General
High
19 May
Ionut Arghire /
Security Week:
The researcher dropped the MiniPlasma exploit that uses the original proof-of-concept (PoC) code targeting the bug. The post Researcher Drops MiniPlasma Windows Exploit for Unpatched 2020 CVE appeared first on SecurityWeek.
General
High
19 May
Ashish Khaitan /
The Cyber Express:
In this weekly roundup from The Cyber Express, the global cybersecurity landscape in 2026 continues to shift rapidly as emerging technologies and evolving cyber threats reshape the digital environment. Governments are increasing oversight of artificial intelligence and data practices, while ransomwa
General
High
19 May
Ionut Arghire /
Security Week:
At least one threat actor has adopted the recently released malware source code in attacks against NPM developers. The post First Shai-Hulud Worm Clones Emerge appeared first on SecurityWeek.
Government
High
19 May
Gulshan Rai, former Director General of CERT-In; Dr. Pavan Duggal, advocate at the Supreme Court of India and a prominent voice in cyber law; Maj ...
General
High
19 May
A critical vulnerability in a widely used WordPress plugin has exposed over 200,000 websites to full account takeover, raising urgent concerns across the security community. Discovered on May 8, 2026, by Wordfence’s AI-powered PRISM threat intelligence platform, the flaw affects the Burst Statistics
General
High
19 May
Linus Torvalds has warned that a “continued flood” of AI‑generated bug reports is making the Linux security mailing list “almost entirely unmanageable.” The project is now tightening rules on how AI‑found issues should be reported and handled. In the Linux 7.1‑rc4 announcement, Torvalds noted that t
General
High
19 May
The actions are being taken in light of an expanding supply chain campaign impacting the popular open-source library TanStack and additional npm and PyPI packages tied to several AI companies.
General
High
19 May
OpenAI announced Friday that it is rolling out a new ChatGPT feature allowing users to connect all of their financial accounts to the chatbot for personal finance advice.
General
High
19 May
On Saturday night, the company released a statement confirming the incident and outlining their decision not to pay a ransom issued by the hackers behind the attack.
General
High
19 May
Sergiu Gatlan /
BleepingComputer:
The Pwn2Own Berlin 2026 hacking contest has concluded, with security researchers collecting $1,298,250 in rewards after exploiting 47 zero-day flaws. [...]
General
High
19 May
Sergiu Gatlan /
BleepingComputer:
Microsoft has confirmed that the May 2026 Windows 11 security update (KB5089549) fails to install on some systems and triggers 0x800f0922 errors. [...]
General
Critical
19 May
Sponsored by Adaptive Security /
BleepingComputer:
Many employees already use shadow AI tools at work without security review. Adaptive Security breaks down how teams can build practical AI governance without adding friction for employees. [...]
General
High
19 May
(The Hacker News) /
The Hacker News:
What happens when a phishing email looks clean enough to pass through security, but dangerous enough to expose the business after one click? That is the gap many SOCs still struggle with: the attacks that leave teams unsure what was exposed, who else was targeted, and how far the risk has spread. Ea
General
High
19 May
(The Hacker News) /
The Hacker News:
Monday opens with a trust problem. A mail server flaw is under active use. A network control system was targeted. Trusted packages were poisoned. A fake model page pushed a stealer. Then came the familiar ransom claim: the data was returned and deleted. The pattern is clear. One weak dependency can
General
High
19 May
(The Hacker News) /
The Hacker News:
INTERPOL has coordinated a first-of-its-kind cybercrime crackdown across the Middle East and North Africa (MENA) that led to 201 arrests and the identification of an additional 382 suspects. The initiative involved the efforts of 13 countries from the region between October 2025 and February 2026, a
Government
Critical
18 May
ExamOnline's compliance posture - ISO 27001, ISO 9001, GDPR-compliant, and CERT-In certified - speaks directly to the kind of trust infrastructure ...
Government
High
18 May
CERT-In continues to provide threat advisories and mitigation guidance for critical infrastructure sectors. This move reflects IRDAI's focus on ...
Government
High
18 May
While an independent firm investigates, initial assessments indicate no material impact on business continuity or operations, with CERT-in also ...
General
High
18 May
Cisco released a patch for the vulnerability on Thursday, writing in an advisory that it could “allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system.”
General
High
18 May
By Niall Browne, CEO and Founder, AIBound Shadow AI is accelerating alongside artificial intelligence (AI) adoption at a pace that has outgrown most enterprise governance models. Artificial intelligence (AI) adoption is accelerating at a pace that has outgrown most enterprise governance models. Acco