SecurityTicks

Microsoft Patches Critical Zero-Click Outlook Vulnerability Threatening Enterprises

email security, Featured, Microsoft Outlook, Vulnerabilities, vulnerability, Zero Click /

Microsoft Patches Critical Zero-Click Outlook Vulnerability Threatening Enterprises 2026-05-13 at 13:33 By Eduard Kovacs CVE-2026-40361 is similar to a vulnerability found a decade ago, BadWinmail, which at the time was dubbed an “enterprise killer”. The post Microsoft Patches Critical Zero-Click Outlook Vulnerability Threatening Enterprises appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

Microsoft Patches Critical Zero-Click Outlook Vulnerability Threatening Enterprises Read More »

🎙️SECURITY.COM The Podcast: Iran’s Cyber Warfare Playbook: What Defenders Need to Know Right Now

Uncategorized /

🎙️SECURITY.COM The Podcast: Iran’s Cyber Warfare Playbook: What Defenders Need to Know Right Now 2026-05-13 at 13:00 By Enterprise Security Group Honey traps, attacks inspired by Russian espionage, and Iran’s expanding cyber arsenal This article is an excerpt from SECURITY.COM View Original Source

🎙️SECURITY.COM The Podcast: Iran’s Cyber Warfare Playbook: What Defenders Need to Know Right Now Read More »

Fortinet, Ivanti Patch Critical Vulnerabilities

Fortinet, Ivanti, patches, Vulnerabilities, vulnerability, Zoom /

Fortinet, Ivanti Patch Critical Vulnerabilities 2026-05-13 at 12:36 By Ionut Arghire Successful exploitation of these flaws could lead to arbitrary code execution and information disclosure. The post Fortinet, Ivanti Patch Critical Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Fortinet, Ivanti Patch Critical Vulnerabilities Read More »

Chipmaker Patch Tuesday: Intel and AMD Patch 70 Vulnerabilities

Amd, Chipmaker Patch Tuesday, Intel, Patch Tuesday, Vulnerabilities, vulnerability /

Chipmaker Patch Tuesday: Intel and AMD Patch 70 Vulnerabilities 2026-05-13 at 11:37 By Ionut Arghire The two chip giants have published over two dozen advisories describing recently identified security defects. The post Chipmaker Patch Tuesday: Intel and AMD Patch 70 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Chipmaker Patch Tuesday: Intel and AMD Patch 70 Vulnerabilities Read More »

GemStuffer Abuses 150+ RubyGems to Exfiltrate Scraped U.K. Council Portal Data

Uncategorized /

GemStuffer Abuses 150+ RubyGems to Exfiltrate Scraped U.K. Council Portal Data 2026-05-13 at 11:08 By Cybersecurity researchers are calling attention to a new campaign dubbed GemStuffer that has targeted the RubyGems repository with more than 150 gems that use the registry as a data exfiltration channel rather than for malware distribution. “The packages do not

GemStuffer Abuses 150+ RubyGems to Exfiltrate Scraped U.K. Council Portal Data Read More »

Fedora Hummingbird brings the container security model to a Linux host OS

containers, cybersecurity, Fedora, Linux, News, open source, operating system, Red Hat /

Fedora Hummingbird brings the container security model to a Linux host OS 2026-05-13 at 02:05 By Anamarija Pogorelec Container image security pipelines have spent the past several years pushing toward minimal footprints, hermetic builds, and continuous CVE remediation. The Fedora Project is now applying that same approach to the host operating system. At Red Hat

Fedora Hummingbird brings the container security model to a Linux host OS Read More »

Microsoft May 2026 Patch Tuesday: Many fixes, but no zero-days

Automox, Don't miss, Hot stuff, Microsoft, MS Office, News, Tenable, Trend Micro, Windows, Windows Server /

Microsoft May 2026 Patch Tuesday: Many fixes, but no zero-days 2026-05-13 at 00:31 By Zeljka Zorz Microsoft has marked May 2026 Patch Tuesday by releasing fixes for 120+ CVE-numbered vulnerabilities, none of which (for a change) are actively exploited or have been publicly disclosed. Still, some deserve more consideration and should be addressed sooner than

Microsoft May 2026 Patch Tuesday: Many fixes, but no zero-days Read More »

Microsoft Patches 137 Vulnerabilities

Microsoft, Patch Tuesday, Vulnerabilities, vulnerability, Windows /

Microsoft Patches 137 Vulnerabilities 2026-05-12 at 21:50 By Ionut Arghire Fresh security updates resolve critical flaws in Azure, Windows, Dynamics 365, and the SSO Plugin for Jira & Confluence. The post Microsoft Patches 137 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Microsoft Patches 137 Vulnerabilities Read More »

New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution

Uncategorized /

New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution 2026-05-12 at 21:50 By Exim has released security updates to address a severe security issue affecting certain configurations that could enable memory corruption and potential code execution. Exim is an open-source Mail Transfer Agent (MTA) designed for Unix-like systems to receive, route, and deliver

New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution Read More »

Sam Altman hits back at Musk in bombshell trial over future of OpenAI: ‘extremely uncomfortable’

Uncategorized /

Sam Altman hits back at Musk in bombshell trial over future of OpenAI: ‘extremely uncomfortable’ 2026-05-12 at 20:47 By Marc Vartabedian OpenAI Chief Executive Officer Sam Altman hit back at Elon Musk’s claims that he “stole” OpenAI the charity and steered it away from its non-profit mission – saying Musk was vying to control OpenAI

Sam Altman hits back at Musk in bombshell trial over future of OpenAI: ‘extremely uncomfortable’ Read More »

Exaforce Raises $125 Million for Agentic SOC Platform

agentic SOC, Cybersecurity Funding, Exaforce, funding /

Exaforce Raises $125 Million for Agentic SOC Platform 2026-05-12 at 20:47 By SecurityWeek News Exaforce has raised a total of $200 million and plans on using the latest investment for product development and international expansion.  The post Exaforce Raises $125 Million for Agentic SOC Platform appeared first on SecurityWeek. This article is an excerpt from

Exaforce Raises $125 Million for Agentic SOC Platform Read More »

SAP unveils Autonomous Enterprise for AI-driven business operations

Industry news, SAP /

SAP unveils Autonomous Enterprise for AI-driven business operations 2026-05-12 at 20:12 By Industry News SAP introduced the Autonomous Enterprise to help enhance the world’s most critical business workflows, so that humans and AI work together to meet the accelerating demands of global business profitably, strategically and safely. “For the mission-critical processes of our customers, ‘almost

SAP unveils Autonomous Enterprise for AI-driven business operations Read More »

Exaforce raises $125 million to respond to AI-powered attacks

Exaforce, Industry news /

Exaforce raises $125 million to respond to AI-powered attacks 2026-05-12 at 20:12 By Industry News Exaforce announced a $125 million Series B financing round, one of the largest ever in the emerging AI SOC space. The round includes participation from HarbourVest, Peak XV, Mayfield, Khosla Ventures, Seligman Ventures and AICONIC. The new capital will help

Exaforce raises $125 million to respond to AI-powered attacks Read More »

Stealthy hackers exploit cPanel flaw in active backdoor campaign (CVE-2026-41940)

backdoor, cPanel, cybercrime, Don't miss, Hot stuff, Japan, News, vulnerability, web shell /

Stealthy hackers exploit cPanel flaw in active backdoor campaign (CVE-2026-41940) 2026-05-12 at 20:12 By Zeljka Zorz Security researchers at XLab have outlined an active attack campaign targeting CVE-2026-41940, the recently disclosed vulnerability in cPanel & WHM, and have linked it to a stealthy hacking group that has been operating largely undetected for years. The vulnerability

Stealthy hackers exploit cPanel flaw in active backdoor campaign (CVE-2026-41940) Read More »

ThreatDown ITDR prevents credential-based attacks

Industry news, ThreatDown /

ThreatDown ITDR prevents credential-based attacks 2026-05-12 at 20:12 By Sinisa Markovic ThreatDown, the former corporate business unit of Malwarebytes, launched ThreatDown Identity Threat Detection and Response (ITDR). ITDR is a new product that helps security teams monitor identities to detect suspicious activity, misconfigurations, and active attacks targeting user accounts and privileges. With native integrations for

ThreatDown ITDR prevents credential-based attacks Read More »

Amazon Quick authorization bypass let users reach blocked AI chat agents

AI, AWS, Don't miss, HackerOne, Hot stuff, News, vulnerability, vulnerability disclosure /

Amazon Quick authorization bypass let users reach blocked AI chat agents 2026-05-12 at 20:12 By Mirko Zorz Enterprises running Amazon Quick, the AWS business intelligence and agentic AI service, rely on a feature called custom permissions to restrict who inside an account can use AI chat agents. Fog Security founder Jason Kao discovered that those

Amazon Quick authorization bypass let users reach blocked AI chat agents Read More »

Adobe Patches 52 Vulnerabilities in 10 Products

Adobe, Patch Tuesday, patches, Vulnerabilities, vulnerability /

Adobe Patches 52 Vulnerabilities in 10 Products 2026-05-12 at 20:12 By Ionut Arghire While none of the flaws have been exploited in the wild, many of them could lead to arbitrary code execution. The post Adobe Patches 52 Vulnerabilities in 10 Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

Adobe Patches 52 Vulnerabilities in 10 Products Read More »

Scroll to Top