Artificial Intelligence
Microsoft’s MDASH discovered 16 of the Patch Tuesday vulnerabilities, and Palo Alto used Mythos to find dozens of flaws.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
Email Security
CVE-2026-40361 is similar to a vulnerability found a decade ago, BadWinmail, which at the time was dubbed an “enterprise killer”.
Malware & Threats
More than 500 packages were pushed during the attack, but the target appears to have been RubyGems itself rather than users.
Vulnerabilities
Fresh security updates resolve critical flaws in Azure, Windows, Dynamics 365, and the SSO Plugin for Jira & Confluence.
Mobile & Wireless
The tech giant has also ported the patch for a recent deleted chats recovery issue to older versions of iOS.
Artificial Intelligence
Curl’s lead developer says Mythos claims are marketing, but many in the industry believe the results stem from Curl’s robust security.
Malware & Threats
Over 400 malicious versions of 170 packages were published as part of the new Mini Shai-Hulud campaign.
Artificial Intelligence
The zero-day was designed to bypass 2FA and it was developed by a prominent cybercrime group.
Artificial Intelligence
The company topped revenue and earnings forecasts for the first quarter of 2026, but its shares plunged more than 20%.
Data Breaches
The incident occurred on April 20 and did not affect customer data in the company’s production and staging environments.
Endpoint Security
Also called Copy Fail 2 and tracked as CVE-2026-43284 and CVE-2026-43500, the exploit was disclosed before a patch was released.
Artificial Intelligence
Lax extension permissions and improper trust implementation allow attackers to inject prompts in the Claude Chrome extension.
Vulnerabilities
CVE-2026-6973 is a high-severity vulnerability that allows an attacker who has admin privileges to execute arbitrary code.
Nation-State
The cybersecurity firm has not explicitly accused China of being behind the attack, but the evidence suggests it was.
Artificial Intelligence
“TrustFall” attack shows how AI coding agents can be manipulated into launching stealthy supply chain compromises.
Artificial Intelligence
Dragos has published a report describing how threat actors used Claude AI in an attack on a water and drainage utility in Mexico.
Government
Agency issued guidance and calls on operators to build resilient OT environments capable of surviving extended isolation and cyber compromise.
Vulnerabilities
CVE-2026-0300 affects the Captive Portal service of PAN-OS software on PA and VM series firewalls.
Artificial Intelligence
AI red team specialist details his methods for manipulating AI guardrails through jailbreaking and data poisoning, helping developers harden machine learning models.
Artificial Intelligence
Dubbed Bleeding Llama, the heap out-of-bounds read issue can be exploited remotely, without authentication.
Vulnerabilities
Threat actors gained root access to the vulnerable systems and deployed a Monero miner.
Supply Chain Security
Data Breaches
Vulnerabilities
Vulnerabilities
Data Breaches
Hackers used compromised credentials to access enterprise and personal tax-related data.
Artificial Intelligence
Artificial Intelligence
Data Breaches
