Cybersecurity, AI, etc.
Cybersecurity (breaches, incidents, vulnerabilities, ransomware, supply chain attacks)
Summary Trellix, the cybersecurity firm formed from the merger of McAfee Enterprise and FireEye, has confirmed that attackers gained unauthorized access to a portion of its source code repository. The…
Summary Progress Software has issued a critical security alert for two vulnerabilities in MOVEit Automation: CVE-2026-4670, a critical authentication bypass (CVSS 9.8), and CVE-2026-5174, a high-severity privilege escalation flaw. Chained…
Summary France’s Agence nationale des titres sécurisés (ANTS), the government agency responsible for managing passports, national identity cards, residence permits, and driving licenses, has confirmed a data breach affecting 11.7…
Summary A critical out-of-bounds read vulnerability (CVE-2026-7482, CVSS 9.1) has been disclosed in Ollama, the wildly popular open-source framework for running large language models locally. Dubbed “Bleeding Llama” by researchers…
Summary Home security giant ADT has confirmed a data breach affecting approximately 5.5 million current and prospective customers, with the ShinyHunters hacking group claiming responsibility. This marks ADT’s third breach…
Summary Medical device giant Medtronic has confirmed unauthorized access to its corporate IT systems after the ShinyHunters hacking group claimed to have exfiltrated over 9 million records. The company publicly…
Summary A critical vulnerability in nginx-ui, the popular open-source web management interface for Nginx servers, is being actively exploited in the wild. Tracked as CVE-2026-33032 and dubbed “MCPwn” by Pluto…
Summary cPanel released emergency patches on May 8 for three newly disclosed vulnerabilities in cPanel and Web Host Manager (WHM), the control panel software that powers millions of web hosting…
Security researchers at Kaspersky have uncovered a supply-chain attack targeting DAEMON Tools Lite, where trojanized Windows installers were distributed from the official website for nearly a month — from April…
Ivanti has released emergency patches for its Endpoint Manager Mobile (EPMM) product, addressing five vulnerabilities — including CVE-2026-6973, a high-severity zero-day that is being actively exploited in targeted attacks. The…