Cisco Catalyst SD-WAN Controller Auth Bypass Actively Exploited to Gain Admin Access
î „Ravie Lakshmananî ‚May 14, 2026Vulnerability / Network Security Cisco has released updates to address a maximum-severity authentication bypass flaw in Catalyst…
PAN-OS RCE, Mythos cURL Bug, AI Tokenizer Attacks, and 10+ Stories
î „Ravie Lakshmananî ‚May 14, 2026Hacking News / Cybersecurity News Everything is still on fire. This week feels dumb in the worst…
Ghostwriter Targets Ukrainian Government With Geofenced PDF Phishing, Cobalt Strike
The Belarus-aligned threat group known as Ghostwriter has been attributed to a fresh set of attacks targeting governmental organizations in…
How AI Hallucinations Are Creating Real Security Risks
AI hallucinations are introducing serious security risks into critical infrastructure decision-making by exploiting human trust through highly confident yet incorrect…
PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosure
î „Ravie Lakshmananî ‚May 14, 2026Vulnerability / API Security Threat actors have been observed attempting to exploit a recently disclosed security vulnerability…
Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation
An anonymous cybersecurity researcher who disclosed three Microsoft Defender vulnerabilities has returned with two more zero-days involving a BitLocker bypass…
18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE
î „Ravie Lakshmananî ‚May 14, 2026Vulnerability / Web Server Cybersecurity researchers have disclosed multiple security vulnerabilities impacting NGINX Plus and NGINX Open,…
New Fragnesia Linux Kernel LPE Grants Root Access via Page Cache Corruption
î „Ravie Lakshmananî ‚May 14, 2026Vulnerability / Linux Details have emerged about a new variant of the recent Dirty Frag Linux local…
Ollama Out-of-Bounds Read Vulnerability Allows Remote Process Memory Leak
Cybersecurity researchers have disclosed a critical security vulnerability in Ollama that, if successfully exploited, could allow a remote, unauthenticated attacker…
Fake OpenAI Privacy Filter Repo Hits #1 on Hugging Face, Draws 244K Downloads
î „Ravie Lakshmananî ‚May 11, 2026Supply Chain Attack / Threat Intelligence A malicious Hugging Face repository managed to take a spot in…