The Hacker News Exploited Microsoft Defender Chaotic Eclipse (aka Nightmare-Eclipse)4 min read
Latest signal The Hacker News Exploited in the wild FortiClient Endpoint Management Server (EMS) auth-bypass Fortinet
May 28
Security news, decoded.
What happened, who is affected, and what to do next. Every story is linked to CVEs and enriched with product, exploitation, and patch context.
Earlier39 stories
May 28
The Hacker News Roundup Azure Backup for AKS Silent Ransom Group (SRG)17 min read
ThreatsDay Bulletin: Claude Security Plugin, Azure Priv-Esc, Kali365 MFA Bypass, FIFA Scams +15 More
May 28
Rapid7 Blog PoC Gogs rce16 min read
Authenticated RCE via Argument Injection in Gogs (NOT FIXED)
May 27
Cisco Talos Patch MediaInfoLib rce2 min read
MediaArea heap-based buffer overflow vulnerabilities
May 27
OX Security Research OX Platform ai-ml27 min read
Vibe Coding Security: Why 62% Of AI-Generated Code Ships With Vulnerabilities - OX Security
May 27
OX Security Research Mythos ai-ml6 min read
The CVE Is Dead. Long live the Mythos Era. - OX Security
May 27
Risky Business News Patch Starlette (BadHost, CVE-2026-48710) auth-bypass2 min read
BadHost vulnerability bypasses authentication on AI infrastructure
May 26
Ars Technica (Security) Patch Starlette supply-chain2 min read
Millions of AI agents imperiled by critical vulnerability in open source package
May 26
Dark Reading Patch SharePoint Server Linen Typhoon5 min read
Microsoft Issues Out-of-Band SharePoint Patch
May 26
Check Point Research Exploited Claude Code ai-ml15 min read
AI Threat Landscape Digest March-April 2026
May 25
Check Point Research Exploited Kali365 ShinyHunters6 min read
25th May – Threat Intelligence Report
May 25
Mandiant Incident KnowledgeDeliver unknown threat actor8 min read
Exploitation of KnowledgeDeliver via ViewState Deserialization Vulnerability
May 22
Rapid7 Blog PoC Cisco Catalyst SD-WAN Controller auth-bypass7 min read
Metasploit Wrap Up 05/22/2026
May 22
Bishop Fox Patch PAN-OS auth-bypass11 min read
Detecting CVE-2026-0265 at Scale: PAN-OS CAS Authentication Bypass
May 22
Kaspersky Securelist Exploited VBCloud Cloud Atlas32 min read
Cloud Atlas activity in the second half of 2025 and early 2026: new tools and a new payload
May 22
Bishop Fox Research Strapi auth-bypass21 min read
CVE-2026-27886: Unauthenticated Boolean-Oracle Exfiltration of Administrator Secrets in Strapi
May 20
Qualys Security Blog PoC Linux kernel privilege-escalation10 min read
CVE-2026-46333: Local Root Privilege Escalation and Credential Disclosure in the Linux Kernel ptrace Path
May 20
Kaspersky Securelist Research ExifTool (macOS) rce11 min read
How an image could compromise your Mac: understanding an ExifTool vulnerability (CVE-2026-3102)
May 20
ESET WeLiveSecurity Exploited Webworm malware27 min read
Webworm: New burrowing techniques
May 19
Cisco Talos Exploited TP-Link Archer AX53 rce5 min read
TP-Link, Photoshop, OpenVPN, Norton VPN vulnerabilities
May 18
Check Point Research Exploited Lapsus$ ransomware6 min read
18th May – Threat Intelligence Report
May 18
Kaspersky Securelist Exploited Kaspersky products Interlock15 min read
IT threat evolution in Q1 2026. Non-mobile statistics
May 18
Dark Reading Roundup data-breach38 min read
Boulevard of Broken Dreams: 2 Decades of Cyber Fails
May 15
Rapid7 Blog PoC Metasploit Framework rce5 min read
Metasploit Wrap-Up 05/15/2026
May 14
Rapid7 Blog Advisory PAN-OS HacktronAI5 min read
CVE-2026-0265: Authentication Bypass in Palo Alto Networks PAN-OS
May 14
Cisco Talos Exploited Cisco Catalyst SD-WAN Controller (vSmart) UAT-861616 min read
Ongoing exploitation of Cisco Catalyst SD-WAN vulnerabilities
May 14
Rapid7 Blog Patch Cisco Catalyst SD-WAN Controller (vSmart) auth-bypass17 min read
CVE-2026-20182: Critical authentication bypass in Cisco Catalyst SD-WAN Controller (FIXED)
May 14
Rapid7 Blog Exploited Cisco Catalyst SD-WAN Controller UAT-86166 min read
When Network Controllers Become "God Mode" for Attackers
May 14
Bishop Fox Research Model Context Protocol (MCP) ai-ml9 min read
Otto Support - Logging and Visibility in MCP Servers
May 14
ESET WeLiveSecurity Exploited PicassoLoader FrostyNeighbor16 min read
FrostyNeighbor: Fresh mischief and digital shenanigans
May 14
May 13
Rapid7 Blog Exploited ModeloRAT phishing21 min read
Pluribus and the Path to Domain Compromise: A ModeloRAT Case Study
May 13
Check Point Research Incident Rocket The Gentlemen38 min read
Thus Spoke…The Gentlemen
May 13
Google Project Zero PoC Google Pixel zero-day6 min read
A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window Opens
May 12
Krebs on Security Roundup Windows patch-tuesday4 min read
Patch Tuesday, May 2026 Edition
May 12
Cisco Talos Patch Windows patch-tuesday7 min read
Microsoft Patch Tuesday for May 2026 — Snort rules and prominent vulnerabilities
May 12
Qualys Security Blog Roundup Windows patch-tuesday16 min read
Microsoft and Adobe Patch Tuesday, May 2026 Security Update Review
May 11
Ars Technica (Security) Exploited Linux kernel privilege-escalation3 min read
Linux bitten by second severe vulnerability in as many weeks
May 11
Check Point Research Roundup MOVEit Automation ShinyHunters6 min read