Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,781 stories synthesized.
CISA added three vulnerabilities to its Known Exploited Vulnerabilities catalog on May 27, 2026, including two supply-chain style malicious code flaws in Daemon Tools Lite and Nx Console, plus an unspecified bug in TanStack.
Eighteen security vulnerabilities in the open-source Budibase low-code platform were disclosed on May 27, 2026, including a critical SCIM auth bypass (CVSS 9.9) and multiple SSRF flaws, all fixed in versions 3.39.0 and earlier.
A sophisticated npm supply chain attack published 22 versions of the 'forge-jsxy' package in 22 days, deploying a persistent backdoor that steals cryptocurrency wallet keys, browser credentials, and sensitive data across Windows, macOS, and Linux.
Six high-severity vulnerabilities hit Kirby CMS on May 26–27, 2026, spanning XSS, path traversal, permission bypass, and arbitrary method call — all patched in versions 5.4.1 and 4.6.1.
Key findings • CISA added CVE-2026-48027, a Nrwl vulnerability, to the KEV catalog on May 27, 2026. • The flaw is confirmed under active exploitation and tied to ransomware campaigns. • F…
Twenty vulnerabilities, four with CVSS 10.0, were disclosed in the open-source Free5gc 5G core network, all fixed in version 4.2.2.
Tenable Research's graph-based model linking 600+ threat groups to vulnerabilities across 7,800 customer environments reveals that 68% of organizations carry at least one CVE previously exploited by a named adversary.
A leak allegedly exposing 5.8 million records of Uruguayan citizens has been linked to Latin American cybercriminals who systematically target government agencies to monetize stolen citizen data.
Microsoft uncovered a cryptojacking campaign that poisons LLM-based AI chatbot recommendations to steer users toward malicious download sites for popular utilities, deploying miners and remote access tools.
Attackers are using AI to dramatically reduce the time needed to develop working exploits for CVEs, outpacing traditional vulnerability scanners and accelerating the weaponization of disclosed flaws.
Researchers discovered a malicious npm package, 'mouse5212-super-formatter,' that exfiltrates files from Anthropic Claude's dedicated user data directory to a threat actor-controlled GitHub account.
A hidden preinstalled system app called Smart Feed on Motorola smartphones intercepts Amazon app launches and silently redirects them through affiliate tracking URLs, injecting affiliate codes without user consent.
A critical vulnerability in Starlette, tracked as CVE-2026-48710, allows attackers to bypass authentication on FastAPI-based AI infrastructure by crafting malicious HTTP Host headers.
Jenkins disclosed 13 vulnerabilities across 11 plugins on May 27, 2026, including two High-severity flaws enabling remote code execution and arbitrary file reads.
IBM disclosed 25 vulnerabilities across a dozen product lines on May 27, 2026, including critical buffer-overflow bugs in Aspera High-Speed Transfer and a critical RCE in Langflow.
A critical Windows kernel vulnerability, CVE-2026-40369, allows unprivileged processes to achieve deterministic SYSTEM-level privilege escalation from browser sandboxes without race conditions or heap spraying.
Google Cloud unveiled AI Threat Defense, an automated platform combining Gemini models, Wiz, and CodeMender to find, prioritize, and patch vulnerabilities at machine speed.
Cisco Talos disclosed four heap-based buffer overflow vulnerabilities in MediaArea MediaInfoLib that could allow arbitrary code execution via a malicious media file.
India's CERT-In recommends patching exploited n-day vulnerabilities within 12 hours for internet-facing systems, warning that AI tools like agentic agents and frontier models are compressing the attack timeline.
An industry collaboration between CrowdStrike, Google and the Shadowserver Foundation has disrupted the Glassworm botnet, a stealthy network that targeted software developers by poisoning open-source packages and stealing credentials.
Researchers have discovered a multi-turn manipulation vulnerability affecting all major large language models, including GPT-4, Claude, and Gemini, that bypasses safety guardrails by breaking down malicious requests across several conversation turns.
A stored XSS vulnerability in pretalx, an open-source conference management platform, allowed attackers to hijack organizer sessions and auto-accept speaker submissions.
Jenkins released a security advisory addressing 11 vulnerabilities across plugins including LDAP, Active Directory, Email Extension, and Pipeline: Groovy Libraries, with some flaws enabling remote code execution.
Cybersecurity startup RevEng.AI has raised $15 million in Series A funding to scale its AI-powered binary analysis platform, BinNet, which detects vulnerabilities and backdoors in compiled software without requiring source code.