Fake Claude Code Installer Targets Developers With Browser Credential Stealer
A new report from the Cyber Defence Centre at Ontinue has found a campaign targeting software developers with fake installation pages that look like official…
Month: May 2026
Stealthy hackers exploit cPanel flaw in active backdoor campaign (CVE-2026-41940)
Security researchers at XLab have outlined an active attack campaign targeting CVE-2026-41940, the recently disclosed vulnerability in cPanel & WHM, and have linked it to…
Fake Claude search results lure Mac users into ClickFix attack
Researchers found that cybercriminals are using sponsored search results and shared Claude chats to lure victims into a typical ClickFix attack to install malware on…
New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution
Ravie LakshmananMay 12, 2026Vulnerability / Email Security Exim has released security updates to address a severe security issue affecting certain configurations that could enable memory…
What an LA County Court case means for the future of social media
In Summer 2023, a plaintiff known only by their initials “K.G.M.” launched a case against Meta, Google, TikTok and Snap (owner of SnapChat). It was…
Nokia wins UK appeal to block Acer, Asus video streaming patent lawsuits
Nokia has won an appeal to block London lawsuits by Taiwanese tech companies Acer and Asus in a case which is part of a global…
Exaforce Raises $125 Million for Agentic SOC Platform
Agentic security operations firm Exaforce announced on Tuesday that it has raised $125 million in a Series B funding round, bringing the company’s total to…
The World’s Most “Dangerous” AI, Anthropic’s Mythos, found only one flaw in curl
The world’s most “Dangerous” AI, Anthropic’s Mythos, found only one flaw in curl Pierluigi Paganini May 12, 2026 Anthropic’s AI found five vulnerabilities in curl,…
The beast needs a cage: What’s next for AppSec post-Mythos | Blog
Dafydd Stuttard | Tuesday, 12 May 2026 at 14:18 UTC Now that the dust has settled on Mythos dropping, there is space for more considered…
Extending Security to MCP Servers: Closing a Critical Gap — API Security
The Model Context Protocol (MCP) is a de facto standard for providing structured access to privileged systems for AI agents and external integrations. It acts…
Identity takes center stage as a leading factor in enterprise cyberattacks
A new report shows two-thirds of ransomware attacks began with an identity-related breach. Source link
OpenAI introduces Daybreak cyber platform, takes on Anthropic Mythos
Announcing the initiative on X, Sam Altman, CEO at OpenAI, said, “OpenAI is launching Daybreak, our effort to accelerate cyber defense and continuously secure software.…