Urgent Mitigations Released for Microsoft Exchange Zero-Day Vulnerability
PremiumMicrosoft issues mitigations for a high-severity Exchange Server zero-day (CVE-2026-42897) exploited in the wild. Install mitigations promptly.
Monday, May 18
Friday, May 15
Microsoft Releases Critical Security Patches for 138 Vulnerabilities
PremiumMass patch Tuesday covering DNS, Netlogon, and privilege-escalation flaws; prioritize critical patches in risk mitigations.
Foxconn Faces Ransomware Attack Impacting North American Operations
PremiumRansomware overlay amid 600+ manufacturing sector hits; highlights supply-chain risk and downtime impact.
Cyberattackers Exploit Microsoft Teams to Breach Corporate Networks
PremiumInitial access via social engineering on Teams; rapid persistence emphasis for defenders to harden collaboration tools and training.
Monday, May 11
Critical Zero-Day Vulnerability in Linux Threatens System Security
PremiumDirty Frag zero-day enables root via PoC exploits across many distros; patch guidance issued.
Let’s Encrypt Restores Services After Certificate Issuance Interruption
PremiumShort halt on issuance due to a cross-signed root issue; service restored after hours with mitigations.
Ivanti Releases Critical Patch for Exploited Zero-Day Vulnerability
PremiumCVE-2026-6973 exploited in targeted attacks; patches released to mitigate. Immediate patching recommended.
Microsoft Addresses Critical Vulnerabilities in 365 Copilot Services
PremiumThree critical disclosures in Microsoft 365 Copilot and Copilot Chat were remediated; end-user action not required per advisories.
Friday, May 8
Critical Vulnerabilities Found in Ivanti EPMM Demand Immediate Patching
PremiumIvanti Endpoint Manager Mobile 0-day vulnerabilities are being exploited; patch on-premises deployments immediately.
xlabs_v1 Botnet Targets Exposed Android Debug Bridge for DDoS Attacks
PremiumNew Mirai-derived botnet targets exposed ADB on IoT devices for large-scale DDoS; isolate exposed endpoints and rotate credentials.
Urgent Patch Required for PAN-OS Zero-Day Vulnerability Actively Exploited
PremiumPan-OS users face an actively exploited zero-day; apply patches urgently to mitigate potential RCE and persistence risk.
Chrome 148 Security Update Delivers Critical Vulnerability Fixes
PremiumChrome 148 closes 127 vulnerabilities, including critical overflow and use-after-free flaws. Update immediately to reduce exploitation risk.
Wednesday, May 6
ScarCruft Exploits Gaming Platform in Supply Chain Cyberattack
ScarCruft trojanized a gaming platform to deploy backdoors on Windows and Android. Review supply chain and application trust.
Critical cPanel Flaw Exploited Against Government Networks
New cPanel vulnerability exploited to target government and MSP networks. Patch immediately and audit exposure.
Critical Vulnerability in Weaver E-cology Exploited by Cybercriminals
Critical unauthenticated RCE in Weaver E-cology is being actively abused in the wild. Organizations should patch affected builds and monitor for payloads.
Critical Security Flaws in MOVEit Automation Demand Immediate Attention
Progress Software patches a critical MOVEit Automation flaw that could bypass authentication. Immediate action recommended to apply updates.
Monday, May 4
Massive Supply Chain Attack Targets Popular Software Ecosystems
PremiumTiny package-based attack chain shows rapid compromise across popular software ecosystems.
Exim Mail Server Update Resolves Critical Security Vulnerabilities
PremiumExim fixes address memory corruption, crash and data leakage risks across widely used mail servers.
Instructure Confirms Breach as ShinyHunters Claims Responsibility
PremiumEducation tech giant confirms breach; extortion group claims responsibility with potential student data exposure.
Critical Exploit in cPanel & WHM Threatens Thousands of Servers
PremiumTechnical PoC publicly released for CVE-2026-41940; vast exploitation activity observed in wild, enabling pre-authentication access and server compromise.
Get these articles delivered to your inbox.
Subscribe free