May 2026

GitHub, Grafana Labs breaches traced back to TanStack supply chain compromise

GitHub, Grafana Labs breaches traced back to TanStack supply chain compromise 2026-05-21 at 16:56 By Zeljka Zorz GitHub CISO Alexis Wales has named the malicious VS Code extension behind the breach they suffered at the hands of the threat group TeamPCP: Nx Console, a popular developer tool with 2.2 million installs. A malicious version of […]

GitHub, Grafana Labs breaches traced back to TanStack supply chain compromise Read More »

ThreatsDay Bulletin: Linux Rootkits, Router 0-Day, AI Intrusions, Scam Kits and 25 New Stories

ThreatsDay Bulletin: Linux Rootkits, Router 0-Day, AI Intrusions, Scam Kits and 25 New Stories 2026-05-21 at 16:56 By This week starts small. A token leaks. A bad package slips in. A login trick works. An old tool shows up again. At first, it feels like the usual mess. Then you see the pattern: attackers are

ThreatsDay Bulletin: Linux Rootkits, Router 0-Day, AI Intrusions, Scam Kits and 25 New Stories Read More »

Bitcoin’s ‘less aggressive demand’ may lead to months of consolidation: Analysis

Bitcoin’s ‘less aggressive demand’ may lead to months of consolidation: Analysis 2026-05-21 at 16:18 By Cointelegraph by Nancy Lubale Bitcoin demand and ETF flows weaken as BTC struggles below $80,000, raising risks of prolonged consolidation or a drop toward $65,000. This article is an excerpt from Cointelegraph.com News View Original Source

Bitcoin’s ‘less aggressive demand’ may lead to months of consolidation: Analysis Read More »

Jane Street accused of using Terra Telegram backchannel before UST crash

Jane Street accused of using Terra Telegram backchannel before UST crash 2026-05-21 at 16:18 By Cointelegraph by Zoltan Vardai The private Telegram backchannel allegedly allowed Jane Street to unwind hundreds of millions in potential exposure “mere hours before” the Terra ecosystem’s $40 billion collapse. This article is an excerpt from Cointelegraph.com News View Original Source

Jane Street accused of using Terra Telegram backchannel before UST crash Read More »

Boerse Stuttgart taps SocGen, flatexDEGIRO for EU blockchain settlement push

Boerse Stuttgart taps SocGen, flatexDEGIRO for EU blockchain settlement push 2026-05-21 at 16:18 By Cointelegraph by Amin Haqshanas Boerse Stuttgart’s Seturion has partnered with Societe Generale, SG-FORGE and flatexDEGIRO to build a pan-European blockchain securities settlement system. This article is an excerpt from Cointelegraph.com News View Original Source

Boerse Stuttgart taps SocGen, flatexDEGIRO for EU blockchain settlement push Read More »

Cisco Patches Critical Vulnerability in Secure Workload

Cisco Patches Critical Vulnerability in Secure Workload 2026-05-21 at 15:24 By Ionut Arghire Insufficient validation and authentication in the Secure Workload’s REST APIs provide remote attackers with Site Admin privileges. The post Cisco Patches Critical Vulnerability in Secure Workload appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Cisco Patches Critical Vulnerability in Secure Workload Read More »

Ocean Emerges From Stealth With $28M for Agentic Email Security Platform

Ocean Emerges From Stealth With $28M for Agentic Email Security Platform 2026-05-21 at 15:24 By SecurityWeek News The company has developed a platform that uses specialized AI agents to inspect every incoming message. The post Ocean Emerges From Stealth With $28M for Agentic Email Security Platform appeared first on SecurityWeek. This article is an excerpt

Ocean Emerges From Stealth With $28M for Agentic Email Security Platform Read More »

Microsoft Warns of Two Actively Exploited Defender Vulnerabilities

Microsoft Warns of Two Actively Exploited Defender Vulnerabilities 2026-05-21 at 15:24 By Microsoft has disclosed that a privilege escalation and a denial-of-service flaw in Defender has come under active exploitation in the wild. The former, tracked as CVE-2026-41091, is rated 7.8 on the CVSS scoring system. Successful exploitation of the flaw could allow an attacker

Microsoft Warns of Two Actively Exploited Defender Vulnerabilities Read More »

Microsoft Defender vulnerabilities exploited in the wild (CVE-2026-41091, CVE-2026-45498)

Microsoft Defender vulnerabilities exploited in the wild (CVE-2026-41091, CVE-2026-45498) 2026-05-21 at 14:22 By Zeljka Zorz Attackers are exploiting two Microsoft Defender vulnerabilities (CVE-2026-41091 and CVE-2026-45498), Microsoft acknowledged and CISA confirmed by adding them to its Known Exploited Vulnerabilities catalog. The vulnerabilities CVE-2026-41091 allows for local privilege elevation (LPE), and is caused by the Microsoft Malware

Microsoft Defender vulnerabilities exploited in the wild (CVE-2026-41091, CVE-2026-45498) Read More »

Apple Rejected 2 Million App Store Submissions in 2025 for Security and Fraud Prevention

Apple Rejected 2 Million App Store Submissions in 2025 for Security and Fraud Prevention 2026-05-21 at 14:22 By Ionut Arghire The company blocked over 1.1 billion accounts and $2.2 billion in potentially fraudulent transactions. The post Apple Rejected 2 Million App Store Submissions in 2025 for Security and Fraud Prevention appeared first on SecurityWeek. This

Apple Rejected 2 Million App Store Submissions in 2025 for Security and Fraud Prevention Read More »

Drupal Patches Highly Critical Vulnerability Exposing Websites to Hacking

Drupal Patches Highly Critical Vulnerability Exposing Websites to Hacking 2026-05-21 at 14:22 By Eduard Kovacs CVE-2026-9082 can be exploited without authentication for information disclosure, privilege escalation, and remote code execution. The post Drupal Patches Highly Critical Vulnerability Exposing Websites to Hacking appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Drupal Patches Highly Critical Vulnerability Exposing Websites to Hacking Read More »

Socket Raises $60 Million at $1 Billion Valuation

Socket Raises $60 Million at $1 Billion Valuation 2026-05-21 at 13:50 By Ionut Arghire The company will invest in its firewall, certified patches, protection extensions, new products, and team expansion. The post Socket Raises $60 Million at $1 Billion Valuation appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Socket Raises $60 Million at $1 Billion Valuation Read More »

One Man, One AI, One Fake Persona: Inside the 5-Year Influence and Fraud ‘Patriot Bait’ Campaign

One Man, One AI, One Fake Persona: Inside the 5-Year Influence and Fraud ‘Patriot Bait’ Campaign 2026-05-21 at 13:14 By A solo Russian-speaking threat actor ran a 5-year Telegram channel and, starting September 2025, used AI to automate its content, credential theft, and a cryptocurrency fraud scheme targeting American audiences. This article is an excerpt

One Man, One AI, One Fake Persona: Inside the 5-Year Influence and Fraud ‘Patriot Bait’ Campaign Read More »

Microsoft Patches Exploited UnDefend and RedSun Defender Zero-Days

Microsoft Patches Exploited UnDefend and RedSun Defender Zero-Days 2026-05-21 at 13:14 By Ionut Arghire The bugs could be exploited to elevate privileges to System or create a denial-of-service (DoS) condition. The post Microsoft Patches Exploited UnDefend and RedSun Defender Zero-Days appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Microsoft Patches Exploited UnDefend and RedSun Defender Zero-Days Read More »

Google’s Surge in Chrome Vulnerability Discoveries Likely Driven by AI

Google’s Surge in Chrome Vulnerability Discoveries Likely Driven by AI 2026-05-21 at 13:14 By Eduard Kovacs More than 200 vulnerabilities patched in recent Chrome releases are marked as ‘reported by Google’. The post Google’s Surge in Chrome Vulnerability Discoveries Likely Driven by AI appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

Google’s Surge in Chrome Vulnerability Discoveries Likely Driven by AI Read More »

Virtru centers file collaboration around data-level protection

Virtru centers file collaboration around data-level protection 2026-05-21 at 11:40 By Industry News Virtru unveiled Virtru Collaborate, a new offering that eliminates that tradeoff, a FedRAMP authorized space where sensitive files are encrypted and protected by the Trusted Data Format (TDF), and where that protection travels seamlessly with the data as teams work together across

Virtru centers file collaboration around data-level protection Read More »

ASAPP expands adversarial testing for enterprise AI systems

ASAPP expands adversarial testing for enterprise AI systems 2026-05-21 at 11:40 By Industry News ASAPP has launches Continuous Red Teaming, a new capability that integrates adversarial AI testing directly into ASAPP’s model evaluation framework. The new capability is built on Promptfoo, an AI security platform that helps enterprises detect and address vulnerabilities in AI systems

ASAPP expands adversarial testing for enterprise AI systems Read More »

Scroll to Top