ADT Suffers Third Breach Since 2024 — ShinyHunters Leak 5.5 Million Customer Records After Okta SSO Compromise
Summary Home security giant ADT has confirmed a data breach affecting approximately 5.5 million current and prospective customers, with the ShinyHunters hacking group claiming responsibility. This marks ADT’s third breach…
“Bleeding Llama” — Critical Ollama Vulnerability Exposes 300,000+ AI Servers to Remote Memory Leak
Summary A critical out-of-bounds read vulnerability (CVE-2026-7482, CVSS 9.1) has been disclosed in Ollama, the wildly popular open-source framework for running large language models locally. Dubbed “Bleeding Llama” by researchers…
Moonshot AI Closes $2 Billion Round at $20 Billion Valuation — Backed by Alibaba, Tencent, and Meituan
Summary Chinese AI startup Moonshot AI has closed a massive $2 billion funding round on May 7, 2026, pushing the company’s valuation to $20 billion. The round was backed by…
Anthropic Introduces “Dreaming” — A New Technique That Lets AI Agents Learn Between Sessions
Summary Anthropic has unveiled a novel AI agent technique called “dreaming” that enables autonomous systems to review their own past behavior, identify patterns and mistakes, and improve future performance between…
OpenAI Launches GPT-Rosalind — A Specialized AI Model for Life Sciences and Drug Discovery
Summary OpenAI has released GPT-Rosalind, a purpose-built AI model designed specifically to support life sciences research, spanning biochemistry, drug discovery, and medical research. The model is named after Rosalind Franklin,…
Medtronic Confirms Data Breach After ShinyHunters Claims 9 Million Patient and Corporate Records
Summary Medical device giant Medtronic has confirmed unauthorized access to its corporate IT systems after the ShinyHunters hacking group claimed to have exfiltrated over 9 million records. The company publicly…
MCPwn: Critical nginx-ui Authentication Bypass Under Active Exploitation — Full Nginx Takeover Possible
Summary A critical vulnerability in nginx-ui, the popular open-source web management interface for Nginx servers, is being actively exploited in the wild. Tracked as CVE-2026-33032 and dubbed “MCPwn” by Pluto…
cPanel & WHM Hit with Triple Vulnerability Disclosure — Arbitrary Code Execution and Privilege Escalation
Summary cPanel released emergency patches on May 8 for three newly disclosed vulnerabilities in cPanel and Web Host Manager (WHM), the control panel software that powers millions of web hosting…
DAEMON Tools Supply-Chain Attack: Trojanized Installers Served from Official Site for a Month
Security researchers at Kaspersky have uncovered a supply-chain attack targeting DAEMON Tools Lite, where trojanized Windows installers were distributed from the official website for nearly a month — from April…
AI-Driven Mass Layoffs Hit Big Tech — Cloudflare Cuts 20% After 600% Surge in Internal AI Usage
A wave of AI-attributed mass layoffs swept through the tech sector this week, with Cloudflare, Upwork, Bill Holdings, Coinbase, and Meta all announcing significant workforce reductions — and explicitly pointing…