Microsoft Patches 137 Vulnerabilities 2026-05-12 at 21:50 By Ionut Arghire Fresh security updates resolve critical flaws in Azure, Windows, Dynamics 365, and the SSO Plugin for Jira & Confluence. The post Microsoft Patches 137 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Microsoft Patches 137 Vulnerabilities Read More »
New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution 2026-05-12 at 21:50 By Exim has released security updates to address a severe security issue affecting certain configurations that could enable memory corruption and potential code execution. Exim is an open-source Mail Transfer Agent (MTA) designed for Unix-like systems to receive, route, and deliver
New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution Read More »
Sam Altman hits back at Musk in bombshell trial over future of OpenAI: ‘extremely uncomfortable’ 2026-05-12 at 20:47 By Marc Vartabedian OpenAI Chief Executive Officer Sam Altman hit back at Elon Musk’s claims that he “stole” OpenAI the charity and steered it away from its non-profit mission – saying Musk was vying to control OpenAI
Exaforce Raises $125 Million for Agentic SOC Platform 2026-05-12 at 20:47 By SecurityWeek News Exaforce has raised a total of $200 million and plans on using the latest investment for product development and international expansion. The post Exaforce Raises $125 Million for Agentic SOC Platform appeared first on SecurityWeek. This article is an excerpt from
Exaforce Raises $125 Million for Agentic SOC Platform Read More »
SAP unveils Autonomous Enterprise for AI-driven business operations 2026-05-12 at 20:12 By Industry News SAP introduced the Autonomous Enterprise to help enhance the world’s most critical business workflows, so that humans and AI work together to meet the accelerating demands of global business profitably, strategically and safely. “For the mission-critical processes of our customers, ‘almost
SAP unveils Autonomous Enterprise for AI-driven business operations Read More »
Exaforce raises $125 million to respond to AI-powered attacks 2026-05-12 at 20:12 By Industry News Exaforce announced a $125 million Series B financing round, one of the largest ever in the emerging AI SOC space. The round includes participation from HarbourVest, Peak XV, Mayfield, Khosla Ventures, Seligman Ventures and AICONIC. The new capital will help
Exaforce raises $125 million to respond to AI-powered attacks Read More »
Stealthy hackers exploit cPanel flaw in active backdoor campaign (CVE-2026-41940) 2026-05-12 at 20:12 By Zeljka Zorz Security researchers at XLab have outlined an active attack campaign targeting CVE-2026-41940, the recently disclosed vulnerability in cPanel & WHM, and have linked it to a stealthy hacking group that has been operating largely undetected for years. The vulnerability
Stealthy hackers exploit cPanel flaw in active backdoor campaign (CVE-2026-41940) Read More »
ThreatDown ITDR prevents credential-based attacks 2026-05-12 at 20:12 By Sinisa Markovic ThreatDown, the former corporate business unit of Malwarebytes, launched ThreatDown Identity Threat Detection and Response (ITDR). ITDR is a new product that helps security teams monitor identities to detect suspicious activity, misconfigurations, and active attacks targeting user accounts and privileges. With native integrations for
ThreatDown ITDR prevents credential-based attacks Read More »
Amazon Quick authorization bypass let users reach blocked AI chat agents 2026-05-12 at 20:12 By Mirko Zorz Enterprises running Amazon Quick, the AWS business intelligence and agentic AI service, rely on a feature called custom permissions to restrict who inside an account can use AI chat agents. Fog Security founder Jason Kao discovered that those
Amazon Quick authorization bypass let users reach blocked AI chat agents Read More »
Adobe Patches 52 Vulnerabilities in 10 Products 2026-05-12 at 20:12 By Ionut Arghire While none of the flaws have been exploited in the wild, many of them could lead to arbitrary code execution. The post Adobe Patches 52 Vulnerabilities in 10 Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original
Adobe Patches 52 Vulnerabilities in 10 Products Read More »
White Circle Raises $11 Million for AI Control Platform 2026-05-12 at 20:12 By Ionut Arghire The startup will invest in accelerating product development, hiring new talent, and expanding its customer base. The post White Circle Raises $11 Million for AI Control Platform appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original
White Circle Raises $11 Million for AI Control Platform Read More »
RubyGems Suspends New Signups After Hundreds of Malicious Packages Are Uploaded 2026-05-12 at 20:12 By RubyGems, the standard package manager for the Ruby programming language, has temporarily paused account sign ups following what has been described as a “major malicious attack.” “We’re dealing with a major malicious attack on Ruby Gems right now,” Maciej Mensfeld,
RubyGems Suspends New Signups After Hundreds of Malicious Packages Are Uploaded Read More »
MDR: Ask the Right Questions to Avoid Costly Assumptions 2026-05-12 at 17:35 By Managed Detection and Response (MDR) may now be one of the most widely purchased security services, yet often one of the most misunderstood. This article is an excerpt from LevelBlue Blog View Original Source
MDR: Ask the Right Questions to Avoid Costly Assumptions Read More »
Instructure took a risky approach to recover stolen Canvas data 2026-05-12 at 17:35 By Sinisa Markovic Instructure, the company behind the online learning platform Canvas, said it reached an agreement with the extortion group ShinyHunters to prevent data stolen in a recent breach from being leaked online. According to the company’s website, Canvas has more
Instructure took a risky approach to recover stolen Canvas data Read More »
General Motors to pay $12.75 million over driver data sales 2026-05-12 at 17:35 By Anamarija Pogorelec General Motors has agreed to a $12.75 million settlement with California over allegations that it unlawfully sold drivers’ location and behavioral data to brokers, marking the largest penalty in the history of the state’s Consumer Privacy Act. Prosecutors say
General Motors to pay $12.75 million over driver data sales Read More »
Download: The IT and security field guide to AI adoption 2026-05-12 at 17:35 By Help Net Security Security and IT teams are under pressure to adopt AI, but many are seeing the opposite of what was promised. Tools that demo well don’t hold up in real workflows. Complexity increases. Trust breaks down. And instead of
Download: The IT and security field guide to AI adoption Read More »
JetBrains TeamCity vulnerability allows privilege escalation, API exposure (CVE-2026-44413) 2026-05-12 at 17:35 By Zeljka Zorz JetBrains has patched a high-severity vulnerability (CVE-2026-44413) in TeamCity, its popular continuous integration and continuous delivery platform, and is urging organizations with on-premises and self-managed deployments to upgrade to the fixed version or implement a security patch. About CVE-2026-44413 CVE-2026-44413
BWH Hotels Says Hackers Had Access to Reservation Data for 6 Months 2026-05-12 at 17:34 By Eduard Kovacs Threat actors obtained names and contact information for an unspecified number of BWH Hotels guests. The post BWH Hotels Says Hackers Had Access to Reservation Data for 6 Months appeared first on SecurityWeek. This article is an
BWH Hotels Says Hackers Had Access to Reservation Data for 6 Months Read More »
West Pharmaceutical Services Hit by Disruptive Ransomware Attack 2026-05-12 at 17:34 By Ionut Arghire The company took systems offline globally after hackers exfiltrated data and deployed file-encrypting ransomware. The post West Pharmaceutical Services Hit by Disruptive Ransomware Attack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
West Pharmaceutical Services Hit by Disruptive Ransomware Attack Read More »
Deal Reached With Hackers to Delete Data Stolen From the Canvas Educational Platform 2026-05-12 at 17:34 By Associated Press The company that operates online learning system Canvas said it struck a deal with hackers to delete the data they pilfered in a cyberattack that created chaos for students, many of them in the middle of
Deal Reached With Hackers to Delete Data Stolen From the Canvas Educational Platform Read More »