What's happening in security

Breaches, credential dumps, actively exploited bugs and AI incidents — pulled from 2,948 items across public feeds, Have I Been Pwned and CISA KEV.

• Microsoft’s stance on zero day exploits is a dumpster fire of their own making

  Recently, somebody going by the name of Nightmare Eclipse has been having an online beef with Microsoft around security vulnerabilities they claim they had been trying to report. Their posts read like those of a former Microsoft e…

  Vulnerabilities DoublePulsar @GossiTheDog 28 May 2026

• CVE-2026-48027: Nx Nx Console — Nx Console Embedded Malicious Code Vulnerability

  Nx Console contains an embedded malicious code vulnerability that allowed a malicious version of Nx Console to be published. The compromised extension fetched an obfuscated payload that could harvested credentials from multiple so…

  Vulnerabilities CISA Known Exploited Vulns 27 May 2026 ▲ 53

• CVE-2026-45321: TanStack TanStack — TanStack Unspecified Vulnerability

  TanStack contains an unspecified vulnerability that allowed malicious versions of the product to be published to the npm registry to publish credential-stealing malware under a trusted identity.

  Vulnerabilities CISA Known Exploited Vulns 27 May 2026 ▲ 53

• CVE-2026-8398: Daemon Daemon Tools Lite — Daemon Tools Lite Embedded Malicious Code Vulnerability

  Daemon Tools contains an unspecified vulnerability that has a high impact on confidentiality, integrity, and availability.

  Vulnerabilities CISA Known Exploited Vulns 27 May 2026

• CVE-2026-48172: LiteSpeed cPanel Plugin — LiteSpeed cPanel Plugin Privilege Escalation Vulnerability

  LiteSpeed cPanel Plugin contains privilege escalation vulnerability that is exposed via the user-end cPanel plugin, which can be abused by any cPanel user account to execute arbitrary scripts with root privileges.

  Vulnerabilities CISA Known Exploited Vulns 26 May 2026

• Weekly Cyber Update: 22 May 2026

  Shai-Hulud comes for GitHub; Microsoft disrupts a major malware-signing-as-a-service group; Exchange users are urged to mitigate a new zero-day; and the UK’s financial authorities urge action on frontier AI threats. The Cyber Thre…

  Vulnerabilities Assured Intelligence @eleanordallaway 22 May 2026

• CVE-2026-9082: Drupal Core — Drupal Core SQL Injection Vulnerability

  Drupal Core contains a SQL injection vulnerability that could allow for privilege escalation and remote code execution via specially crafted requests sent with the database abstraction API.

  Vulnerabilities CISA Known Exploited Vulns 22 May 2026

• CVE-2025-34291: Langflow Langflow — Langflow Origin Validation Error Vulnerability

  Langflow contains an origin validation error vulnerability in which an overly permissive CORS configuration combined with a refresh token cookie configured as SameSite=None allows a malicious webpage to perform cross-origin reques…

  Vulnerabilities CISA Known Exploited Vulns 21 May 2026

• CVE-2026-34926: Trend Micro Apex One — Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability

  Trend Micro Apex One (on-premise) contains a directory traversal vulnerability that could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents on affected instal…

  Vulnerabilities CISA Known Exploited Vulns 21 May 2026

Last fetch 11m ago · 0 new · 2 source error(s)