“Chaotic Eclipse” Drops Three Windows Zero-Days in Vendetta Against Microsoft — YellowKey, GreenPlasma, and MiniPlasma All Exploited in the Wild
Summary A disgruntled security researcher operating under the aliases “Chaotic Eclipse” and “Nightmare Eclipse” has publicly released proof-of-concept exploits for three separate Windows zero-day vulnerabilities in a coordinated campaign timed…
ShinyHunters Breach Canvas LMS — Nearly 9,000 Schools Hit in One of the Largest Education Data Thefts Ever
Summary The notorious ShinyHunters threat group has pulled off what security experts are calling one of the most significant education-related data thefts ever recorded. The attack targeted Instructure’s Canvas learning…
Malicious Google Ads Push Fake Claude Installers Delivering MacSync Infostealer — Hosted on Claude.ai Itself
A sophisticated malvertising campaign dubbed “InstallFix” is actively leveraging Google Ads and, remarkably, legitimate Claude.ai shared chats to distribute the MacSync infostealer to macOS users and credential-stealing trojans to Windows…
Grafana Labs Discloses GitHub Breach — Attacker Stole Codebase via CI/CD Pipeline Exploit, Then Attempted Extortion
Grafana Labs disclosed on May 16, 2026, that a threat actor infiltrated its GitHub environment by exploiting a misconfigured CI/CD pipeline, stealing a privileged token, downloading the company’s private codebase,…
OpenAI Launches $4 Billion “DeployCo” Venture to Embed AI Engineers Directly Into Enterprise Operations
OpenAI has launched the OpenAI Deployment Company (“DeployCo”), a majority-owned subsidiary backed by over $4 billion in initial investment and valued at $10 billion pre-money. The venture’s mission is to…
“Fragnesia” Linux Kernel LPE (CVE-2026-46300) Grants Root via Page-Cache Corruption — PoC Released
A new high-severity local privilege escalation vulnerability in the Linux kernel, dubbed “Fragnesia” and tracked as CVE-2026-46300 (CVSS 7.8), has been publicly disclosed along with a working proof-of-concept exploit. Discovered…
NGINX CVE-2026-42945 Actively Exploited — Heap Buffer Overflow Enables Worker Crashes and Possible RCE
A critical heap buffer overflow vulnerability in NGINX, tracked as CVE-2026-42945 (CVSS 9.2), is now being actively exploited in the wild just days after public disclosure. The flaw affects NGINX…
New “Sorry” Ransomware Gang Weaponizes cPanel Authentication Bypass Within 48 Hours of Disclosure
An emerging ransomware group calling itself “Sorry” has surfaced with an aggressive opportunistic strategy: exploiting the cPanel authentication bypass vulnerability (CVE-2026-41940) within just 48 hours of its public disclosure. The…
Researchers Use Anthropic’s Claude Mythos to Crack Apple M5 Memory Security — Root Access Achieved in 5 Days
Summary A security research team called Calif has achieved the first public privilege escalation exploit on Apple’s M5 silicon, bypassing the chip’s Memory Integrity Enforcement (MIE) — a hardware-assisted memory…
Microsoft Exchange Server Zero-Day (CVE-2026-42897) Actively Exploited — CISA Orders Emergency Mitigation
Summary Microsoft has confirmed that a high-severity zero-day vulnerability in Exchange Server, tracked as CVE-2026-42897, is being actively exploited in the wild. The flaw is a cross-site scripting (XSS) vulnerability…