May 2026

New ‘Dirty Frag’ Linux Vulnerability Possibly Exploited in Attacks

New ‘Dirty Frag’ Linux Vulnerability Possibly Exploited in Attacks 2026-05-11 at 11:27 By Eduard Kovacs Also called Copy Fail 2 and tracked as CVE-2026-43284 and CVE-2026-43500, the exploit was disclosed before a patch was released. The post New ‘Dirty Frag’ Linux Vulnerability Possibly Exploited in Attacks appeared first on SecurityWeek. This article is an excerpt […]

New ‘Dirty Frag’ Linux Vulnerability Possibly Exploited in Attacks Read More »

Fake OpenAI Privacy Filter Repo Hits #1 on Hugging Face, Draws 244K Downloads

Fake OpenAI Privacy Filter Repo Hits #1 on Hugging Face, Draws 244K Downloads 2026-05-11 at 11:27 By A malicious Hugging Face repository managed to take a spot in the platform’s trending list by impersonating OpenAI’s Privacy Filter open-weight model to deliver a Rust-based information stealer to Windows users. The project, named Open-OSS/privacy-filter, masqueraded as its

Fake OpenAI Privacy Filter Repo Hits #1 on Hugging Face, Draws 244K Downloads Read More »

Resurrected ‘Crimenetwork’ Marketplace Taken Down, Administrator Arrested

Resurrected ‘Crimenetwork’ Marketplace Taken Down, Administrator Arrested 2026-05-11 at 10:38 By Ionut Arghire The second iteration of the German-speaking online crime marketplace had over 22,000 users and more than 100 sellers. The post Resurrected ‘Crimenetwork’ Marketplace Taken Down, Administrator Arrested appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Resurrected ‘Crimenetwork’ Marketplace Taken Down, Administrator Arrested Read More »

Rustinel: Open-source endpoint detection for Windows and Linux

Rustinel: Open-source endpoint detection for Windows and Linux 2026-05-11 at 08:51 By Mirko Zorz Open-source endpoint detection has long been split between Windows-focused tools built around Sysmon and Linux tools built around eBPF or auditd. Defenders running mixed environments have had to stitch together separate pipelines, separate rule sets, and separate maintenance burdens. Rustinel, a

Rustinel: Open-source endpoint detection for Windows and Linux Read More »

Review: Foundations of Cybersecurity, 2nd edition

Review: Foundations of Cybersecurity, 2nd edition 2026-05-11 at 08:18 By Mirko Zorz Jason Andress has refreshed his introductory security text for No Starch Press. He writes in the introduction that the term security now extends past data center servers to cloud resources, mobile devices, the Internet of Things, and AI. About the author Jason Andress

Review: Foundations of Cybersecurity, 2nd edition Read More »

Security teams are turning to AI to survive alert overload

Security teams are turning to AI to survive alert overload 2026-05-11 at 08:18 By Anamarija Pogorelec The World Economic Forum white paper “Empowering Defenders: AI for Cybersecurity” identified AI as the biggest driver of change in cybersecurity for 94% of survey respondents. The paper found that 77% of organizations already use AI in cybersecurity, with

Security teams are turning to AI to survive alert overload Read More »

Over 500 Organizations Hit in Years-Long Phishing Campaign

Over 500 Organizations Hit in Years-Long Phishing Campaign 2026-05-11 at 07:22 By Ionut Arghire Victims span across the aviation, critical infrastructure, energy, logistics, public administration, and technology sectors. The post Over 500 Organizations Hit in Years-Long Phishing Campaign appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Over 500 Organizations Hit in Years-Long Phishing Campaign Read More »

Ollama Out-of-Bounds Read Vulnerability Allows Remote Process Memory Leak

Ollama Out-of-Bounds Read Vulnerability Allows Remote Process Memory Leak 2026-05-10 at 16:03 By Cybersecurity researchers have disclosed a critical security vulnerability in Ollama that, if successfully exploited, could allow a remote, unauthenticated attacker to leak its entire process memory. The out-of-bounds read flaw, which likely impacts over 300,000 servers globally, is tracked as CVE-2026-7482 (CVSS

Ollama Out-of-Bounds Read Vulnerability Allows Remote Process Memory Leak Read More »

What Is the Instructure Canvas Breach? Impact, Risks, and What Institutions Should Do

What Is the Instructure Canvas Breach? Impact, Risks, and What Institutions Should Do 2026-05-10 at 15:32 By The Instructure Canvas breach affects universities, K–12 school districts, and teaching hospitals globally. This blog entry intends to provide context and practical guidance. This article is an excerpt from Trend Micro Research, News and Perspectives View Original Source

What Is the Instructure Canvas Breach? Impact, Risks, and What Institutions Should Do Read More »

Week in review: cPanel vulnerability actively exploited, DigiCert breach, LinkedIn job scams

Week in review: cPanel vulnerability actively exploited, DigiCert breach, LinkedIn job scams 2026-05-10 at 12:32 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Your work apps are quietly handing 19 data points to someone Office work in 2026 relies on mobile apps used alongside

Week in review: cPanel vulnerability actively exploited, DigiCert breach, LinkedIn job scams Read More »

cPanel, WHM Release Fixes for Three New Vulnerabilities — Patch Now

cPanel, WHM Release Fixes for Three New Vulnerabilities — Patch Now 2026-05-09 at 10:16 By cPanel has released updates to address three vulnerabilities in cPanel and Web Host Manager (WHM) that could be exploited to achieve privilege escalation, code execution, and denial-of-service. The list of vulnerabilities is as follows – CVE-2026-29201 (CVSS score: 4.3) –

cPanel, WHM Release Fixes for Three New Vulnerabilities — Patch Now Read More »

Judge won’t rubber-stamp Elon Musk’s $1.5M settlement with SEC over Twitter disclosures

Judge won’t rubber-stamp Elon Musk’s $1.5M settlement with SEC over Twitter disclosures 2026-05-09 at 03:42 By Reuters Judge Sparkle Sooknanan said she must consider several factors several factors including whether it is “tainted by improper collusion or corruption.” This article is an excerpt from Latest Technology News | New York Post View Original Source

Judge won’t rubber-stamp Elon Musk’s $1.5M settlement with SEC over Twitter disclosures Read More »

Jane Street, one of Wall Street’s most secretive firms, hauled in whopping $16B in trading revenue — here’s how

Jane Street, one of Wall Street’s most secretive firms, hauled in whopping $16B in trading revenue — here’s how 2026-05-09 at 00:43 By Reuters It further cemented its position at the top of the world of high-frequency trading ahead of Wall Street’s top investment banks. This article is an excerpt from Latest Technology News |

Jane Street, one of Wall Street’s most secretive firms, hauled in whopping $16B in trading revenue — here’s how Read More »

Nintendo hiking Switch 2 prices by hefty amount — and still warns sales will fall next year

Nintendo hiking Switch 2 prices by hefty amount — and still warns sales will fall next year 2026-05-09 at 00:43 By Associated Press Japanese exporters are having to cope with President Trump’s tariff hikes and other higher costs that have been worsened by the war in Iran. This article is an excerpt from Latest Technology

Nintendo hiking Switch 2 prices by hefty amount — and still warns sales will fall next year Read More »

AI Will Tell Your Breach Story for the Next Two Years — Day One Decides What It Says

AI Will Tell Your Breach Story for the Next Two Years — Day One Decides What It Says 2026-05-09 at 00:42 By The companies that win the AI-era reputation fight will be the ones whose CISOs and CCOs share a line item, a runbook, and a dashboard.  This article is an excerpt from Subscribe to

AI Will Tell Your Breach Story for the Next Two Years — Day One Decides What It Says Read More »

Fake Call History Apps Stole Payments From Users After 7.3 Million Play Store Downloads

Fake Call History Apps Stole Payments From Users After 7.3 Million Play Store Downloads 2026-05-09 at 00:42 By Cybersecurity researchers have discovered fraudulent apps on the official Google Play Store for Android that falsely claimed to offer access to call histories for any phone number, only to trick users into joining a subscription that provided

Fake Call History Apps Stole Payments From Users After 7.3 Million Play Store Downloads Read More »

One Click, Total Shutdown: The “Patient Zero” Webinar on Killing Stealth Breaches

One Click, Total Shutdown: The “Patient Zero” Webinar on Killing Stealth Breaches 2026-05-09 at 00:42 By The hardest part of cybersecurity isn’t the technology, it’s the people. Every major breach you’ve read about lately usually starts the same way: one employee, one clever email, and one “Patient Zero” infection. In 2026, hackers are using AI

One Click, Total Shutdown: The “Patient Zero” Webinar on Killing Stealth Breaches Read More »

TCLBANKER Banking Trojan Targets Financial Platforms via WhatsApp and Outlook Worms

TCLBANKER Banking Trojan Targets Financial Platforms via WhatsApp and Outlook Worms 2026-05-08 at 21:12 By Threat hunters have flagged a previously undocumented Brazilian banking trojan dubbed TCLBANKER that’s capable of targeting 59 banking, fintech, and cryptocurrency platforms. The activity is being tracked by Elastic Security Labs under the moniker REF3076. The malware family is assessed

TCLBANKER Banking Trojan Targets Financial Platforms via WhatsApp and Outlook Worms Read More »

Scroll to Top