🚨 Important Security Alert! An attachment in an email impersonating DHL about a shipment contains a link to a preconfigured SimpleHelp remote access tool—an ideal starting point for attackers to e...
Hackers Hate AI Slop Even More Than You Do
Hackers Hate AI Slop Even More Than You Do “I’m disappointed that you are working to incorporate AI garbage into the site,” one annoyed person, posting anonymously, said in an online message. This...
2026-05-21 Daily Vulns
Drupal Admins Rush to Patch Critical SQL Injection Vulnerability
Urgent Security Update for Drupal Admins 🚨 Administrators of the Drupal open-source content management platform are rushing to install an emergency patch issued today to fix a highly critical SQL ...
Apple Server Schematics Stolen in May 2026 Foxconn Cyberattack
Apple Server Schematics Stolen in May 2026 Foxconn Cyberattack 🚨 On May 12, AppleInsider reported that the ransomware group Nitrogen hacked into Foxconn facilities in North America. Initially, it ...
WantToCry Ransomware Evades Detection Through SMB Abuse
WantToCry Ransomware Evades Detection 🚨 Attacks using WantToCry ransomware are targeting exposed Server Message Block (SMB) ports and utilizing remote encryption to minimize the chance of detectio...
The Expendable Extension Name Azure VMAccess Naming Chaos, Password Resets, and a Detection Gap
The Expendable Extension Name: Azure VMAccess Naming Chaos, Password Resets, and a Detection Gap In early April, the Sysdig Threat Research Team (TRT) identified a detection flaw in the process fo...
Trapdoor Android Ad Fraud Scheme Hits 659 Million Daily Bid Requests
Trapdoor Android Ad Fraud Scheme Hits 659 Million Daily Bid Requests 🚨 Cybersecurity researchers have disclosed details of a new ad fraud and malvertising operation dubbed Trapdoor targeting Andro...
Drupal to Release Urgent Core Security Updates on May 20, Sites Told to Prepare
Important Security Update Alert 🚨 Drupal has issued an alert stating that it intends to release a core security release for all supported branches on May 20, 2026, from 5-9 p.m. UTC. The Drupal Se...
Disrupting Fox Tempest A Cybercrime Service
Disrupting Fox Tempest: A Cybercrime Service Today, Microsoft unsealed a legal case in the US District Court for the Southern District of New York targeting a cybercrime service known as Fox Tempe...
Verizon 2026 Data Breach Investigations Report (DBIR)
Verizon 2026 Data Breach Investigations Report (DBIR) A data breach is a security incident where unauthorized individuals gain access to sensitive, protected, or confidential data. The Verizon Dat...
Pwn2Own Berlin 2026 Closes With $1.3 Million in Zero-Day Payouts
Pwn2Own Berlin 2026 Closes With $1.3 Million in Zero-Day Payouts 🚀 The highly anticipated Pwn2Own Berlin 2026 hacking competition concluded on 16 May 2026, following three days of intense activity...
Linus Torvalds Critiques AI-Powered Bug Hunters for Linux Security
Linus Torvalds Critiques AI-Powered Bug Hunters for Linux Security Linux kernel boss Linus Torvalds has declared that the project’s security mailing list has become “almost entirely unmanageable” ...
Dutch Cops’ Shame Game Works Wonders as Most Wanted Scammers Now Turned In
Dutch Cops’ Shame Game Works Wonders 🚔 The Netherlands police’s scheme to unmask and shame scammers into submission is proving highly successful, with 74 of its 100 most wanted now known to invest...
ShinyHunters Hack 7-Eleven Franchisee Data and Salesforce Records Exposed
ShinyHunters Hack 7-Eleven: Franchisee Data and Salesforce Records Exposed 🚨 7-Eleven has confirmed a data breach after the ShinyHunters hacking group claimed it stole more than 600,000 Salesforce...
New Reaper Malware Uses Fake Microsoft Domain to Steal macOS Passwords
New Reaper Malware Alert 🚨 A malicious new malware is targeting macOS users, disguised as a critical system update and popular workplace software. Cybersecurity firm SentinelOne’s research unit, S...
INTERPOL Operation Ramz Disrupts MENA Cybercrime Networks with 201 Arrests
INTERPOL Operation Ramz Disrupts MENA Cybercrime Networks 🚨 INTERPOL has coordinated a first-of-its-kind cybercrime crackdown across the Middle East and North Africa (MENA) that led to 201 arrests...
How a Government Contest Launched a Revolution in AI-Based Bug Hunting
How a Government Contest Launched a Revolution in AI-Based Bug Hunting These increasingly sophisticated open-source tools are the product of the Defense Advanced Research Projects Agency’s (DARPA)...
Hackers Actively Exploiting Critical NGINX RCE Vulnerability in the Wild
Hackers Actively Exploiting Critical NGINX RCE Vulnerability in the Wild Security researcher Patrick Garrity from VulnCheck revealed that threat actors are actively targeting CVE-2026-42945, a hea...
2026-05-18 Daily Vulns
NEW: CVE vendor-product description metric Referenceurl title GithubURL Â CVE-2026-7373 Rapid7 - Metasploit Pro...