Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,782 stories synthesized.
CISA warns of three vulnerabilities in XCharge C6 EV charging controllers, including a critical firmware integrity bypass (CVE-2026-9037, CVSS 9.8) that allows unauthenticated remote code execution.
CISA has issued an advisory for CVE-2026-6824, a stored cross-site scripting vulnerability in CP Plus CP-UNR-108F1 NVRs that could allow attackers to hijack sessions and steal data.
CISA has issued an advisory for CVE-2026-5768, a critical missing-authentication vulnerability in Fourth Frontier Frontier X and Frontier X2 heart monitors that could allow attackers to manipulate clinical readings and cause patient harm.
CISA warns of an authentication bypass in ABB Busch-Welcome 2 Wire Door Opener Actuators that allows attackers with physical access to open doors and gates.
CISA disclosed a critical vulnerability (CVE-2026-7786, CVSS 9.8) in Jinan USR IOT's USR-W610 RS232/485 to Wi-Fi/Ethernet converter, where hard-coded plaintext admin credentials in the firmware allow unauthenticated remote attackers to gain full device control.
CISA has issued an advisory for CVE-2021-22291, a high-severity cross-site scripting vulnerability in ABB EIBPORT V3 KNX building management devices that could allow authenticated attackers to hijack sessions and alter device configurations.
A critical privilege escalation vulnerability (CVE-2026-9560, CVSS 9.4) in OpenVPN Connect for macOS allows local attackers to execute arbitrary commands as root via the privileged helper component's IPC channel.
Sonatype analysis of 4,309 malicious packages reveals that 91% use naming-variant tactics like suffix addition and dependency confusion, moving beyond classic typosquatting to evade detection.
Attackers are distributing VIP Keylogger through phishing emails disguised as bank payment notifications and procurement orders, using steganography and multi-stage loaders to evade detection.
A newly disclosed Linux local privilege escalation vulnerability named CIFSwitch lets unprivileged users gain root access by exploiting a logic flaw between the kernel CIFS client and the cifs-utils userspace helper.
Researchers have demonstrated FROST, a JavaScript-only side-channel attack that exploits the Origin Private File System to measure SSD access timing and identify websites and applications a user is running.
Microsoft analyzes The Gentlemen ransomware, a Go-based RaaS using Curve25519 and XChaCha20 encryption with aggressive lateral movement, targeting multiple sectors globally.
Apache disclosed 12 CVEs across seven projects between May 25–28, 2026, with Shiro accounting for four bugs and Airflow's unauthenticated LDAP injection topping the batch's most dangerous flaws.
Token Security researchers disclosed a five-stage exploit chain against Zapier that turned a free account into write access on SDK packages and internal code loaded in every authenticated session.
Qevlar announced AI agents that correlate CVEs with live incident data and active exploitation signals to help SOC and vulnerability management teams prioritize risks in real time.
Rapid7 disclosed a critical argument injection vulnerability in Gogs that lets any authenticated user achieve remote code execution on the server, with no patch available.
Edamame Technologies launches a runtime verification platform that uses host telemetry and AI analysis to detect malicious behavior in AI coding agents.
A JavaScript backdoor campaign targeting energy, automotive, and government finance organizations in Eastern Europe is being powered by bulletproof hosting providers GHOSTYNETWORKS and OMEGATECH.
An access control flaw in Gitea's container registry (CVE-2026-27771) allowed unauthenticated attackers to pull private container images from over 30,000 self-hosted deployments, risking exposure of source code and credentials.
Fortinet researchers have uncovered a new variant of the PureLogs information-stealing malware that uses process hollowing through the legitimate Microsoft build tool MsBuild.exe to evade endpoint security products.
Researchers have disclosed a critical pre-authentication SQL injection vulnerability in Roundcube Webmail that allows unauthenticated attackers to manipulate backend databases, exposing sensitive email data and credentials.
Microsoft is rolling out a Secure Boot certificate refresh ahead of the June 2026 expiration of three 2011-dated certificates, warning that devices that don't transition may lose future boot-level security protections.
Carnival Corporation confirmed a data breach affecting nearly 6 million people, claimed by the ShinyHunters extortion gang after a social engineering attack in April 2026.
A convincing fake ChatGPT download site, openew[.]app, is distributing credential-stealing malware to Windows users and Atomic Stealer (AMOS) to macOS users, targeting passwords, cryptocurrency wallets, and browser data.