Malicious Hugging Face Models Could Trigger Remote Code Execution
Organizations using vulnerable versions of the Hugging Face Transformers library could unknowingly execute attacker-controlled code simply by loading a malicious...
International
Chinese Spies Using LinkedIn, Job Sites to Recruit Western Workers
Fake jobs, real intelligence gathering. Intelligence agencies across the Five Eyes alliance, including the FBI, MI5, and counterparts in Australia,...
DentaQuest Cyberattack Tied to 2.6M Exposed Accounts
DentaQuest handles dental benefits for millions of people. Now, data tied to 2.6 million accounts has surfaced in a public...
New GitHub Zero-Day Exposed Developer Tokens to Attackers
A single click on the wrong repository could have put a developer’s GitHub access at risk. Security researcher Ammar Askar...
Gartner SRM 2026 Signals a Cybersecurity Shift From Prevention to Resilience
The old success metrics no longer survive contact with reality. There is a particular kind of clarity that comes from...
Apple’s 2026 Security Events: iPhone Exploits, Zero-Days Put Millions at Risk
Apple’s security year so far has been anything but quiet. The company’s 2026 security cycle has been dominated by a...
FBI Warning: World Cup Scammers Are Spoofing FIFA Tickets, Job Sites
World Cup excitement is becoming useful bait for online scammers. The FBI warned that fraudsters are creating spoofed FIFA-themed websites...
Update Now: Apple Rolls Out Critical Fixes for iPhone 17, M5 Macs
Image: Thai Nguyen/Unsplash Apple released iOS 26.5.1 and macOS 26.5.1 to fix iPhone 17 charging issues and M5 Mac shutdown...
Google Chrome’s New Feature Takes Aim at Cookie Theft, Account Hijacking
Google Chrome is making stolen login cookies a lot less useful. Google has begun rolling out Device Bound Session Credentials,...
Dexcom Warns Stolen G7 Glucose Sensors May Pose Infection, Reading Risks
Medical device maker Dexcom says two lots of its Dexcom G7 continuous glucose monitors were stolen during the disposal process...
Carnival Data Breach Exposes Data of Nearly 6 Million Customers
Carnival’s latest cyber breach lands with an uncomfortable sense of déjà vu, as the world’s biggest cruise operator again finds...
ShinyHunters Alleges 42M Records Stolen from Charter Communications
Voice phishing is becoming a cloud security problem, not just a help desk problem. Charter Communications confirmed a cybersecurity incident...
The Next AI Security Failure May Start With a Trusted Assistant
An AI assistant does not need to “go rogue” to create a security incident. It only needs to follow the...
‘Tiny11’ Gives Windows 10 Users a Risky Upgrade Path
The end of Windows 10 support is creating a hardware dilemma for older PCs. As Microsoft pushes users away from...
Security Affairs newsletter Round 578 by Pierluigi Paganini – INTERNATIONAL EDITION
Security Affairs newsletter Round 578 by Pierluigi Paganini – INTERNATIONAL EDITION Pierluigi Paganini May 24, 2026 A new round of...
