Featured

Drupal Vulnerability in Hacker Crosshairs Shortly After Disclosure

Drupal, exploited, Featured, Vulnerabilities /

Drupal Vulnerability in Hacker Crosshairs Shortly After Disclosure 2026-05-22 at 21:05 By Eduard Kovacs Drupal is warning users that it has already seen attempts to exploit CVE-2026-9082 and security firms are seeing attacks against thousands of websites. The post Drupal Vulnerability in Hacker Crosshairs Shortly After Disclosure appeared first on SecurityWeek. This article is an […]

Drupal Vulnerability in Hacker Crosshairs Shortly After Disclosure Read More »

TrendAI Patches Apex One Zero-Day Exploited in the Wild

exploited, Featured, Trend Micro, TrendAI, Vulnerabilities, vulnerability, Zero-Day /

TrendAI Patches Apex One Zero-Day Exploited in the Wild 2026-05-22 at 11:53 By Eduard Kovacs CVE-2026-34926 is a directory traversal flaw that can be exploited against the on-premise version of Apex One. The post TrendAI Patches Apex One Zero-Day Exploited in the Wild appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

TrendAI Patches Apex One Zero-Day Exploited in the Wild Read More »

Google’s Surge in Chrome Vulnerability Discoveries Likely Driven by AI

AI, Artificial Intelligence, Chrome, Featured, Google, Vulnerabilities, vulnerability /

Google’s Surge in Chrome Vulnerability Discoveries Likely Driven by AI 2026-05-21 at 13:14 By Eduard Kovacs More than 200 vulnerabilities patched in recent Chrome releases are marked as ‘reported by Google’. The post Google’s Surge in Chrome Vulnerability Discoveries Likely Driven by AI appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

Google’s Surge in Chrome Vulnerability Discoveries Likely Driven by AI Read More »

Real-World ICS Security Tales From the Trenches

Featured, ICS, ICS/OT, OT /

Real-World ICS Security Tales From the Trenches 2026-05-20 at 13:18 By Eduard Kovacs SecurityWeek spoke with several ICS security experts and companies about their most memorable experiences in the field. The post Real-World ICS Security Tales From the Trenches appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Real-World ICS Security Tales From the Trenches Read More »

GitHub Confirms Hack Impacting 3,800 Internal Repositories

Data Breaches, Featured, GitHub, TeamPCP /

GitHub Confirms Hack Impacting 3,800 Internal Repositories 2026-05-20 at 13:02 By Ionut Arghire The TeamPCP hacking group accessed the repositories after a GitHub employee installed a poisoned VS Code extension. The post GitHub Confirms Hack Impacting 3,800 Internal Repositories appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

GitHub Confirms Hack Impacting 3,800 Internal Repositories Read More »

Microsoft Disrupts Malware-Signing Service Run by ‘Fox Tempest’ 

Featured, Fox Tempest, Malware, Malware & Threats, Microsoft, takedown, Vanilla Tempest /

Microsoft Disrupts Malware-Signing Service Run by ‘Fox Tempest’  2026-05-19 at 19:07 By Eduard Kovacs  Fox Tempest provides a service that cybercriminals use to distribute ransomware and other malware disguised as legitimate software. The post Microsoft Disrupts Malware-Signing Service Run by ‘Fox Tempest’  appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

Microsoft Disrupts Malware-Signing Service Run by ‘Fox Tempest’  Read More »

Critical Vulnerability Exposes Industrial Robot Fleets to Hacking

cobots, Featured, ICS, ICS/OT, industrial robots, OT, Universal Robots, Vulnerabilities, vulnerability /

Critical Vulnerability Exposes Industrial Robot Fleets to Hacking 2026-05-19 at 09:34 By Eduard Kovacs The vulnerability, CVE-2026-8153, affects Universal Robots PolyScope 5 and it can be exploited for OS command injection.  The post Critical Vulnerability Exposes Industrial Robot Fleets to Hacking appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Critical Vulnerability Exposes Industrial Robot Fleets to Hacking Read More »

Hackers Earn $1.3 Million at Pwn2Own Berlin 2026 

Artificial Intelligence, exploit, Featured, hacking contest, Pwn2Own, Pwn2Own Berlin, Vulnerabilities /

Hackers Earn $1.3 Million at Pwn2Own Berlin 2026  2026-05-18 at 08:02 By Eduard Kovacs Participants demonstrated exploits for Windows, Linux, VMware, Nvidia, and AI products. The post Hackers Earn $1.3 Million at Pwn2Own Berlin 2026  appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Hackers Earn $1.3 Million at Pwn2Own Berlin 2026  Read More »

Cisco Patches Another SD-WAN Zero-Day, the Sixth Exploited in 2026

Cisco, exploited, Featured, SD-WAN, UAT-8616, Vulnerabilities, Zero-Day /

Cisco Patches Another SD-WAN Zero-Day, the Sixth Exploited in 2026 2026-05-15 at 10:16 By Eduard Kovacs The zero-day, tracked as CVE-2026-20182, has been exploited in targeted attacks by a sophisticated threat actor identified as UAT-8616. The post Cisco Patches Another SD-WAN Zero-Day, the Sixth Exploited in 2026 appeared first on SecurityWeek. This article is an

Cisco Patches Another SD-WAN Zero-Day, the Sixth Exploited in 2026 Read More »

Mythos Proves Potent in Vulnerability Discovery, Less Convincing Elsewhere

AI, Artificial Intelligence, Featured, Mythos, Vulnerabilities /

Mythos Proves Potent in Vulnerability Discovery, Less Convincing Elsewhere 2026-05-14 at 18:25 By Kevin Townsend Independent benchmarking finds Mythos highly effective for source code audits, reverse engineering, and native-code analysis, though its exploit validation and reasoning capabilities remain inconsistent. The post Mythos Proves Potent in Vulnerability Discovery, Less Convincing Elsewhere appeared first on SecurityWeek. This

Mythos Proves Potent in Vulnerability Discovery, Less Convincing Elsewhere Read More »

Microsoft Patches Critical Zero-Click Outlook Vulnerability Threatening Enterprises

email security, Featured, Microsoft Outlook, Vulnerabilities, vulnerability, Zero Click /

Microsoft Patches Critical Zero-Click Outlook Vulnerability Threatening Enterprises 2026-05-13 at 13:33 By Eduard Kovacs CVE-2026-40361 is similar to a vulnerability found a decade ago, BadWinmail, which at the time was dubbed an “enterprise killer”. The post Microsoft Patches Critical Zero-Click Outlook Vulnerability Threatening Enterprises appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

Microsoft Patches Critical Zero-Click Outlook Vulnerability Threatening Enterprises Read More »

TanStack, Mistral AI, UiPath Hit in Fresh Supply Chain Attack

Featured, Malware & Threats, Mini Shai-Hulud, supply chain attack, Supply Chain Security, TeamPCP /

TanStack, Mistral AI, UiPath Hit in Fresh Supply Chain Attack 2026-05-12 at 13:20 By Ionut Arghire Over 400 malicious versions of 170 packages were published as part of the new Mini Shai-Hulud campaign. The post TanStack, Mistral AI, UiPath Hit in Fresh Supply Chain Attack appeared first on SecurityWeek. This article is an excerpt from

TanStack, Mistral AI, UiPath Hit in Fresh Supply Chain Attack Read More »

New ‘Dirty Frag’ Linux Vulnerability Possibly Exploited in Attacks

Dirty Frag, Endpoint Security, Featured, Linux, Linux vulnerability, privilege escalation, Vulnerabilities /

New ‘Dirty Frag’ Linux Vulnerability Possibly Exploited in Attacks 2026-05-11 at 11:27 By Eduard Kovacs Also called Copy Fail 2 and tracked as CVE-2026-43284 and CVE-2026-43500, the exploit was disclosed before a patch was released. The post New ‘Dirty Frag’ Linux Vulnerability Possibly Exploited in Attacks appeared first on SecurityWeek. This article is an excerpt

New ‘Dirty Frag’ Linux Vulnerability Possibly Exploited in Attacks Read More »

AI Coding Agents Could Fuel Next Supply Chain Crisis

Artificial Intelligence, Claude Code, Featured, supply chain, Supply Chain Security /

AI Coding Agents Could Fuel Next Supply Chain Crisis 2026-05-07 at 17:33 By Kevin Townsend “TrustFall” attack shows how AI coding agents can be manipulated into launching stealthy supply chain compromises. The post AI Coding Agents Could Fuel Next Supply Chain Crisis appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

AI Coding Agents Could Fuel Next Supply Chain Crisis Read More »

Claude AI Guided Hackers Toward OT Assets During Water Utility Intrusion

AI, Artificial Intelligence, Dragos, Featured, ICS, ICS/OT, Mexico, OT, Water /

Claude AI Guided Hackers Toward OT Assets During Water Utility Intrusion 2026-05-07 at 10:35 By Eduard Kovacs Dragos has published a report describing how threat actors used Claude AI in an attack on a water and drainage utility in Mexico. The post Claude AI Guided Hackers Toward OT Assets During Water Utility Intrusion appeared first

Claude AI Guided Hackers Toward OT Assets During Water Utility Intrusion Read More »

Critical Bug Could Expose 300,000 Ollama Deployments to Information Theft

AI, Artificial Intelligence, Bleeding Llama, Featured, Ollama, Vulnerabilities, vulnerability /

Critical Bug Could Expose 300,000 Ollama Deployments to Information Theft 2026-05-05 at 17:46 By Ionut Arghire Dubbed Bleeding Llama, the heap out-of-bounds read issue can be exploited remotely, without authentication. The post Critical Bug Could Expose 300,000 Ollama Deployments to Information Theft appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

Critical Bug Could Expose 300,000 Ollama Deployments to Information Theft Read More »

WhatsApp Discloses File Spoofing, Arbitrary URL Scheme Vulnerabilities

Featured, patch, spoofing, Vulnerabilities, vulnerability, WhatsApp /

WhatsApp Discloses File Spoofing, Arbitrary URL Scheme Vulnerabilities 2026-05-05 at 13:20 By Eduard Kovacs The vulnerabilities were reported to Meta through its bug bounty program and were patched with updates released earlier this year. The post WhatsApp Discloses File Spoofing, Arbitrary URL Scheme Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

WhatsApp Discloses File Spoofing, Arbitrary URL Scheme Vulnerabilities Read More »

Edtech Firm Instructure Discloses Data Breach Amid Hacker Leak Threats

data breach, Data Breaches, education, Featured, Instructure, ShinyHunters /

Edtech Firm Instructure Discloses Data Breach Amid Hacker Leak Threats 2026-05-04 at 10:56 By Ionut Arghire Hackers disrupted services and stole names, email addresses, student ID numbers, and user messages. The post Edtech Firm Instructure Discloses Data Breach Amid Hacker Leak Threats appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

Edtech Firm Instructure Discloses Data Breach Amid Hacker Leak Threats Read More »

US Military Reaches Deals With 7 Tech Companies to Use Their AI on Classified Systems

AI, Artificial Intelligence, Featured, Government /

US Military Reaches Deals With 7 Tech Companies to Use Their AI on Classified Systems 2026-05-03 at 21:21 By Associated Press Google, Microsoft, Amazon Web Services, Nvidia, OpenAI, Reflection and SpaceX will provide resources to help augment warfighter decision-making in complex operational environments,” the Defense Department said. The post US Military Reaches Deals With 7

US Military Reaches Deals With 7 Tech Companies to Use Their AI on Classified Systems Read More »

FBI Warns of Surge in Hacker-Enabled Cargo Theft

alert, cargo theft, cybercrime, FBI, Featured, Tracking & Law Enforcement /

FBI Warns of Surge in Hacker-Enabled Cargo Theft 2026-05-01 at 11:11 By Eduard Kovacs A new alert from the FBI says criminal enterprises are hacking both brokers and carriers to steal cargo for resale. The post FBI Warns of Surge in Hacker-Enabled Cargo Theft appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

FBI Warns of Surge in Hacker-Enabled Cargo Theft Read More »

Scroll to Top