Cybersecurity, AI, etc.
Cybersecurity (breaches, incidents, vulnerabilities, ransomware, supply chain attacks)
Summary A critical OS command injection vulnerability (CVE-2026-8153, CVSS 9.8) has been disclosed in Universal Robots’ PolyScope 5 operating system — the software that powers and controls the Danish company’s…
Summary Microsoft’s Digital Crimes Unit announced today the seizure and disruption of infrastructure belonging to Fox Tempest, a financially-motivated threat group that operated a sophisticated malware-signing-as-a-service platform. The operation, backed…
Summary The 2026 Verizon Data Breach Investigations Report (DBIR), published today, reveals a watershed moment in cybersecurity: for the first time in the report’s 19-year history, vulnerability exploitation has overtaken…
Summary A critical Linux kernel zero-day vulnerability dubbed “Copy Fail” (CVE-2026-31431) has been disclosed, affecting Linux distributions running kernel versions released since 2017. The flaw allows an unprivileged local user…
Summary Microsoft’s May 2026 Patch Tuesday addresses 118 vulnerabilities across its product ecosystem, with 16 rated critical and 102 rated important. The update includes fixes for remote code execution, privilege…
Summary A disgruntled security researcher operating under the aliases “Chaotic Eclipse” and “Nightmare Eclipse” has publicly released proof-of-concept exploits for three separate Windows zero-day vulnerabilities in a coordinated campaign timed…
Summary The notorious ShinyHunters threat group has pulled off what security experts are calling one of the most significant education-related data thefts ever recorded. The attack targeted Instructure’s Canvas learning…
Grafana Labs disclosed on May 16, 2026, that a threat actor infiltrated its GitHub environment by exploiting a misconfigured CI/CD pipeline, stealing a privileged token, downloading the company’s private codebase,…
A sophisticated malvertising campaign dubbed “InstallFix” is actively leveraging Google Ads and, remarkably, legitimate Claude.ai shared chats to distribute the MacSync infostealer to macOS users and credential-stealing trojans to Windows…
An emerging ransomware group calling itself “Sorry” has surfaced with an aggressive opportunistic strategy: exploiting the cPanel authentication bypass vulnerability (CVE-2026-41940) within just 48 hours of its public disclosure. The…