News

An anonymous security researcher has disclosed two new zero-days affecting Windows, one a BitLocker bypass named YellowKey and the other a privilege-escalation flaw tied to Windows Collaborative Translation Framework (CTFMON) called GreenPlasma. YellowKey…

The findings, published on 14 May 2026, show that the majority (93%) of global organizations use or plan to use AI agents for security tasks such as password resets and VPN access, according to Semperis. The security vendor polled 1100 organizations in the…

According to the Information Commissioner's Office (ICO), getting the basics right, understanding the threat and putting in place multi-layered defenses are key to protecting organisations from AI-powered cyber threats. The ICO released a five-step guide on…

Day One of Pwn2Own Berlin 2026 featured 22 entries targeting AI Databases, Coding Agents, Local Inferences and a separate category for NVIDIA products, as researchers pushed technology to its limits. The event, dated 14 May 2026 and reported by Dustin…

BreachForums and TeamPCP have promoted a “supply chain competition” that invites threat actors to conduct the “biggest supply chain attack” using open-sourced “Shai-Hulud” tooling, framing cybercrime as a collaborative challenge rather than isolated acts.…

Details have emerged about a new variant of the recent Dirty Frag Linux local privilege escalation, codenamed Fragnesia, which is the third such bug identified in the kernel within two weeks. The vulnerability is tracked as CVE-2026-46300 (CVSS 7.8) and is…

An apparent Nitrogen ransomware attack on Foxconn’s North American facilities has highlighted manufacturing’s cyber crisis, with the incident described as one of 600 hits on manufacturers this year. Foxconn admitted that a cyberattack affected operations at…

Checkbox assessments are criticised for being unable to measure risk effectively in today’s rapidly evolving threat landscape, with industry voices calling for continuous, evidence-based models rather than annual questionnaires. According to Sravish Sridhar,…

A new threat campaign is using RubyGems as a dead drop to store exfiltrated data, with the attackers publishing more than 100 gems that appear to use the RubyGems registry as a data transport mechanism rather than a malware distribution channel. According to…

One of the world’s most prolific ransomware operations has itself been breached, offering unique insight into its inner workings. In the first five months of 2026, the Russian cybercriminal gang that calls itself The Gentlemen has published sensitive data…

According to Dark Reading, Informa TechTarget’s flagship cybersecurity brand marks 20 years of reporting and analysis, with a special content series launched to celebrate the milestone. The piece notes that Dark Reading began in May 2006 and is now part of a…

According to Zero Day Initiative, Pwn2Own Berlin 2026 has arrived at OffensiveCon, with the enterprise-focused competition featuring AI Databases, Coding Agents, Local Inferences and a separate NVIDIA category. The event follows a random draw to determine…

According to DomainTools Investigations, the Doppelgänger, also known as the SDA or Structura, is a Russian-linked influence operation that combines narrative design with technical infrastructure to publish, distribute, and amplify content across multiple…

Instructure, the Canvas Learning Management System maker, has come to terms with the cybercriminal extortion group responsible for data stolen in a breach affecting nearly 9,000 educational institutions. According to incident update, the company has “reached…

Two newly disclosed vulnerabilities in the Avada Builder WordPress plugin place around one million sites at risk of arbitrary file read and SQL injection attacks. According to Wordfence analysis published on 12 May, the flaws are CVE-2026-4782, an arbitrary…

SOCRadar’s Free Ransomware Intelligence Dashboard, released under SOCRadar Labs, is a standalone, publicly available resource that does not require an account or subscription. Published on 13 May 2026, the dashboard displays key ransomware statistics at the…

Microsoft has unveiled MDASH, a multi-model agentic scanning harness designed to autonomously discover, validate, and prove exploitable defects in complex codebases like Windows, and it is being tested by some customers in a limited private preview. MDASH…

According to NL Times, the Dutch Health and Youth Care Inspectorate (IGJ) has concluded that Clinical Diagnostics failed to adequately protect its data before last year’s cyberattack, which affected more than 850,000 women who had cervical cancer screening.…

According to the Information Commissioner's Office, South Staffordshire Water was fined £963,900 after a cyber attack from September 2020 to July 2022 that exposed the personal information of 633,887 customers and employees. The fine was issued on 7 May,…

A police officer based in Aylesbury was found guilty of breaching data protection laws after photographing confidential information, according to The Bucks Herald. At Reading Magistrates’ Court on 28 April, PC Lily Maxey was found guilty of the breaches…

According to Check Point Research, the Gentlemen ransomware‑as‑a‑service (RaaS) operation saw its administrator acknowledge a leak of an internal backend database, Rocket, on 4 May 2026, exposing 9 accounts and revealing end‑to‑end details of the operation.…

Threat actors in Latin America are using AI agents to automate entire attack chains, from initial access to generating penetration tools on the fly, with organisations needing to prepare accordingly, according to TrendAI Research. The two campaigns,…