Month: May 2026

Summary Microsoft’s May 2026 Patch Tuesday addresses a massive 138 security vulnerabilities across its product portfolio, with 30 rated Critical. While none were publicly known or under active exploitation at…

Summary A disturbing escalation in ransomware tactics has been documented: cybercriminal groups are now resorting to threats of physical violence against employees and their families when organizations refuse to pay…

Summary A critical WebSocket hijacking vulnerability with a CVSS score of 9.7 has been discovered in Cline’s local Kanban server, the widely-used open-source AI coding agent. The flaw allowed any…

Summary Czech automaker Škoda, a wholly-owned subsidiary of Volkswagen Group, has disclosed a data breach affecting users of its online shop. The incident was discovered through the company’s technical security…

Summary A critical buffer overflow vulnerability in Palo Alto Networks PAN-OS, tracked as CVE-2026-0300 (CVSSv4 9.3), is being actively exploited by a suspected state-sponsored threat cluster designated CL-STA-1132. The flaw…

Summary Security researchers at LayerX have disclosed “ClaudeBleed,” a critical vulnerability in Anthropic’s Claude Chrome extension that allows any other browser extension — even those with zero special permissions —…

Summary Google disclosed on Monday that its Threat Intelligence Group (GTIG) identified and disrupted a criminal operation that used an AI model to develop a working zero-day exploit — marking…

Summary Progress Software has issued a critical security alert for two vulnerabilities in MOVEit Automation: CVE-2026-4670, a critical authentication bypass (CVSS 9.8), and CVE-2026-5174, a high-severity privilege escalation flaw. Chained…

Summary Trellix, the cybersecurity firm formed from the merger of McAfee Enterprise and FireEye, has confirmed that attackers gained unauthorized access to a portion of its source code repository. The…