Critical vm2 sandbox bug lets attackers execute code on hosts
…The security issue is tracked as CVE-2026-26956 and has been confirmed to impact vm2 version 3.10.4, although earlier releases may also be vulnerable. Proof-of-concept (PoC) exploit…
Search
Microsoft to automatically roll back faulty Windows drivers
…Microsoft fixes Windows Autopatch bug installing restricted drivers Microsoft May 2026 Patch Tuesday fixes 120 flaws, no zero-days Windows 11 KB5089549 & KB5087420 cumulative updates released Microsoft releases emergency updates to fix…
SAP fixes critical vulnerabilities in Commerce Cloud and S/4HANA
SAP fixes critical vulnerabilities in Commerce Cloud and S/4HANA By Sergiu Gatlan May 12, 2026 07:04 AM SAP has released the May 2026 security updates addressing 15 vulnerabilities across multiple…
Pharma giant Novo Nordisk discloses breach of clinical trials data
…When BleepingComputer reached out for more details on the attack, a Novo Nordisk spokesperson referred us back to the company's press release. Update June 12, 06:28 EDT: Added Novo Nordisk…
Anthropic’s restricted Claude Mythos model may be coming to Claude Code
…Mythos model managed to uncover 10,000 high- or critical-severity vulnerabilities in its first month alone, which explains why Anthropic has been holding off its public release. Anthorpic currently offers Claude…
Windows 11 KB5094126 & KB5093998 cumulative updates released
Windows 11 KB5094126 & KB5093998 cumulative updates released By Mayank Parmar June 9, 2026 01:32 PM Microsoft has released Windows 11 KB5094126 and KB5093998 cumulative updates for versions 25H2/24H2 and 23H2…
New GhostLock tool abuses Windows API to block file access
New GhostLock tool abuses Windows API to block file access By Lawrence Abrams May 11, 2026 06:02 PM A security researcher has released a proof-of-concept tool named GhostLock that…
Hackers poison arrayref Rust crate to push infostealer malware
…A report from application security company StepSecurity notes that the malicious Rust crate releases were arrayref 0.3.10, append-only-vec 0.1.9, and internment 0.8.7, all maintained…
Exploit available for new DirtyDecrypt Linux root escalation flaw
…This limits the attack surface to Linux distributions that closely follow the latest upstream kernel releases, including Fedora, Arch Linux, and openSUSE Tumbleweed. However, V12's proof-of-concept exploit has only…
Google says Chrome cuts 7 billion unwanted Android notifications a day to fight abuse
…In addition to giving you greater control, Google is analyzing behavior across networks of related websites, including coordinated service-worker activity, to identify groups distributing malicious or deceptive notifications. "This enables us…