Cybersecurity, AI, etc.
Cybersecurity (breaches, incidents, vulnerabilities, ransomware, supply chain attacks)
Summary Microsoft’s May 2026 Patch Tuesday addresses a massive 138 security vulnerabilities across its product portfolio, with 30 rated Critical. While none were publicly known or under active exploitation at…
Summary Fortinet has issued urgent patches for critical vulnerabilities in two of its security products: FortiSandbox and FortiAuthenticator. Both flaws allow unauthenticated attackers to execute unauthorized code or commands remotely,…
Summary Instructure, the company behind the widely-used Canvas learning management system, has reached a settlement with the ShinyHunters hacking group following a major data breach that occurred in late April…
Summary Telehealth platform OpenLoop Health has disclosed that a January 2026 intrusion resulted in the theft of personal information belonging to 716,000 individuals. Details of the breach emerged publicly on…
Summary Czech automaker Škoda, a wholly-owned subsidiary of Volkswagen Group, has disclosed a data breach affecting users of its online shop. The incident was discovered through the company’s technical security…
Summary A critical WebSocket hijacking vulnerability with a CVSS score of 9.7 has been discovered in Cline’s local Kanban server, the widely-used open-source AI coding agent. The flaw allowed any…
Summary A disturbing escalation in ransomware tactics has been documented: cybercriminal groups are now resorting to threats of physical violence against employees and their families when organizations refuse to pay…
Summary Google disclosed on Monday that its Threat Intelligence Group (GTIG) identified and disrupted a criminal operation that used an AI model to develop a working zero-day exploit — marking…
Summary Security researchers at LayerX have disclosed “ClaudeBleed,” a critical vulnerability in Anthropic’s Claude Chrome extension that allows any other browser extension — even those with zero special permissions —…
Summary A critical buffer overflow vulnerability in Palo Alto Networks PAN-OS, tracked as CVE-2026-0300 (CVSSv4 9.3), is being actively exploited by a suspected state-sponsored threat cluster designated CL-STA-1132. The flaw…