19 May 2026 · 12:00 UTC

View CSAF Summary Successful exploitation of this vulnerability could result in information disclosure, including capture of camera account credentials. The following versions of ZKTeco CCTV Cameras are affected: SSC335-…

19 May 2026 · 12:00 UTC

View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to take control of the victim's browser. The following versions of Kieback & Peter DDC Building Controllers are affected: DDC4002 DD…

Yesterday · 12:00 UTC

CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2008-4250 Microsoft Windows Buffer Overflow Vulnerability CVE-2009-1537 Microso…

Today · 10:55 UTC

Microsoft has disclosed that a privilege escalation and a denial-of-service flaw in Defender has come under active exploitation in the wild. The former, tracked as CVE-2026-41091, is rated 7.8 on the CVSS scoring system.…

Today · 07:35 UTC

Cybersecurity researchers have disclosed details of a vulnerability in the Linux kernel that remained undetected for nine years. The vulnerability, tracked as CVE-2026-46333 (CVSS score: 5.5), is a case of improper privi…

Today · 10:30 UTC

Consider a cached access key on a single Windows machine. It got there the way most cached credentials do - a user logged in, and the key stored itself automatically. Standard AWS behavior. No one misconfigured anything…

18 May 2026 · 20:48 UTC

Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovCloud accounts and a…

Today · 07:49 UTC

On Wednesday, Microsoft started rolling out security patches for two Defender vulnerabilities that have been exploited in zero-day attacks. [...]

Today · 06:54 UTC

GitHub says the hackers who breached 3,800 internal repositories gained access via a malicious version of the Nx Console VS Code extension, compromised in last week's TanStack npm supply-chain attack. [...]

Today · 11:00 UTC

Flipper Devices, the maker of the Flipper Zero pentesting tool, is asking the community to help build Flipper One, an open Linux platform for connected devices. [...]

Today · 08:00 UTC

Grafana Labs has confirmed a recent data breach was caused by the TanStack supply chain attack

Yesterday · 15:30 UTC

Premium Deception campaign uses 250 Android apps to silently sign victims up to paid services

Today · 12:00 UTC

Qualys finds nine-year-old Linux ptrace flaw exposing SSH keys and password hashes locally

18 May 2026 · 11:08 UTC

It’s nasty, but it requires physical access to the computer: The exploit, named YellowKey, was published earlier this week by a researcher who goes by the alias Nightmare-Eclipse. It reliably bypasses default Windows 11…

Yesterday · 14:21 UTC

Good report: Executive Summary: Let’s say you wanted to make sure that your AI is secure. Can you just maximize the security and privacy benchmark and call it a day? Nope, because benchmarks don’t actually work for measu…

19 May 2026 · 11:00 UTC

Not by name, but Laurie Anderson quotes me in one of the tracks of her new album: My favorite quote is from a cryptologist who said “If you think technology will solve your problems, you don’t understand technology and y…

18 May 2026

Cloudflare shares findings from testing Mythos and other security-focused LLMs against live code across critical infrastructure, including model strengths, weaknesses, and what is needed before this work can scale.

Today · 10:00 UTC

As AI expands the attack surface and alert fatigue grows, cyber exposure management offers a clearer path to understanding where risk truly concentrates and how to reduce it before a crisis hits. The post The readiness p…

Yesterday · 14:48 UTC

GitHub said late Tuesday that internal repositories were exfiltrated after an employee device was compromised through a poisoned Visual Studio Code extension, an incident that underscores the growing risks facing softwar…

Yesterday · 20:25 UTC

Microsoft’s AI red team lead talked to CyberScoop about the goals behind open sourcing a pair of security tools meant for developers and incident responders. The post Meet Rampart and Clarity, Microsoft’s new red team co…

Yesterday · 21:58 UTC

Officials denied refusing entry, but dodged questions on why Americans didn't return.

Yesterday · 23:02 UTC

"We believe we have identified the largest TAM in human history."

Yesterday · 21:26 UTC

"As a bonus, it captured Mars images from a rare perspective."

Yesterday · 13:46 UTC

This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – May. 20, 2026 –Watch the YouTube video Cybersecurity Ventures estimates that there are around 35,000 chief information security offic…

19 May 2026 · 12:39 UTC

This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – May. 19, 2026 –Watch the YouTube video Betta Lyon Delsordo told Cybercrime Magazine that her journey into ethical hacking began at 13…

18 May 2026 · 12:39 UTC

This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – May. 18, 2026 –Watch the trailer Black Hat, the cybersecurity industry’s most established and in-depth security event series, and Sem…

Today · 02:00 UTC

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Yesterday · 02:00 UTC

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

19 May 2026 · 02:00 UTC

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

19 May 2026 · 17:45 UTC

For a quarter century, the Google search box has been one of the most recognizable interfaces in computing: a thin white rectangle, a blinking cursor, a few typed words, and a list of blue links. On Tuesday, Google will…

19 May 2026 · 19:18 UTC

Day two of TechEx North America has been more of a deeper, critical examination of AI in the enterprise, but with a optimistic bent. The AI and Big Data programme opened with reference to what was termed the “AI graveyar…

Today · 08:00 UTC

The Nvidia Vera chip is rarely the headline when earnings beat estimates, but it should be. When Nvidia reported Q1 revenue of US$81.62 billion on Wednesday, beating analyst estimates of US$78.86 billion, and guided Q2 a…

Yesterday · 10:00 UTC

Alibaba has unveiled a new AI processor built specifically for AI agents, pairing the chip announcement with a multi-year silicon roadmap and a new large language model, signalling that the company is building an integra…

Yesterday · 23:30 UTC

The investment comes as Elon Musk’s AI unit faces complaints about the carbon-emitting units and looks to become a big player in cloud computing.

Yesterday · 18:00 UTC

The coding skills of AI models are about to make it much easier to build and deploy robots.

Today · 00:43 UTC

The rocket company has set aside more than $500 million for potential litigation losses, in part to account for complaints alleging that Grok created sexualized images.

Today · 00:28 UTC

The next big thing for Nvidia will be CPUs for AI agents, $200 billion worth, CEO Jensen Huang predicts.

Today · 00:21 UTC

Anthropic has told its investors that it will more than double revenue to around $10.9 billion in its second quarter.

Yesterday · 22:30 UTC

The video clipping startup raised a $7 million seed round led by Slow Ventures.

Yesterday · 14:56 UTC

Exclusive: Electoral Commission calls for new controls as Demos finds tools made up fake scandals, invented candidates or gave wrong dateUK politics live – latest updatesThe Electoral Commission has called for new legal…

Yesterday · 22:45 UTC

Many analysts view company’s financial performance as a broader referendum on AI buildoutNvidia continued its years-long streak of beating Wall Street’s expectations for growth on Wednesday, reassuring most investors tha…

Yesterday · 14:41 UTC

Exclusive: Google DeepMind agrees to Acas talks after workers sign petitions about governments’ use of AI for defence and intelligenceGoogle DeepMind has agreed to enter formal talks with UK tech workers that could lead…

19 May 2026 · 20:15 UTC

Listen to the session or watch below Elon Musk lost his suit against OpenAI, in which he alleged CEO Sam Altman and President Greg Brockman had deceived him over the company’s non-profit status. Watch as AI reporter and…

19 May 2026 · 00:53 UTC

On Monday, the jury in Musk v. Altman dealt Elon Musk a major blow—reaching a unanimous advisory verdict that he had sued OpenAI too late and, as a result, his claims are barred by the applicable statutes of limitations.…

18 May 2026 · 17:35 UTC

This story originally appeared in The Algorithm, our weekly newsletter on AI. To get stories like this in your inbox first, sign up here. When Google opens its doors tomorrow for its annual developer conference, I/O, it…

Today · 12:22 UTC

New York City Mayor Zohran Mamdani is launching a streaming series on Twitch, in which he'll respond to questions the public have submitted via the chat, Polygon reports. The series is aptly titled "Talk with the People,…

Today · 09:20 UTC

Meta has reportedly notified thousands of employees that they've been laid off as the company attempts to compensate for its hefty AI investments. In an email from Meta management shared by Business Insider, impacted sta…

Today · 10:00 UTC

Bambu Lab makes the best, most accessible 3D printers yet, but that reputation is suddenly under siege. It all started when Paweł Jarczak received a private message from the company on Reddit asking him to delete his cod…

18 May 2026 · 13:31 UTC

Welcome to Import AI, a newsletter about AI research.

Yesterday · 20:28 UTC

Analysis: Practitioners see measured risk.

Today · 04:00 UTC

Tries to attract a "like-minded long-term partner".

Yesterday · 20:20 UTC

Covering its HR core and "complementary solutions".

Yesterday · 17:31 UTC

Google's AI search evolution is accelerating at I/O 2026.

Yesterday · 11:00 UTC

Figure AI's 24/7 livestream showcases human soft spot for humanoid robots.

19 May 2026 · 18:55 UTC

Both tools generate hypotheses; one goes on to analyze some of the data.

18 May 2026 · 18:21 UTC

Biologists use Co-Scientist to find novel factors that successfully rejuvenate human cells.

19 May 2026 · 20:30 UTC

At this year’s Google I/O conference, NVIDIA and Google Cloud are accelerating the work of more than 100,000 developers in the companies’ joint developer community, which provides curated learning paths, hands-on labs an…

18 May 2026 · 22:28 UTC

Agentic AI inference at one-tenth the cost per token with NVIDIA Vera Rubin NVL72. Agent sandboxes run 50% faster on NVIDIA Vera than traditional CPUs — while enterprise data queries are up to 3x faster with the Vera CPU…

18 May 2026 · 21:48 UTC

The first NVIDIA Vera CPUs arrived at three of the world's leading AI labs on Friday — Anthropic in San Francisco, OpenAI in Mission Bay, SpaceXAI in Palo Alto — followed by a delivery to Oracle Cloud Infrastructure in S…

Today · 08:41 UTC

The One Nation leader wants a flat royalty on the production of new gas projects.

Today · 07:28 UTC

Elon Musk's sprawling space exploration company, which also owns Starlink and xAI, was valued at $US1.25 trillion ($1.75 trillion) earlier this year, meaning Musk could become the world's first trillionaire if the offeri…

Today · 06:03 UTC

The Tasmanian government has committed $24 million in the state budget towards keeping buses and ferries free for one more year.

Yesterday · 12:15 UTC

Modern attack surfaces don’t sit still.Cloud expansion, SaaS sprawl, identity complexity, and shadow IT are continuously reshaping organizational risk. For security leaders, visibility isn’t the challenge anymore, but ac…

19 May 2026 · 15:22 UTC

Security teams are working in an environment where speed, scale, and complexity are all increasing at the same time. Across the Rapid7 2026 Global Cybersecurity Summit, the focus was not just on how the threat landscape…

Yesterday · 19:30 UTC

Unit 42 analyzes npm supply chain evolution post-Shai Hulud. Discover wormable malware, CI/CD persistence, multi-stage attacks and more. The post The npm Threat Landscape: Attack Surface and Mitigations (Updated May 20)…

Yesterday · 10:00 UTC

Unit 42 analyzes TamperedChef malware clusters that use trojanized productivity apps and malvertising to deliver stealthy payloads to targets. The post Tracking TamperedChef Clusters via Certificate and Code Reuse appear…

Today · 07:23 UTC

A poisoned VS Code extension breached GitHub. A trojanized PyPI package hit Microsoft. Compromised GitHub Actions and a self-spreading npm worm targeted thousands more. In just 48 hours, attackers hit every layer of the…

Yesterday · 17:02 UTC

Dev Machine Guard now supports Linux, giving security teams full visibility into Linux, macOS, and Windows developer machines. Detect AI coding agents, IDE extensions, MCP servers, npm and system packages, and compromise…

Yesterday · 17:40 UTC

Nx Console VS Code Extension Compromised

19 May 2026 · 15:07 UTC

Fox Tempest is a financially motivated threat actor operating a malware‑signing‑as‑a‑service (MSaaS) used by other cybercriminals, including Vanilla Tempest and Storm groups, to more effectively distribute malicious code…

Yesterday · 09:02 UTC

We explain how a flaw in ExifTool allows attackers to compromise macOS systems via a malicious image (CVE-2026-3102).

18 May 2026 · 12:00 UTC

The report presents key trends and statistics on malware that targeted personal computers running Windows and macOS, as well as Internet of Things (IoT) devices, during Q1 2026.

18 May 2026 · 12:00 UTC

This report contains mobile threat statistics for Q1 2026, along with noteworthy discoveries and quarterly trends: new versions of SparkCat and Triada.

18 May 2026 · 14:58 UTC

For the latest discoveries in cyber research for the week of 18th May, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Vodafone, a major international telecom, has sustained a source code leak…

Yesterday · 17:48 UTC

Compromised @antv npm packages deploy the Mini Shai-Hulud payload to steal CI/CD secrets from Linux-based automation environments. The malware executes during npm install and targets credentials across GitHub, AWS, Kuber…

Yesterday · 16:00 UTC

Read about the unique challenges and rewards of securing gaming platforms and how to better protect gaming communities. The post Securing the gaming culture of cultures appeared first on Microsoft Security Blog.

Yesterday · 15:00 UTC

The AI systems shipping inside enterprises today are fundamentally different from the ones we were building even two years ago, because they have moved well past answering questions and into accessing your email, retriev…

19 May 2026 · 15:39 UTC

Cisco Talos’ Vulnerability Discovery & Research team recently disclosed eight vulnerabilities in TP-Link, and one each in Adobe Photoshop, OpenVPN, and Gen Digital's Norton VPN.The vulnerabilities mentioned in this blog…

19 May 2026 · 10:00 UTC

Cisco Talos has uncovered a BadIIS variant — identifiable by its embedded "demo.pdb" strings — that functions as commodity malware, likely sold or shared among multiple Chinese-speaking cyber crime groups operating under…

19 May 2026 · 21:34 UTC

The AWS Customer Incident Response Team works with customers to help them recover from active security incidents. As part of this work, the team often uncovers new or trending tactics used by various threat actors that t…

Yesterday · 20:56 UTC

Agents have agency: they adapt and find multiple ways to solve problems. This autonomy creates a fundamental security challenge: the large language model (LLM) at the heart of the agent is non-deterministic, and its deci…

Yesterday · 17:32 UTC

Our largest security services customers started the same way every customer does – with a click. They enabled Amazon GuardDuty, Amazon Inspector, AWS WAF, and AWS Security Hub, experienced the benefits in real time, and…

Yesterday · 00:00 UTC

An OpenAI model solved the 80-year-old unit distance problem, disproving a major conjecture in discrete geometry and marking a milestone in AI-driven mathematics.

Yesterday · 00:00 UTC

How Ramp engineers use Codex with GPT-5.5 to review code and ship improvements, allowing them to get substantive feedback in minutes instead of hours.

Yesterday · 00:00 UTC

OpenAI advances Education for Countries, expanding AI adoption in schools with new partnerships, teacher training, and tools to improve global learning outcomes.

Yesterday · 05:00 UTC

Yesterday · 21:07 UTC

If any impact is discovered, customers will be notified via established incident response and notification channels. The post Investigating unauthorized access to GitHub-owned repositories appeared first on The GitHub Bl…