Enabling Sophisticated Cyberattacks, Research Shows
New research from Cato Networks demonstrates that AI models, when paired with specialized 'harness' tools, can execute complex cyberattack chains autonomously and rapidly.
Jul 15, 2026
advisory1 source
Anthropic's Claude Tag for Slack Uses Shared Access Model, Requiring Careful Admin Configuration
Anthropic's Claude Tag AI agent for Slack operates on a unique shared-access model, where administrators configure a single access bundle for the agent rather than relying on individual user credentials.
Jul 15, 2026
research1 source
Phishing Campaign Abuses eCards to Deploy Legitimate RMM Tools
A six-month phishing campaign, dubbed SeasonalInvite, is tricking users into installing legitimate RMM software like AnyDesk and TeamViewer via fake eCard lures.
Jul 15, 2026
advisory2 sources
CISA, NSA, and Partners Release Guidance on Establishing Coordinated Vulnerability Disclosure Programs
CISA, NSA, and international partners have published comprehensive guidance for organizations on establishing effective Coordinated Vulnerability Disclosure (CVD) programs to better collaborate with security researchers.
Jul 15, 2026 · updated Jul 16, 2026
breach2 sources
Global Police Dismantle Massive Crypto Investment Scam, Arrest Alleged Mastermind
Dutch police have dismantled a global cryptocurrency investment scam, arresting an alleged mastermind and shutting down operations that defrauded tens of thousands worldwide.
Jul 15, 2026 · updated Jul 16, 2026
research1 source · 1 CVE
AI-Powered 'Vulnerability Vending Machine' Automates Zero-Day Discovery
Researchers have developed an AI system that automates the discovery and exploitation of complex software vulnerabilities, successfully finding a zero-day in a popular WordPress plugin.
Jul 15, 2026
patch2 sources · 2 CVEs
Multiple Vendors Release Critical Updates for Browsers, Adobe Products, and VMware
Mozilla, Google, Adobe, and Broadcom have issued urgent security updates to address a range of critical vulnerabilities affecting their popular software products.
Jul 15, 2026 · updated Jul 16, 2026
research2 sources
Windows Bind Links Enable EDR Evasion for Malware
Bitdefender researchers have detailed new techniques using Windows bind links to hide malware from endpoint detection and response (EDR) tools by manipulating filesystem views.
Jul 15, 2026 · updated Jul 20, 2026
research1 source
Rapid7 Details AWS Persistence Techniques via IAM User Manipulation
Rapid7's latest analysis reveals sophisticated methods attackers use to maintain persistent access within AWS environments by manipulating Identity and Access Management (IAM) users.
Jul 15, 2026
trend1 source
Compromised Logins Overtake Vulnerabilities as Primary Ransomware Entry Point
Sophos research indicates that compromised credentials, including those obtained through phishing and brute-force attacks, have surpassed software vulnerability exploitation as the leading method for ransomware initial access.
Jul 15, 2026
research1 source
Integrating Application Security Data into Exposure Management Platforms Enhances Visibility and Prioritization
Tenable's blog post outlines how merging application security scanner data with exposure management platforms provides comprehensive visibility, filters noise, and automates patching for critical coding flaws.
Jul 15, 2026
patch1 source
Critical Dell PowerProtect Vulnerabilities Grant Unauthenticated Remote System Access
Dell has issued urgent security updates for multiple critical vulnerabilities in its PowerProtect Data Domain products, including CVE-2026-53483 and CVE-2026-53481, which allow unauthenticated remote attackers to gain full system control.
Jul 15, 2026
patch1 source
Multiple Windows RDP Vulnerabilities Allow Attackers to Access Sensitive Data
Microsoft has patched five 'Important' rated information disclosure vulnerabilities in Windows RDP, potentially exposing sensitive system memory data.
Jul 15, 2026
advisory1 source
Radware Bolsters DefensePro X with Cloud-Augmented DDoS Protection
Radware's DefensePro X platform now features a cloud-augmented architecture, integrating AI-powered cloud algorithms for enhanced application-layer DDoS attack detection while maintaining on-premises traffic inspection and mitigation.
Jul 15, 2026