…This week, it also released the May 2026 Patch Tuesday security updates , covering 120 vulnerabilities, including 17 "critical" flaws. 99% of What Mythos Found Is Still Unpatched. AI chained four zero-days…
…ShinyHunters says they are using a "gadget chain" of old and zero-day vulnerabilities to conduct the attacks. However, they state that their attack is not working on all systems and believe…
Avada Builder WordPress plugin flaws allow site credential theft By Bill Toulas May 15, 2026 11:56 AM Two vulnerabilities in the Avada Builder plugin for WordPress, with an estimated one million…
…90 days to release security fixes for their software and hardware products. Last year, TrendMicro's Zero Day Initiative awarded 1,078,750 for 29 zero-day vulnerabilities and some bug collisions…
Official CheckMarx Jenkins package compromised with infostealer By Bill Toulas May 11, 2026 06:03 PM Checkmarx warned over the weekend that a rogue version of its Jenkins Application Security Testing (AST…
…The topics he writes about include malware, vulnerabilities, exploits and security defenses, as well as research and innovation in information security. His work has been published by Bitdefender, Netgear, The Security Ledger…
…This is now available in preview mode and works as part of automatic attack disruption, a feature designed to contain attacks, limit their impact, and provide security teams with more remediation time…
…Despite that, NSO continued to target WhatsApp users, on multiple occasions using zero-day vulnerabilities . WhatsApp's parent company, Meta, has fought NSO Group in U.S. courts, securing a permanent injunction…
…More recently, ShinyHunters hacked education technology giant Instructure twice , the second time exploiting a security vulnerability to deface Canvas login portals for approximately 330 colleges and universities and threatening to leak data…
…According to the researchers, the C0XMO botnet malware is delivered by exploiting CVE-2021-27137, a buffer overflow vulnerability caused by insufficient user input. It can be leveraged without authentication and leads…
