21 May 2026 · 12:00 UTC

View CSAF Summary ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is available that replaces an outdated third-party component. Although no successful exploitation…

21 May 2026 · 12:00 UTC

View CSAF Summary ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could cause the pollution of heap memory which poten…

Yesterday · 12:00 UTC

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-9082 Drupal Core SQL Injection Vulnerability This type of vulnerability is a f…

Yesterday · 13:58 UTC

Crazy story: Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovCloud ac…

21 May 2026 · 16:03 UTC

A group used Anthropic’s Mythos AI model to help find a kernel memory corruption vulnerability and exploit on Apple’s M5. News article.

Yesterday · 21:04 UTC

The South Pacific Regional Fisheries Management Organization (SPRFMO) needs to regulate squid fishing in the South Pacific. As usual, you can also use this squid post to talk about the security stories in the news that I…

Today · 07:35 UTC

A maximum-severity security vulnerability impacting LiteSpeed User-End cPanel Plugin has come under active exploitation in the wild. The flaw, tracked as CVE-2026-48172 (CVSS score: 10.0), relates to an instance of incor…

Today · 09:51 UTC

Cybersecurity researchers have flagged a fresh software supply chain attack campaign that has targeted multiple PHP packages belonging to Laravel-Lang to deliver a comprehensive credential-stealing framework. The affecte…

Today · 11:55 UTC

Anthropic on Friday disclosed that Project Glasswing has helped uncover more than 10,000 high- or critical-severity vulnerabilities across some of the most "systemically" important software across the world since the cyb…

Yesterday · 13:17 UTC

Ransomware and vendor breaches persist. The "2026 Data Breach Investigations Report" (DBIR) highlights how evolving social engineering tactics make the sector more vulnerable.

Yesterday · 15:43 UTC

When Akamai announced its LayerX acquisition, the company joined a growing list of vendors adding secure enterprise browsers to their product portfolios.

Yesterday · 07:01 UTC

The advanced persistent threat group also relied on SOCKS proxies like SoftEther VPN, tunneling tools that act as a middleman between victim and attacker.

18 May 2026

Cloudflare shares findings from testing Mythos and other security-focused LLMs against live code across critical infrastructure, including model strengths, weaknesses, and what is needed before this work can scale.

21 May 2026 · 15:30 UTC

First VPN, a service used by ransomware actors and fraudsters, was dismantled by Europol

Yesterday · 11:30 UTC

The infostealer payload in this campaign collect a vast amount of data, from collaboration authentication keys to cryptocurrency wallets

Yesterday · 10:30 UTC

Total figure for fraudulent transactions Apple has blocked since 2020 now stands at over $11bn

21 May 2026 · 21:50 UTC

Canadian authorities on Wednesday arrested a 23-year-old Ottawa man on suspicion of building and operating Kimwolf, a fast spreading Internet-of-Things botnet that enslaved millions of devices for use in a series of mass…

21 May 2026 · 20:02 UTC

Reps. Don Bacon, R-Neb., and James Walkinshaw, D-Va., found rare bipartisan agreement that the agency tasked with defending civilian networks has been diminished at a moment when threats from China and others are growing…

Yesterday · 20:41 UTC

Kali365, which was first observed in April, abuses legitimate Microsoft device authorization pages to grant persistent access to cybercriminal-controlled applications. The post FBI warns about fast-growing phishing kit t…

21 May 2026 · 23:24 UTC

Jacob Butler, a 23-year-old from Ottawa, awaits extradition to the United States and faces up to 10 years in prison. The post Alleged leader of Kimwolf, a sweeping botnet for cybercriminals, arrested in Canada appeared f…

Yesterday · 17:24 UTC

Financial crime investigators in the Netherlands (FIOD) arrested two men and seized 800 servers linked to a web hosting company that enabled cyberattacks, interference operations, and disinformation campaigns. [...]

Today · 14:23 UTC

Italian authorities have dismantled a piracy ecosystem centered around the CINEMAGOAL app that provided access to various streaming platforms, including Netflix, Disney+, and Spotify. [...]

Yesterday · 15:32 UTC

Two former executives of a call-tracking and analytics company pleaded guilty to concealing a years-long tech support fraud scheme that victimized individuals worldwide. [...]

Today · 05:49 UTC

This week, I'm attending the SEC670[1] training (“Red Teaming Tools - Developing Windows Implants, Shellcode, Command and Control”). From my point of view, this training fits perfectly with FOR610 or FOR710 (malware…

Yesterday · 06:14 UTC

I found a Node.js stealer that looked pretty well obfuscated. The file was not running out-of-the-box because it was uploaded on VT as “extracted-decoded.js” (and reformated). The SHA256 is 049300aa5dd774d6c984779a05…

Yesterday · 02:00 UTC

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

20 May 2026 · 13:46 UTC

This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – May. 20, 2026 –Watch the YouTube video Cybersecurity Ventures estimates that there are around 35,000 chief information security offic…

Today · 11:30 UTC

"Two astronauts whose careers embody excellence, leadership, and service."

Today · 11:00 UTC

A formal petition to the US government calls for sanctions on Chinese seafood imports.

Yesterday · 22:50 UTC

"This capability is not common for satellites conducting typical missions."

21 May 2026 · 16:00 UTC

At NVIDIA GTC Taipei at COMPUTEX, the world’s developers, researchers and industry leaders are converging to dive into the latest breakthroughs shaping every industry, covering topics spanning AI factories and scaling in…

21 May 2026 · 13:00 UTC

The mission begins now. GeForce NOW is dialing up the action with a blockbuster mix of spy thrills, high-speed racing and member rewards — plus eight new games joining the cloud this week, all ready to stream instantly.…

21 May 2026 · 19:16 UTC

Storytelling is core to humanity’s DNA, stemming from our impulse to express ideals, warnings, hopes, and experiences. Technology has always been woven through the medium and the distribution: from early humans’ innovati…

21 May 2026 · 20:41 UTC

Listen to the session or watch below AI companies want to build systems that understand the external world and overcome the limitations of LLMs. Recent developments have brought world models to the forefront of the AI di…

Yesterday · 10:00 UTC

During Tuesday’s Google I/O keynote, Demis Hassabis, the CEO of Google DeepMind, proclaimed that we are currently “standing in the foothills of the singularity.” It was a striking statement—the singularity is the theoret…

Yesterday · 10:00 UTC

OpenAI will open its first Applied AI Lab outside the US in Singapore. The lab is part of a new partnership with the Ministry of Digital Development and Information. The initiative, called OpenAI for Singapore, was annou…

Yesterday · 10:00 UTC

Every major economy is staring at the same problem right now. Artificial intelligence is consuming electricity at a pace that grids were never designed to handle. In the US, capacity market prices in PJM, the country’s l…

Yesterday · 09:00 UTC

The ceremony was scheduled. The CEOs were on the guest list. And then it wasn’t happening. On Thursday, US President Donald Trump scrapped a planned AI executive order, which had already been delayed multiple times, citi…

Yesterday · 13:45 UTC

London mayor accused of ‘putting politics above public safety’ for rejecting deal to use AI in intelligence analysisUK politics live – latest updatesPalantir has accused Sadiq Khan of “putting politics above public safet…

Yesterday · 09:00 UTC

IPO filing from Elon Musk’s company reveals closer look at finances, cosmic ambitions and tech empire’s quirksSpaceX publicly released an investor prospectus on Wednesday as part of its plan for a $1.75tn debut on the US…

Today · 11:00 UTC

Growing numbers of people are seeking improbable cosmetic surgery based on chatbots’ recommendationsPlastic surgeons are increasingly concerned about the rise of “AI face”, as more and more clients arrive in their office…

Today · 01:59 UTC

After Sam Altman and OpenAI's recent victory in a drawn-out legal battle with billionaire Elon Musk, the bitter rivalry between the former friends is now set to move from the courtroom to Wall Street.

Today · 06:56 UTC

After riding a post-COVID wave of booming prices, real estate agents say SA's housing market is starting to level out, as federal budget tax changes and rising interest rates reduce buyer appetite.

Yesterday · 22:47 UTC

A popular Darwin restaurant has closed down and the owner of another local hospitality business is asking for COVID-era support measures to be brought back as costs rise and visitor numbers fall.

Today · 14:00 UTC

Massive OLED TVs and Sonos speakers might be stealing the Memorial Day spotlight, but there are also plenty of great deals that won't set you back nearly as much. In fact, some of the best discounts we're seeing are on g…

Today · 13:00 UTC

Finding a cafe that fits you can be a revelatory experience. For me at least, there are few places outside of my house that I can truly feel comfortable in. I'm lucky enough to have two options in walking distance: a cof…

Today · 12:00 UTC

Hi, friends! Welcome to Installer No. 129, your guide to the best and Verge-iest stuff in the world. (If you're new here, welcome, come on you Gunners, and also you can read all the old editions at the Installer homepage…

Yesterday · 15:00 UTC

The search giant’s AI-crafted answers are so convenient, you’ll be sucked in—to the detriment of the web and the artists and thinkers behind it.

Yesterday · 09:00 UTC

Hyperscalers are pushing the Gulf to rethink internet infrastructure as AI raises the stakes of cable disruptions.

Yesterday · 00:04 UTC

Global affairs chief Chris Lehane wants to tone down the debate over AI’s societal impacts—and get states to pass laws that won’t derail OpenAI’s meteoric rise.

Today · 13:00 UTC

Elon Muks's xAI has gone all in on natural gas, while SpaceX is obsessed with orbital data centers. What happened to the "solar-electric economy" he promised?

Yesterday · 23:03 UTC

People used AI on a spectrogram image of cockpit recordings to reconstruct them, forcing the NTSB to temporarily block access to its docket system.

Yesterday · 21:02 UTC

You can now disco ball-ify your entire Pixel home screen, says Google.

Yesterday · 19:39 UTC

Workaround flouts law that bans NTSB disclosures of cockpit audio recordings.

Yesterday · 16:51 UTC

Trump delays AI safety testing EO, claiming it would be an innovation “blocker.”

Yesterday · 14:05 UTC

Steven Rosenbaum explains how inaccurate quotes got into his book The Future of Truth.

21 May 2026 · 19:46 UTC

21 May 2026 · 20:45 UTC

Automated continuous follow-up coming into view.

21 May 2026 · 20:42 UTC

Instead of near Brisbane Airport.

21 May 2026 · 20:15 UTC

Looks for leadership in the emerging technology.

Yesterday · 19:10 UTC

Another week, another authentication bypassOur humble Metasploit weekly(ish) blog has been blessed with a new network component vulnerability. The dynamic duo of @sfewer-r7 and @jburgess-r7 have discovered and authored t…

21 May 2026 · 13:00 UTC

The first quarter of 2026 reinforced that attackers are moving faster, operating with greater coordination, and exploiting weaknesses before most organizations can respond effectively. From escalating geopolitical tensio…

20 May 2026 · 12:15 UTC

Modern attack surfaces don’t sit still.Cloud expansion, SaaS sprawl, identity complexity, and shadow IT are continuously reshaping organizational risk. For security leaders, visibility isn’t the challenge anymore, but ac…

Today · 01:35 UTC

On May 22, 2026, an attacker with push access to the Laravel-Lang GitHub organization rewrote every git tag across multiple popular Composer packages within a single 15 minute window. Anyone running composer update or in…

Yesterday · 16:42 UTC

A forged commit. A workflow file disguised as a routine CI optimization. Within 6 hours, 5,561 GitHub repositories were backdoored. Cloud credentials harvested. SSH keys stolen. OIDC tokens minted and exfiltrated before…

Yesterday · 05:40 UTC

Nx Console VS Code Extension Compromised

Yesterday · 16:53 UTC

A multi-stage attack on Linux devices began with an exposed F5 BIG-IP edge appliance and pivoted to an internal Confluence server for credential theft and identity compromise. Learn how the threat actor attempted Kerbero…

Yesterday · 17:00 UTC

Microsoft has been recognized as a Leader in The Forrester Wave™: Workforce Identity Security Platforms, Q2 2026, receiving the highest scores in both the current offering and strategy categories. The post Microsoft reco…

Yesterday · 16:00 UTC

How Frontier firms secure AI at scale: read how Microsoft customers embed governance, identity, and cloud security to make protection an enabler of AI growth. The post Microsoft Security success stories: How St. Luke’s a…

21 May 2026 · 15:30 UTC

Unit 42 analyzes npm supply chain evolution post-Shai Hulud. Discover wormable malware, CI/CD persistence, multi-stage attacks and more. The post The npm Threat Landscape: Attack Surface and Mitigations (Updated May 21)…

Yesterday · 10:00 UTC

Open-source framework ROADtools is being misused by threat actors for cloud intrusions. Learn how to identify its malicious use. The post Paved With Intent: ROADtools and Nation-State Tactics in the Cloud appeared first…

Yesterday · 13:00 UTC

Unit 42 details Screening Serpens' use of AppDomainManager hijacking and new RAT variants to target tech and defense sectors in recent campaigns. The post Tracking Iranian APT Screening Serpens’ 2026 Espionage Campaigns…

20 May 2026 · 09:02 UTC

We explain how a flaw in ExifTool allows attackers to compromise macOS systems via a malicious image (CVE-2026-3102).

Yesterday · 09:12 UTC

Cloud Atlas attacks the public sector and diplomatic structures of Russia and Belarus, using ReverseSocks, SSH, and Tor for persistence in infected systems and its new tool, PowerCloud.

21 May 2026 · 16:00 UTC

Managing identities and access across complex environments has become more critical than ever. AWS Directory Service for Managed Microsoft Active Directory, also known as AWS Managed Microsoft AD, has added new capabilit…

21 May 2026 · 19:58 UTC

We’re excited to announce that Amazon Web Services (AWS) has completed the S&P Global Know Your Third Party (KY3P) assessment of its security posture. This assessment demonstrates our continued commitment to meet the hei…

20 May 2026 · 20:56 UTC

Agents have agency: they adapt and find multiple ways to solve problems. This autonomy creates a fundamental security challenge: the large language model (LLM) at the heart of the agent is non-deterministic, and its deci…

Yesterday · 15:09 UTC

Key Findings Introduction During the recent geopolitical tensions in the Middle East, we reported on multiple Iran-nexus threat actors advancing Iran’s strategic objectives through cyber operations. These activities incl…

21 May 2026 · 16:34 UTC

21 May 2026 · 18:00 UTC

In this edition of the Threat Source newsletter, William explores the value of being "ungovernable" in a professional setting, sharing how challenging the status quo and seeking out the smartest people in the room can le…

Yesterday · 07:00 UTC

21 May 2026 · 05:00 UTC

20 May 2026 · 05:00 UTC

Yesterday · 00:00 UTC

OpenAI is named a leader in the 2026 Gartner Magic Quadrant for Enterprise AI Coding Agents, with Codex recognized for innovation and enterprise-scale deployment.

Yesterday · 00:00 UTC

How Virgin Atlantic used Codex to ship its revamped mobile app on a fixed holiday travel deadline, reaching near-total unit test coverage and zero P1 defects.

21 May 2026 · 12:00 UTC

AdventHealth is using ChatGPT for Healthcare to streamline workflows, reduce administrative burden, and return more time to patient care.

20 May 2026 · 21:07 UTC

If any impact is discovered, customers will be notified via established incident response and notification channels. The post Investigating unauthorized access to GitHub-owned repositories appeared first on The GitHub Bl…