News PricingLogin

§The archiveMon · Wed · FriM · W · F

News.

Every dispatch we've sent. AI-curated, human-reviewed, from 50+ cybersecurity sources.

Follow on LinkedIn

Browse by topic

CVE & Vulnerabilities Ransomware Phishing & Social Engineering Data Breaches

sec-news.ai

About•Privacy Policy•Terms of Use•Submit or contribute•API Access•RSS

Built by Guillaume Bonnet · Questions or feedback? Reach out on LinkedIn

V U L N E R

Monday, May 11

Let’s Encrypt Restores Services After Certificate Issuance Interruption
Premium
Short halt on issuance due to a cross-signed root issue; service restored after hours with mitigations.
May 11·cybersecuritynews.com
cybersecuritynews.com
Ivanti Releases Critical Patch for Exploited Zero-Day Vulnerability
Premium
CVE-2026-6973 exploited in targeted attacks; patches released to mitigate. Immediate patching recommended.
May 11·securityweek.com
cve & vulnerabilities securityweek.com
Microsoft Addresses Critical Vulnerabilities in 365 Copilot Services
Premium
Three critical disclosures in Microsoft 365 Copilot and Copilot Chat were remediated; end-user action not required per advisories.
May 11·cybersecuritynews.com
cve & vulnerabilities cybersecuritynews.com

Friday, May 8

Critical Vulnerabilities Found in Ivanti EPMM Demand Immediate Patching
Premium
Ivanti Endpoint Manager Mobile 0-day vulnerabilities are being exploited; patch on-premises deployments immediately.
May 8·cybersecuritynews.com
cve & vulnerabilities cybersecuritynews.com

Wednesday, May 6

ScarCruft Exploits Gaming Platform in Supply Chain Cyberattack
ScarCruft trojanized a gaming platform to deploy backdoors on Windows and Android. Review supply chain and application trust.
May 6·cybersecuritynews.com
cve & vulnerabilities supply chain attacks malware cybersecuritynews.com

Monday, May 4

Massive Supply Chain Attack Targets Popular Software Ecosystems
Premium
Tiny package-based attack chain shows rapid compromise across popular software ecosystems.
May 4·securityweek.com
supply chain attacks securityweek.com

Friday, May 1

Supply Chain Attack Targets SAP NPM Packages with Malicious Code
Premium
Mini Shai-Hulud supply-chain attack breached SAP-related NPM packages to steal credentials; review dependencies and monitor for credential theft.
May 1·securityweek.com
data breaches supply chain attacks securityweek.com

Wednesday, April 29

Critical GitHub RCE Vulnerability Exposed by AI-Aided Research
RCE in GitHub's internal git infra could allow full server compromise; authenticated access required.
Apr 29·cybersecuritynews.com
cve & vulnerabilities data breaches cybersecuritynews.com

Previous1…8910…12Next

Dispatches 161–180 of 225 · Page 9 of 12

Get these articles delivered to your inbox.

Subscribe free

xlabs_v1 Botnet Targets Exposed Android Debug Bridge for DDoS Attacks

Premium

New Mirai-derived botnet targets exposed ADB on IoT devices for large-scale DDoS; isolate exposed endpoints and rotate credentials.

May 8·thehackernews.com

data breaches malware thehackernews.com

Urgent Patch Required for PAN-OS Zero-Day Vulnerability Actively Exploited

Premium

Pan-OS users face an actively exploited zero-day; apply patches urgently to mitigate potential RCE and persistence risk.

May 8·bleepingcomputer.com

cve & vulnerabilities bleepingcomputer.com

Chrome 148 Security Update Delivers Critical Vulnerability Fixes

Premium

Chrome 148 closes 127 vulnerabilities, including critical overflow and use-after-free flaws. Update immediately to reduce exploitation risk.

May 8·securityweek.com

cve & vulnerabilities cloud security securityweek.com

Critical cPanel Flaw Exploited Against Government Networks

New cPanel vulnerability exploited to target government and MSP networks. Patch immediately and audit exposure.

May 6·thehackernews.com

cve & vulnerabilities thehackernews.com

Critical Vulnerability in Weaver E-cology Exploited by Cybercriminals

Critical unauthenticated RCE in Weaver E-cology is being actively abused in the wild. Organizations should patch affected builds and monitor for payloads.

May 6·cybersecuritynews.com

cve & vulnerabilities cybersecuritynews.com

Critical Security Flaws in MOVEit Automation Demand Immediate Attention

Progress Software patches a critical MOVEit Automation flaw that could bypass authentication. Immediate action recommended to apply updates.

May 6·thehackernews.com

cve & vulnerabilities cloud security thehackernews.com

Exim Mail Server Update Resolves Critical Security Vulnerabilities

Premium

Exim fixes address memory corruption, crash and data leakage risks across widely used mail servers.

May 4·cybersecuritynews.com

cve & vulnerabilities data breaches cybersecuritynews.com

Instructure Confirms Breach as ShinyHunters Claims Responsibility

Premium

Education tech giant confirms breach; extortion group claims responsibility with potential student data exposure.

May 4·bleepingcomputer.com

data breaches bleepingcomputer.com

Critical Exploit in cPanel & WHM Threatens Thousands of Servers

Premium

Technical PoC publicly released for CVE-2026-41940; vast exploitation activity observed in wild, enabling pre-authentication access and server compromise.

May 4·cybersecuritynews.com

cve & vulnerabilities cybersecuritynews.com

Windows 11 Update Disrupts Third-Party Backup Software

Premium

April 2026 Windows 11 update breaks third-party backup software; assess vendor patches and rollback options to avoid data loss.

May 1·cybersecuritynews.com

cve & vulnerabilities cybersecuritynews.com

Critical Flaw in Google Gemini CLI Poses Severe Security Risks

Premium

A maximum severity remote code execution flaw in the Gemini CLI and related GitHub Actions could allow attackers to run code on host systems. Apply patches immediately.

May 1·cybersecuritynews.com

cve & vulnerabilities cybersecuritynews.com

Critical Vulnerability in cPanel & WHM Exploited for Months

Premium

Active exploitation of a critical auth bypass in cPanel/WHM has been observed in the wild for months, enabling unauthorized admin access. Patch and containment efforts are underway.

May 1·securityweek.com

cve & vulnerabilities securityweek.com

News.

Let’s Encrypt Restores Services After Certificate Issuance Interruption

Ivanti Releases Critical Patch for Exploited Zero-Day Vulnerability

Microsoft Addresses Critical Vulnerabilities in 365 Copilot Services

Critical Vulnerabilities Found in Ivanti EPMM Demand Immediate Patching

ScarCruft Exploits Gaming Platform in Supply Chain Cyberattack

Massive Supply Chain Attack Targets Popular Software Ecosystems

Supply Chain Attack Targets SAP NPM Packages with Malicious Code

Critical GitHub RCE Vulnerability Exposed by AI-Aided Research

xlabs_v1 Botnet Targets Exposed Android Debug Bridge for DDoS Attacks

Urgent Patch Required for PAN-OS Zero-Day Vulnerability Actively Exploited

Chrome 148 Security Update Delivers Critical Vulnerability Fixes

Critical cPanel Flaw Exploited Against Government Networks

Critical Vulnerability in Weaver E-cology Exploited by Cybercriminals

Critical Security Flaws in MOVEit Automation Demand Immediate Attention

Exim Mail Server Update Resolves Critical Security Vulnerabilities

Instructure Confirms Breach as ShinyHunters Claims Responsibility

Critical Exploit in cPanel & WHM Threatens Thousands of Servers

Windows 11 Update Disrupts Third-Party Backup Software

Critical Flaw in Google Gemini CLI Poses Severe Security Risks

Critical Vulnerability in cPanel & WHM Exploited for Months