Linux Rootkits, Router 0-Day, AI Intrusions, Scam Kits and 25 New Stories
î „Ravie Lakshmananî ‚May 21, 2026Hacking News / Cybersecurity News This week starts small. A token leaks. A bad package slips in….
Microsoft Warns of Two Actively Exploited Defender Vulnerabilities
î „Ravie Lakshmananî ‚May 21, 2026Endpoint Security / Vulnerability Microsoft has disclosed that a privilege escalation and a denial-of-service flaw in Defender…
When Identity is the Attack Path
Consider a cached access key on a single Windows machine. It got there the way most cached credentials do –…
9-Year-Old Linux Kernel Flaw Enables Root Command Execution on Major Distros
î „Ravie Lakshmananî ‚May 21, 2026Linux / Vulnerability Cybersecurity researchers have disclosed details of a vulnerability in the Linux kernel that remained…
Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites to RCE Attacks
î „Ravie Lakshmananî ‚May 21, 2026Web Security / Vulnerability Drupal has released security updates for a “highly critical” security vulnerability in Drupal…
GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension
î „Ravie Lakshmananî ‚May 21, 2026Supply Chain Attack / Developer Tools GitHub on Wednesday officially confirmed that the breach of its internal…
Microsoft Open-Sources RAMPART and Clarity to Secure AI Agents During Development
î „Ravie Lakshmananî ‚May 20, 2026Artificial Intelligence / Security Testing Microsoft has unveiled two new open-source tools called RAMPART and Clarity to…
Microsoft Takes Down Malware-Signing Service Behind Ransomware Attacks
Microsoft on Tuesday said it disrupted a malware-signing-as-a-service (MSaaS) operation that weaponized the company’s Artifact Signing system to deliver malicious…
Agent AI is Coming. Are You Ready?
î „The Hacker Newsî ‚May 20, 2026Identity Security / Enterprise Security New Industry Data Just Released Suggests Not. On May 19th, 2026,…
Webworm Deploys EchoCreep and GraphWorm Backdoors Using Discord and MS Graph API
Cybersecurity researchers have flagged fresh activity from a China-aligned threat actor known as Webworm in 2025, deploying custom backdoors that…