Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites to RCE Attacks
Ravie LakshmananMay 21, 2026Web Security / Vulnerability Drupal has released security updates for a "highly critical" security vulnerability in Drupal...
Security
Microsoft Open-Sources RAMPART and Clarity to Secure AI Agents During Development
Ravie LakshmananMay 20, 2026Artificial Intelligence / Security Testing Microsoft has unveiled two new open-source tools called RAMPART and Clarity to...
CISA Contractor Exposed Sensitive Credentials in Public GitHub Repository
The federal agency that tells Americans how to secure their systems is now investigating how sensitive credentials tied to its...
Microsoft Launches New Surface AI PCs for Business Buyers
Microsoft’s latest Surface pitch is aimed squarely at businesses preparing their PC fleets for the AI era. The tech giant...
Mac Users Face New Malware Threat Spoofing Apple, Google, and Microsoft
The latest malware targeting Mac users isn’t built to crack security protections, but to exploit users’ trust in familiar brands....
Agent AI is Coming. Are You Ready?
The Hacker NewsMay 20, 2026Identity Security / Enterprise Security New Industry Data Just Released Suggests Not. On May 19th, 2026,...
DirtyDecrypt PoC Released for Linux Kernel CVE-2026-31635 LPE Vulnerability
Proof-of-concept (PoC) exploit code has now been released for a recently patched security flaw in the Linux kernel that could...
Microsoft Confirms Windows Update Bug Blocking Security Fixes
Microsoft’s latest update is failing at the one job it cannot afford to get wrong: installing. Several Windows users have...
AdvancedHEALTH Ransomware Claim Includes 2.3M Patient Data Lines
A ransomware gang is trying to turn a Tennessee healthcare group into a public pressure campaign. DragonForce claims it stole...
Grafana Rejects Ransom Demand After GitHub Breach Exposes Codebase Theft
Grafana has confirmed that an unauthorized party gained access to its GitHub environment after obtaining a compromised token, allowing the...
SEPPMail Secure E-Mail Gateway Vulnerabilities Enable RCE and Mail Traffic Access
Ravie LakshmananMay 19, 2026Vulnerability / Email Security Critical security vulnerabilities have been disclosed in SEPPMail Secure E-Mail Gateway, an enterprise-grade...
Popular GitHub Action Tags Redirected to Imposter Commit to Steal CI/CD Credentials
Ravie LakshmananMay 19, 2026Software Security / Malware In yet another software supply chain attack, threat actors have compromised the popular...
CISA Admin Leaked AWS GovCloud Keys on Github
Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that...
Apple’s Siri Revamp May Add Auto-Deleting Chats
Siri may soon learn a new trick: forgetting. Apple is reportedly developing a dedicated Siri app with settings that would...
Banned Nvidia AI Chips Keep Reaching China Despite US Crackdown
The US tried to wall off its most advanced AI chips from rival powers. The chips kept finding doors. A...
