Expert Insights on the West Pharmaceutical Ransomware Attack 2026-05-14 at 18:00 By West Pharmaceutical Services experienced a ransomware incident. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source
Expert Insights on the West Pharmaceutical Ransomware Attack Read More »
Fragnesia: New Linux kernel LPE bug was spawned by Dirty Frag patch (CVE-2026-46300) 2026-05-14 at 17:34 By Zeljka Zorz Researchers have found and disclosed yet another local privilege escalation (LPE) vulnerability in the Linux kernel: CVE-2026-46300, aka “Fragnesia”. The flaw is in the same class of vulnerabilities as the recently disclosed Dirty Frag bug(s). Like
Fragnesia: New Linux kernel LPE bug was spawned by Dirty Frag patch (CVE-2026-46300) Read More »
Ghostwriter Targets Ukrainian Government With Geofenced PDF Phishing, Cobalt Strike 2026-05-14 at 17:00 By The Belarus-aligned threat group known as Ghostwriter has been attributed to a fresh set of attacks targeting governmental organizations in Ukraine. Active since at least 2016, Ghostwriter has been linked to both cyber espionage and influence operations targeting neighboring countries, particularly
Ghostwriter Targets Ukrainian Government With Geofenced PDF Phishing, Cobalt Strike Read More »
Beyond the Breach: How Digital Forensics Is Evolving for Modern Cyber Risk 2026-05-14 at 17:00 By Daniel Ghillione Cyberattacks still break trust. That hasn’t changed. This article is an excerpt from LevelBlue Blog View Original Source
Beyond the Breach: How Digital Forensics Is Evolving for Modern Cyber Risk Read More »
Enhancing Data Center Security Without Sacrificing Performance 2026-05-14 at 17:00 By Nadir Izrael For AI data centers, where the stakes are the highest and performance constraints are the tightest, security and performance are no longer a zero-sum game. The post Enhancing Data Center Security Without Sacrificing Performance appeared first on SecurityWeek. This article is an
Enhancing Data Center Security Without Sacrificing Performance Read More »
HYCU aiR detects insider risk and AI activity from backups 2026-05-14 at 16:55 By Industry News HYCU has announced HYCU aiR (AI Resilience), an AI-native solution that turns backup data across dozens of applications into a live and actionable intelligence for security, compliance, and IT teams. aiR lets organizations search, query, and run purpose-built agents
HYCU aiR detects insider risk and AI activity from backups Read More »
New Linux Kernel Vulnerability Fragnesia Allows Root Privilege Escalation 2026-05-14 at 16:44 By Eduard Kovacs The vulnerability, tracked as CVE-2026-46300, is similar to the recently disclosed exploits named Dirty Frag and Copy Fail. The post New Linux Kernel Vulnerability Fragnesia Allows Root Privilege Escalation appeared first on SecurityWeek. This article is an excerpt from SecurityWeek
New Linux Kernel Vulnerability Fragnesia Allows Root Privilege Escalation Read More »
Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation 2026-05-14 at 13:04 By An anonymous cybersecurity researcher who disclosed three Microsoft Defender vulnerabilities has returned with two more zero-days involving a BitLocker bypass and a privilege escalation impacting Windows Collaborative Translation Framework (CTFMON). The security defects have been codenamed YellowKey and GreenPlasma, respectively, by the
Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation Read More »
Why Australian Dark Web Data Is Now Being Sold in Bundles — and What It Means for Organizational Exposure in 2026 2026-05-14 at 12:48 By Ashish Khaitan In 2026, opportunistic assaults and isolated breaches will no longer characterize Australia’s cyber risk environment. Industrialized data theft, in which stolen data is packaged, repackaged, and marketed on
AI cyber capability is speeding past earlier projections 2026-05-14 at 12:48 By Sinisa Markovic AI cyber capability is improving faster than expected, with newer models surpassing earlier projections, according to the UK government’s AI Security Institute (AISI). AISI measures AI cyber capability using “time horizon benchmarks”, which estimate how long AI systems can complete cybersecurity
AI cyber capability is speeding past earlier projections Read More »
Hackers Targeted PraisonAI Vulnerability Hours After Disclosure 2026-05-14 at 12:48 By Ionut Arghire The first exploitation attempts were observed less than four hours after the authentication bypass was publicly disclosed. The post Hackers Targeted PraisonAI Vulnerability Hours After Disclosure appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Hackers Targeted PraisonAI Vulnerability Hours After Disclosure Read More »
High-Severity Vulnerability Patched in VMware Fusion 2026-05-14 at 12:48 By Eduard Kovacs The patch was announced as Broadcom is attending the Pwn2Own hacking competition in Berlin this week. The post High-Severity Vulnerability Patched in VMware Fusion appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
High-Severity Vulnerability Patched in VMware Fusion Read More »
CERN’s open source KiCad library gives the world 17,000 circuit board components 2026-05-14 at 11:16 By Sinisa Markovic CERN has released its complete KiCad component library under an open source license, making it available to hardware designers anywhere in the world. The library, maintained by CERN’s Design Office, contains more than 17,000 electronic components in
CERN’s open source KiCad library gives the world 17,000 circuit board components Read More »
Researcher Drops YellowKey, GreenPlasma Windows Zero-Days 2026-05-14 at 11:16 By Ionut Arghire YellowKey is a BitLocker bypass that requires physical access. GreenPlasma enables elevation of privileges to System. The post Researcher Drops YellowKey, GreenPlasma Windows Zero-Days appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Researcher Drops YellowKey, GreenPlasma Windows Zero-Days Read More »
New Fragnesia Linux Kernel LPE Grants Root Access via Page Cache Corruption 2026-05-14 at 11:15 By Details have emerged about a new variant of the recent Dirty Frag Linux local privilege escalation (LPE) vulnerability that allows local attackers to gain root access, making it the third such bug to be identified in the kernel within
New Fragnesia Linux Kernel LPE Grants Root Access via Page Cache Corruption Read More »
18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE 2026-05-14 at 10:40 By Cybersecurity researchers have disclosed multiple security vulnerabilities impacting NGINX Plus and NGINX Open, including a critical flaw that remained undetected for 18 years. The vulnerability, discovered by depthfirst, is a heap buffer overflow issue impacting ngx_http_rewrite_module (CVE-2026-42945, CVSS v4 score: 9.2) that could
18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE Read More »
Vector embedding security gap exposes enterprise AI pipelines 2026-05-14 at 08:30 By Mirko Zorz Enterprise adoption of retrieval-augmented generation has moved sensitive corporate content into a new storage format that existing security tools cannot inspect. Companies deploying internal AI assistants convert documents into high-dimensional numerical vectors and ship them to embedding services and vector databases
Vector embedding security gap exposes enterprise AI pipelines Read More »
Closing the AI governance gap in your enterprise 2026-05-14 at 08:00 By Help Net Security In this Help Net Security video, Casey Bleeker, CEO at SurePath AI, talks about the AI governance gap that exists in almost every organization. Drawing from three years of conversations with IT, business, and security leaders, Casey explains why AI
Closing the AI governance gap in your enterprise Read More »
Over 70% of organizations hit by identity breaches 2026-05-14 at 07:30 By Anamarija Pogorelec Attackers rely on stolen credentials, compromised service accounts, and social engineering attacks targeting employees, according to Sophos’ The State of Identity Security 2026 survey. What do you estimate to be the overall cost to your organization to rectify the identity breach?
Over 70% of organizations hit by identity breaches Read More »
Machine identities outnumber humans 109 to 1 2026-05-14 at 07:00 By Anamarija Pogorelec Organizations manage an average of 109 machine identities for every human identity. AI agents account for a growing share of those identities, with companies expecting AI agent growth of 85% over the next 12 months. Machine identities are projected to increase by
Machine identities outnumber humans 109 to 1 Read More »