May 2026

First reports come in of victims of critical cPanel vuln as ‘millions’ of sites potentially exposed 2026-05-01 at 18:23 By Carly Page Exploitation was underway before patches landed, at least one victim reports ransomware demand CISA has added a critical cPanel bug to its known-exploited list, confirming that attackers are already poking holes in one […]

Microsoft releases first big update after Nadella’s vow to ‘win back fans’ 2026-05-01 at 18:23 By Richard Speed Lots of fixes, some performance tweaks. Fingers crossed there’s no out-of-band patch to follow Microsoft is following through on its promise to prioritize Windows stability with its April 30 non-security update.… This article is an excerpt from

Cybercrime Groups Using Vishing and SSO Abuse in Rapid SaaS Extortion Attacks 2026-05-01 at 18:20 By Cybersecurity researchers are warning of two cybercrime groups that are carrying out “rapid, high-impact attacks” operating almost within the confines of SaaS environments, while leaving minimal traces of their actions. The clusters, Cordial Spider (aka BlackFile, CL-CRI-1116, O-UNC-045, and

China-Linked Hackers Target Asian Governments, NATO State, Journalists, and Activists 2026-05-01 at 18:20 By Cybersecurity researchers have disclosed details of a new China-aligned espionage campaign targeting government and defense sectors across South, East, and Southeast Asia, along with one European government belonging to NATO. Trend Micro has attributed the activity to a threat activity cluster

OpenAI locks GPT-5.5-Cyber behind velvet rope despite slamming Anthropic for doing exactly that 2026-05-01 at 15:18 By Carly Page Altman’s crew now doing the same gatekeeping it recently mocked OpenAI is lining up a limited release of its new GPT-5.5-Cyber model to a handpicked circle of “cyber defenders,” just weeks after taking a swipe at

SpaceX rocket set for unintentional Moon landing – well, a piece of it anyway 2026-05-01 at 15:18 By Richard Speed But unlike most junkers, it’ll be traveling faster than the speed of sound, claims astronomy software dev An astronomy software dev claims a Falcon 9 upper stage will hit the Moon in August, traveling at

Pro-Iran crew turns DDoS into shakedown as Ubuntu.com stays down 2026-05-01 at 15:18 By Connor Jones 313 Team tells Canonical: pay up or the packets keep coming Canonical says its web infrastructure is under attack after a pro-Iran hacktivist group instructed its members to target the open source giant.… This article is an excerpt from

Top Five Sales Challenges Costing MSPs Cybersecurity Revenue 2026-05-01 at 15:18 By The managed security services market is projected to grow from $38.31 billion in 2025 to $69.16 billion by 2030[1], with cybersecurity being the fastest-growing sector[2]. Despite this opportunity, many MSPs leave revenue on the table because their go-to-market strategy fails to connect technical

Two Cybersecurity Professionals Get 4-Year Sentences in BlackCat Ransomware Attacks 2026-05-01 at 15:18 By The U.S. Department of Justice (DoJ) on Thursday announced the sentencing of two cybersecurity professionals to four years each in prison for their role in facilitating BlackCat ransomware attacks in 2023. Ryan Goldberg, 40, of Georgia, and Kevin Martin, 36, of

UK pensions dept goes shopping for spy-van tech with £2M surveillance tender 2026-05-01 at 13:58 By Carly Page Covert cameras, live-streaming systems, and in-vehicle recording kit sought to catch out fraudsters The Department for Work and Pensions has gone shopping for covert cameras, live-streaming kit, and vehicle-based recording gear as it lines up a £2

Who needs ghost train scares when Windows is such a fright? 2026-05-01 at 13:58 By Richard Speed Things that go bork in the night Bork!Bork!Bork!  What frightens you? What, as an IT professional, would make you shriek like a small child? What tech horrors are lurking under your bed?… This article is an excerpt from

Poisoned Ruby Gems and Go Modules Exploit CI Pipelines for Credential Theft 2026-05-01 at 13:57 By A new software supply chain attack campaign has been observed using sleeper packages as a conduit to subsequently push malicious payloads that enabled credential theft, GitHub Actions tampering, and SSH persistence. The activity has been attributed to the GitHub

Passport to £££: Home Office adds £216M to travel doc contract before a single bid’s been placed 2026-05-01 at 12:19 By SA Mathieson Start date pushed back a year, annual cost up a third, and UK’s now handing out eight million passports a year The Home Office has increased the annual value and overall duration