News

Wed 13 May· 52 articles

1. 09:05

   UK cyber sector hits £14.7bn revenue as jobs and firms rise

   The UK government has hailed the continued growth of its burgeoning cybersecurity sector, which generated revenues of £14.7bn ($19.9bn) last year, according to The UK government. The update published on 13 May stated that the cybersecurity industry…

   Infosecurity
2. 08:37

   Intel and AMD patch 70 flaws, including critical GPU driver bugs

   Chipmaker Patch Tuesday: Intel and AMD Patch 70 Vulnerabilities reports that on 13 May 2026, SecurityWeek detailed more than two dozen advisories addressing 70 vulnerabilities across Intel and AMD product portfolios. According to SecurityWeek, Intel…

   SecurityWeekCVE-2026-20794CVE-2026-20794
   
3. 08:15

   Microsoft Windows Server 20122 articles this day · Rapid7 first

   Microsoft patches 120 bugs, flags critical Netlogon and DNS RCEs · Microsoft Patch Tuesday patches Netlogon and DNS RCE flaws

   Show 2 articles2 outletsCVE-2026-41089CVE-2026-41089
4. 08:08

   GemStuffer Campaign Hijacks RubyGems to Exfiltrate UK Council Data

   Cybersecurity researchers have highlighted a campaign dubbed GemStuffer that targeted the RubyGems repository with more than 150 gems acting as data exfiltration channels rather than for malware distribution. The campaign purportedly fetches pages from U.K.…

   The Hacker News
5. 07:30

   RubyGems pauses new accounts after 500+ malicious gem push

   Hundreds of malicious packages prompted RubyGems to suspend new registrations. The SecurityWeek report notes that more than 500 junk packages were pushed by bot accounts during a spam campaign, with the apparent target the RubyGems service itself rather than…

   SecurityWeek
   
6. 06:55

   Google rolls out opt in logging for Android spyware defence

   Google revealed a new opt‑in Android feature called Intrusion Logging, designed for storing forensics logs to help analyse sophisticated spyware attacks, and it was developed in partnership with Amnesty International and Reporters Without Borders. The logs…

   The Hacker News
7. 06:50

   Siemens issues 18 advisories patching critical OT flaws

   Siemens has published 18 new security advisories, with several describing critical vulnerabilities across products such as Sentron 7KT PAC1261 Data Manager, Simatic S7 PLC web server, Ruggedcom Rox, ROS#, Simatic CN4100, and Opcenter RDnL. The company also…

   SecurityWeek
   
8. 06:29

   AI Driven SEO Scam Fuels Fake Marketplaces to Steal Payment Data

   A guest diary by Joshua Nikolson on the SANS ISC platform describes using AI-assisted fraud campaigns and SEO poisoning to drive traffic to fake marketplaces that copy real product listings. The author notes that a VirusTotal page for the target URL showed…

   SANS ISC
   
9. 06:22

   Fortinet patches critical RCE flaws in FortiAuthenticator, FortiSandbox

   Fortinet has patched two critical flaws affecting FortiSandbox and FortiAuthenticator, which could allow attackers to remotely execute code on unpatched systems. The first vulnerability, CVE-2026-44277, is an improper access control issue in…

   Security AffairsCVE-2026-44277CVE-2026-44277
   
10. 03:05

    ISC Stormcast For Wednesday, May 13th, 2026 https://isc.sans.edu/podcastdetail/9930, (Wed, May 13th)

    ISC Stormcast for Wednesday, May 13th, 2026 is published with the Threat Level shown as green. The diary notes that the Handler on Duty is Rob VandenBrink, and it directs readers to a page to learn more about Johannes Ullrich’s SANS classes. It includes a…

    SANS ISC
    
11. 01:20

    How Proxifier Lets You Monitor Windows App Traffic via Burp Suite

    In a recent ISC diary, Rob VandenBrink explains how to make Windows executable traffic visible by directing it through a proxy using Proxifier, a tool that lets you create rules such as “send traffic from abc[.]exe to proxy A” or “send everything else…

    SANS ISC