High-Severity Vulnerability Patched in VMware Fusion 2026-05-14 at 12:48 By Eduard Kovacs The patch was announced as Broadcom is attending the Pwn2Own hacking competition in Berlin this week. The post High-Severity Vulnerability Patched in VMware Fusion appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
High-Severity Vulnerability Patched in VMware Fusion Read More »
Researcher Drops YellowKey, GreenPlasma Windows Zero-Days 2026-05-14 at 11:16 By Ionut Arghire YellowKey is a BitLocker bypass that requires physical access. GreenPlasma enables elevation of privileges to System. The post Researcher Drops YellowKey, GreenPlasma Windows Zero-Days appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Researcher Drops YellowKey, GreenPlasma Windows Zero-Days Read More »
Microsoft, Palo Alto Networks Find Many Vulnerabilities by Using AI on Their Own Code 2026-05-13 at 19:01 By Eduard Kovacs Microsoft’s MDASH discovered 16 of the Patch Tuesday vulnerabilities, and Palo Alto used Mythos to find dozens of flaws. The post Microsoft, Palo Alto Networks Find Many Vulnerabilities by Using AI on Their Own Code
Microsoft, Palo Alto Networks Find Many Vulnerabilities by Using AI on Their Own Code Read More »
Sweet Security Launches Agentic AI Red Teaming to Counter ‘Mythos Moment’ 2026-05-13 at 17:50 By Kevin Townsend New “Sweet Attack” platform uses runtime intelligence and continuous agentic red teaming to identify exploitable attack chains human teams may miss. The post Sweet Security Launches Agentic AI Red Teaming to Counter ‘Mythos Moment’ appeared first on SecurityWeek.
Sweet Security Launches Agentic AI Red Teaming to Counter ‘Mythos Moment’ Read More »
Microsoft Patches Critical Zero-Click Outlook Vulnerability Threatening Enterprises 2026-05-13 at 13:33 By Eduard Kovacs CVE-2026-40361 is similar to a vulnerability found a decade ago, BadWinmail, which at the time was dubbed an “enterprise killer”. The post Microsoft Patches Critical Zero-Click Outlook Vulnerability Threatening Enterprises appeared first on SecurityWeek. This article is an excerpt from SecurityWeek
Microsoft Patches Critical Zero-Click Outlook Vulnerability Threatening Enterprises Read More »
Fortinet, Ivanti Patch Critical Vulnerabilities 2026-05-13 at 12:36 By Ionut Arghire Successful exploitation of these flaws could lead to arbitrary code execution and information disclosure. The post Fortinet, Ivanti Patch Critical Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Fortinet, Ivanti Patch Critical Vulnerabilities Read More »
Chipmaker Patch Tuesday: Intel and AMD Patch 70 Vulnerabilities 2026-05-13 at 11:37 By Ionut Arghire The two chip giants have published over two dozen advisories describing recently identified security defects. The post Chipmaker Patch Tuesday: Intel and AMD Patch 70 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Chipmaker Patch Tuesday: Intel and AMD Patch 70 Vulnerabilities Read More »
Microsoft Patches 137 Vulnerabilities 2026-05-12 at 21:50 By Ionut Arghire Fresh security updates resolve critical flaws in Azure, Windows, Dynamics 365, and the SSO Plugin for Jira & Confluence. The post Microsoft Patches 137 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Microsoft Patches 137 Vulnerabilities Read More »
Adobe Patches 52 Vulnerabilities in 10 Products 2026-05-12 at 20:12 By Ionut Arghire While none of the flaws have been exploited in the wild, many of them could lead to arbitrary code execution. The post Adobe Patches 52 Vulnerabilities in 10 Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original
Adobe Patches 52 Vulnerabilities in 10 Products Read More »
Apple Patches Dozens of Vulnerabilities in macOS, iOS 2026-05-12 at 17:34 By Eduard Kovacs The tech giant has also ported the patch for a recent deleted chats recovery issue to older versions of iOS. The post Apple Patches Dozens of Vulnerabilities in macOS, iOS appeared first on SecurityWeek. This article is an excerpt from SecurityWeek
Apple Patches Dozens of Vulnerabilities in macOS, iOS Read More »
SAP Patches Critical S/4HANA, Commerce Vulnerabilities 2026-05-12 at 15:18 By Ionut Arghire The flaws could allow attackers to inject malicious code, leading to information disclosure and code execution. The post SAP Patches Critical S/4HANA, Commerce Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
SAP Patches Critical S/4HANA, Commerce Vulnerabilities Read More »
Claude Mythos Finds Only One Curl Vulnerability; Experts Divided on What It Really Means 2026-05-12 at 14:18 By Eduard Kovacs Curl’s lead developer says Mythos claims are marketing, but many in the industry believe the results stem from Curl’s robust security. The post Claude Mythos Finds Only One Curl Vulnerability; Experts Divided on What It
Claude Mythos Finds Only One Curl Vulnerability; Experts Divided on What It Really Means Read More »
Build Application Firewalls Aim to Stop the Next Supply Chain Attack 2026-05-11 at 17:12 By Kevin Townsend Rather than scanning code alone, Build Application Firewalls inspect runtime behavior inside the software build pipeline. The post Build Application Firewalls Aim to Stop the Next Supply Chain Attack appeared first on SecurityWeek. This article is an excerpt
Build Application Firewalls Aim to Stop the Next Supply Chain Attack Read More »
New ‘Dirty Frag’ Linux Vulnerability Possibly Exploited in Attacks 2026-05-11 at 11:27 By Eduard Kovacs Also called Copy Fail 2 and tracked as CVE-2026-43284 and CVE-2026-43500, the exploit was disclosed before a patch was released. The post New ‘Dirty Frag’ Linux Vulnerability Possibly Exploited in Attacks appeared first on SecurityWeek. This article is an excerpt
New ‘Dirty Frag’ Linux Vulnerability Possibly Exploited in Attacks Read More »
Vulnerability in Claude Extension for Chrome Exposes AI Agent to Takeover 2026-05-08 at 11:42 By Ionut Arghire Lax extension permissions and improper trust implementation allow attackers to inject prompts in the Claude Chrome extension. The post Vulnerability in Claude Extension for Chrome Exposes AI Agent to Takeover appeared first on SecurityWeek. This article is an
Vulnerability in Claude Extension for Chrome Exposes AI Agent to Takeover Read More »
Ivanti Patches EPMM Zero-Day Exploited in Targeted Attacks 2026-05-08 at 11:42 By Eduard Kovacs CVE-2026-6973 is a high-severity vulnerability that allows an attacker who has admin privileges to execute arbitrary code. The post Ivanti Patches EPMM Zero-Day Exploited in Targeted Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Ivanti Patches EPMM Zero-Day Exploited in Targeted Attacks Read More »
Palo Alto Zero-Day Exploited in Campaign Bearing Hallmarks of Chinese State Hacking 2026-05-07 at 19:01 By Eduard Kovacs The cybersecurity firm has not explicitly accused China of being behind the attack, but the evidence suggests it was. The post Palo Alto Zero-Day Exploited in Campaign Bearing Hallmarks of Chinese State Hacking appeared first on SecurityWeek.
Palo Alto Zero-Day Exploited in Campaign Bearing Hallmarks of Chinese State Hacking Read More »
Claude Code OAuth Tokens Can Be Stolen Through Stealthy MCP Hijacking 2026-05-07 at 17:33 By Kevin Townsend Mitiga researchers say attackers can silently redirect Claude Code MCP traffic, intercept OAuth tokens, and maintain persistent access to connected SaaS platforms. The post Claude Code OAuth Tokens Can Be Stolen Through Stealthy MCP Hijacking appeared first on
Claude Code OAuth Tokens Can Be Stolen Through Stealthy MCP Hijacking Read More »
Chrome 148 Rolls Out With 127 Security Fixes 2026-05-07 at 17:33 By Ionut Arghire The fresh browser update resolves critical-severity integer overflow and use-after-free vulnerabilities. The post Chrome 148 Rolls Out With 127 Security Fixes appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Chrome 148 Rolls Out With 127 Security Fixes Read More »
Gemini CLI Vulnerability Could Have Led to Code Execution, Supply Chain Attack 2026-05-07 at 14:33 By Ionut Arghire Attackers could inject prompts into a GitHub issue and take over the AI agent designed to automatically triage the issue. The post Gemini CLI Vulnerability Could Have Led to Code Execution, Supply Chain Attack appeared first on
Gemini CLI Vulnerability Could Have Led to Code Execution, Supply Chain Attack Read More »