Cybersecurity, AI, etc.
Summary Twelve critical security vulnerabilities have been disclosed in vm2, the widely-used Node.js library for running untrusted JavaScript inside sandboxed environments. The flaws — including CVE-2026-24118, CVE-2026-24120, CVE-2026-24781, and CVE-2026-26332,…
Summary The European Union has reached a landmark agreement to explicitly ban AI systems that generate sexualized deepfakes, marking the first time EU legislation directly targets so-called “nudifier” applications. The…
What Happened Microsoft, Google, and Elon Musk’s xAI have agreed to provide the U.S. government with early access to new AI models for national security testing. The agreements, announced by…
What Happened OpenAI has made GPT-5.5 Instant the default model powering ChatGPT as of May 5, 2026. The new model replaces the previous default and promises more accurate and responsive…
What Happened Security firm Rapid7 has attributed a sophisticated ransomware attack to MuddyWater (aka Mango Sandstorm, Seedworm, Static Kitten), an Iranian state-sponsored hacking group, in what researchers describe as a…
What Happened Microsoft Defender researchers have published a detailed analysis of CVE-2026-31431, a high-severity local privilege escalation vulnerability in the Linux kernel’s cryptographic subsystem. Dubbed “Copy Fail,” the flaw affects…
What Happened Palo Alto Networks has confirmed that a critical zero-day vulnerability in its PAN-OS software is being actively exploited in the wild. Tracked as CVE-2026-0300, the flaw is a…
What Happened The Apache Software Foundation has released version 2.4.67 of the Apache HTTP Server to address CVE-2026-23918 (CVSS 8.8), a critical double-free vulnerability in the HTTP/2 protocol handler (mod_http2).…
Summary A critical unauthenticated PHP code injection vulnerability in MetInfo CMS (CVE-2026-29014, CVSS 9.8) is being actively exploited in the wild. The flaw affects MetInfo versions 7.9, 8.0, and 8.1,…
Summary Global medical device giant Medtronic has disclosed a cyberattack on its corporate IT systems. The prolific threat group ShinyHunters has claimed responsibility, alleging they exfiltrated approximately 9 million records…