News

Fragnesia: New Linux kernel LPE bug was spawned by Dirty Frag patch (CVE-2026-46300)

containers, Don't miss, exploit, Hot stuff, Linux, News, PoC, servers, vulnerability /

Fragnesia: New Linux kernel LPE bug was spawned by Dirty Frag patch (CVE-2026-46300) 2026-05-14 at 17:34 By Zeljka Zorz Researchers have found and disclosed yet another local privilege escalation (LPE) vulnerability in the Linux kernel: CVE-2026-46300, aka “Fragnesia”. The flaw is in the same class of vulnerabilities as the recently disclosed Dirty Frag bug(s). Like […]

Fragnesia: New Linux kernel LPE bug was spawned by Dirty Frag patch (CVE-2026-46300) Read More »

AI cyber capability is speeding past earlier projections

AI, Anthropic, cybersecurity, enterprise, News, OpenAI /

AI cyber capability is speeding past earlier projections 2026-05-14 at 12:48 By Sinisa Markovic AI cyber capability is improving faster than expected, with newer models surpassing earlier projections, according to the UK government’s AI Security Institute (AISI). AISI measures AI cyber capability using “time horizon benchmarks”, which estimate how long AI systems can complete cybersecurity […]

AI cyber capability is speeding past earlier projections Read More »

CERN’s open source KiCad library gives the world 17,000 circuit board components

hardware, News, open source /

CERN’s open source KiCad library gives the world 17,000 circuit board components 2026-05-14 at 11:16 By Sinisa Markovic CERN has released its complete KiCad component library under an open source license, making it available to hardware designers anywhere in the world. The library, maintained by CERN’s Design Office, contains more than 17,000 electronic components in […]

CERN’s open source KiCad library gives the world 17,000 circuit board components Read More »

Vector embedding security gap exposes enterprise AI pipelines

AI, cybersecurity, Data exfiltration, Don't miss, GitHub, Hot stuff, News, research /

Vector embedding security gap exposes enterprise AI pipelines 2026-05-14 at 08:30 By Mirko Zorz Enterprise adoption of retrieval-augmented generation has moved sensitive corporate content into a new storage format that existing security tools cannot inspect. Companies deploying internal AI assistants convert documents into high-dimensional numerical vectors and ship them to embedding services and vector databases […]

Vector embedding security gap exposes enterprise AI pipelines Read More »

Closing the AI governance gap in your enterprise

AI, CISO, cyber risk, cybersecurity, enterprise, News, strategy, tips, Video /

Closing the AI governance gap in your enterprise 2026-05-14 at 08:00 By Help Net Security In this Help Net Security video, Casey Bleeker, CEO at SurePath AI, talks about the AI governance gap that exists in almost every organization. Drawing from three years of conversations with IT, business, and security leaders, Casey explains why AI […]

Closing the AI governance gap in your enterprise Read More »

Over 70% of organizations hit by identity breaches

credentials, cybersecurity, identity management, News, Non Human Identities, Ransomware, report, Sophos /

Over 70% of organizations hit by identity breaches 2026-05-14 at 07:30 By Anamarija Pogorelec Attackers rely on stolen credentials, compromised service accounts, and social engineering attacks targeting employees, according to Sophos’ The State of Identity Security 2026 survey. What do you estimate to be the overall cost to your organization to rectify the identity breach? […]

Over 70% of organizations hit by identity breaches Read More »

Machine identities outnumber humans 109 to 1

AI, cybersecurity, identity management, identity protection, News, Palo Alto Networks, regulation, report /

Machine identities outnumber humans 109 to 1 2026-05-14 at 07:00 By Anamarija Pogorelec Organizations manage an average of 109 machine identities for every human identity. AI agents account for a growing share of those identities, with companies expecting AI agent growth of 85% over the next 12 months. Machine identities are projected to increase by […]

Machine identities outnumber humans 109 to 1 Read More »

WhatsApp adds Incognito Chat for private Meta AI conversations

Encryption, Meta, News, Privacy, software, WhatsApp /

WhatsApp adds Incognito Chat for private Meta AI conversations 2026-05-13 at 18:24 By Sinisa Markovic The company launched Incognito Chat with Meta AI, a feature that lets users hold AI conversations the platform itself cannot read. The rollout will reach WhatsApp and the standalone Meta AI app over the coming months. How Incognito Chat works […]

WhatsApp adds Incognito Chat for private Meta AI conversations Read More »

Signal responds to phishing attacks with new in-app security warnings

cybersecurity, News, phishing, Signal, social engineering /

Signal responds to phishing attacks with new in-app security warnings 2026-05-13 at 16:08 By Sinisa Markovic Signal is adding new protections for users following recent phishing and social engineering attacks. In March, the FBI and CISA issued a warning stating that Signal had become a primary target of Russian intelligence-linked hackers. Dutch and German security […]

Signal responds to phishing attacks with new in-app security warnings Read More »

KDE gets over €1 million investment to strengthen security and core infrastructure

investment, News, open source /

KDE gets over €1 million investment to strengthen security and core infrastructure 2026-05-13 at 14:00 By Mirko Zorz European governments and public institutions have been shifting away from proprietary software for years, and the financial infrastructure supporting open-source alternatives is growing to match. Germany’s Sovereign Tech Fund announced today that it is investing more than […]

KDE gets over €1 million investment to strengthen security and core infrastructure Read More »

Fedora Hummingbird brings the container security model to a Linux host OS

containers, cybersecurity, Fedora, Linux, News, open source, operating system, Red Hat /

Fedora Hummingbird brings the container security model to a Linux host OS 2026-05-13 at 02:05 By Anamarija Pogorelec Container image security pipelines have spent the past several years pushing toward minimal footprints, hermetic builds, and continuous CVE remediation. The Fedora Project is now applying that same approach to the host operating system. At Red Hat […]

Fedora Hummingbird brings the container security model to a Linux host OS Read More »

Microsoft May 2026 Patch Tuesday: Many fixes, but no zero-days

Automox, Don't miss, Hot stuff, Microsoft, MS Office, News, Tenable, Trend Micro, Windows, Windows Server /

Microsoft May 2026 Patch Tuesday: Many fixes, but no zero-days 2026-05-13 at 00:31 By Zeljka Zorz Microsoft has marked May 2026 Patch Tuesday by releasing fixes for 120+ CVE-numbered vulnerabilities, none of which (for a change) are actively exploited or have been publicly disclosed. Still, some deserve more consideration and should be addressed sooner than […]

Microsoft May 2026 Patch Tuesday: Many fixes, but no zero-days Read More »

Stealthy hackers exploit cPanel flaw in active backdoor campaign (CVE-2026-41940)

backdoor, cPanel, cybercrime, Don't miss, Hot stuff, Japan, News, vulnerability, web shell /

Stealthy hackers exploit cPanel flaw in active backdoor campaign (CVE-2026-41940) 2026-05-12 at 20:12 By Zeljka Zorz Security researchers at XLab have outlined an active attack campaign targeting CVE-2026-41940, the recently disclosed vulnerability in cPanel & WHM, and have linked it to a stealthy hacking group that has been operating largely undetected for years. The vulnerability […]

Stealthy hackers exploit cPanel flaw in active backdoor campaign (CVE-2026-41940) Read More »

Amazon Quick authorization bypass let users reach blocked AI chat agents

AI, AWS, Don't miss, HackerOne, Hot stuff, News, vulnerability, vulnerability disclosure /

Amazon Quick authorization bypass let users reach blocked AI chat agents 2026-05-12 at 20:12 By Mirko Zorz Enterprises running Amazon Quick, the AWS business intelligence and agentic AI service, rely on a feature called custom permissions to restrict who inside an account can use AI chat agents. Fog Security founder Jason Kao discovered that those […]

Amazon Quick authorization bypass let users reach blocked AI chat agents Read More »

Instructure took a risky approach to recover stolen Canvas data

breach, cybercrime, data breach, News /

Instructure took a risky approach to recover stolen Canvas data 2026-05-12 at 17:35 By Sinisa Markovic Instructure, the company behind the online learning platform Canvas, said it reached an agreement with the extortion group ShinyHunters to prevent data stolen in a recent breach from being leaked online. According to the company’s website, Canvas has more […]

Instructure took a risky approach to recover stolen Canvas data Read More »

General Motors to pay $12.75 million over driver data sales

car, connected cars, data collection, Data Protection, LexisNexis Risk Solutions, location tracking, News, Privacy, USA /

General Motors to pay $12.75 million over driver data sales 2026-05-12 at 17:35 By Anamarija Pogorelec General Motors has agreed to a $12.75 million settlement with California over allegations that it unlawfully sold drivers’ location and behavioral data to brokers, marking the largest penalty in the history of the state’s Consumer Privacy Act. Prosecutors say […]

General Motors to pay $12.75 million over driver data sales Read More »

Download: The IT and security field guide to AI adoption

Don't miss, News, Tines, Whitepapers and webinars /

Download: The IT and security field guide to AI adoption 2026-05-12 at 17:35 By Help Net Security Security and IT teams are under pressure to adopt AI, but many are seeing the opposite of what was promised. Tools that demo well don’t hold up in real workflows. Complexity increases. Trust breaks down. And instead of […]

Download: The IT and security field guide to AI adoption Read More »

JetBrains TeamCity vulnerability allows privilege escalation, API exposure (CVE-2026-44413)

continuous integration, Don't miss, Hot stuff, JetBrains, News, software delivery, vulnerability /

JetBrains TeamCity vulnerability allows privilege escalation, API exposure (CVE-2026-44413) 2026-05-12 at 17:35 By Zeljka Zorz JetBrains has patched a high-severity vulnerability (CVE-2026-44413) in TeamCity, its popular continuous integration and continuous delivery platform, and is urging organizations with on-premises and self-managed deployments to upgrade to the fixed version or implement a security patch. About CVE-2026-44413 CVE-2026-44413 […]

JetBrains TeamCity vulnerability allows privilege escalation, API exposure (CVE-2026-44413) Read More »

Six new dnsmasq vulnerabilities open the door to DNS cache poisoning, local root

CVE, News, open source, software, vulnerability /

Six new dnsmasq vulnerabilities open the door to DNS cache poisoning, local root 2026-05-12 at 14:18 By Sinisa Markovic Recent disclosures have revealed that open-source networking tool dnsmasq is grappling with a serious set of vulnerabilities. The problems span memory safety and input validation, with researchers identifying heap buffer overflows, heap corruption, and code execution […]

Six new dnsmasq vulnerabilities open the door to DNS cache poisoning, local root Read More »

Scroll to Top