Apache fixes critical HTTP/2 double-free flaw CVE-2026-23918 enabling RCE Pierluigi Paganini May 06, 2026 Apache fixed several flaws in HTTP Server, including CVE-2026-23918 (CVSS score…
Palo Alto Networks PAN-OS flaw exploited for remote code execution Pierluigi Paganini May 06, 2026 Palo Alto Networks warns of a critical PAN-OS flaw (CVE-2026-0300)…
Critical Android vulnerability CVE-2026-0073 fixed by Google Pierluigi Paganini May 05, 2026 Google patched a critical Android flaw (CVE‑2026‑0073) that lets attackers run code remotely…
U.S. court sentences Karakurt ransomware negotiator to 8.5 years Pierluigi Paganini May 05, 2026 Deniss Zolotarjovs was sentenced to 8.5 years in the U.S. after…
Vimeo confirms breach via third-party vendor impacts 119K users Pierluigi Paganini May 05, 2026 Hackers stole data of 119,000 Vimeo users in April. The breach,…
Microsoft warns of global campaign stealing auth tokens from 35K users Pierluigi Paganini May 05, 2026 Microsoft revealed a phishing campaign hitting 35,000 users in…
Educational tech firm Instructure data breach may have impacted 9,000 schools Pierluigi Paganini May 05, 2026 Instructure, maker of the Canvas learning platform, is investigating…
Hackers target governments and MSPs via critical cPanel flaw CVE-2026-41940 Pierluigi Paganini May 04, 2026 Attackers exploit a critical cPanel flaw to target government and…
MOVEit automation flaws could enable full system compromise Pierluigi Paganini May 04, 2026 Progress fixes critical MOVEit Automation flaws, including an authentication bypass bug that…
AI speeds flaw discovery, forcing rapid updates, UK NCSC warns Pierluigi Paganini May 04, 2026 The UK cyber agency NCSC warns AI is speeding up…
U.S. CISA adds a flaw in Linux Kernel to its Known Exploited Vulnerabilities catalog Pierluigi Paganini May 04, 2026 The U.S. Cybersecurity and Infrastructure Security…
Bluekit phishing kit enables automated phishing with 40+ templates and AI tools Pierluigi Paganini May 04, 2026 Bluekit is a new phishing kit with AI…
