Daily

Cybersecurity Headlines — May 18, 2026 Security Affairs newsletter Round 577 by Pierluigi Paganini – INTERNATIONAL EDITION — Securityaffairs.com U.S. CISA adds a flaw in Microsoft Exchange Server to its Known Exploited Vulnerabilities catalog — Securityaffairs.com Europe built sovereign clouds to escape US control. Then forgot about the processors — Theregister.com The Next Cybersecurity Challenge May Be Verifying AI Agents — HackRead AI gave North Korean hackers a $600 million month. DeFi is still working out how to respond. — The Next Web CVE-2026-42897: Microsoft confirms active exploitation of Exchange Server zero-day — Securityaffairs.com Was Your Data Exposed in the Massive New Cyberattack? — Geeky Gadgets TanStack Supply Chain Attack Hits Two OpenAI Employee Devices, Forces macOS Updates — Internet AI is having its “Ford T” moment as Zero Day assembly lines appear — TechRadar Microsoft warns of Exchange zero-day flaw exploited in attacks — BleepingComputer From the Trenches As I dive into today’s cybersecurity landscape, two stories stand out to me as particularly noteworthy. First, the U.S. CISA has added a flaw in Microsoft Exchange Server to its Known Exploited Vulnerabilities catalog, which is a stark reminder of the ongoing threat landscape. This zero-day vulnerability has already seen active exploitation, and it’s essential for organizations that use Microsoft Exchange Server to take immediate action and patch their systems. ...

Cybersecurity Headlines — May 17, 2026 Europe built sovereign clouds to escape US control. Then forgot about the processors — Theregister.com The Next Cybersecurity Challenge May Be Verifying AI Agents — HackRead AI gave North Korean hackers a $600 million month. DeFi is still working out how to respond. — The Next Web CVE-2026-42897: Microsoft confirms active exploitation of Exchange Server zero-day — Securityaffairs.com Was Your Data Exposed in the Massive New Cyberattack? — Geeky Gadgets TanStack Supply Chain Attack Hits Two OpenAI Employee Devices, Forces macOS Updates — Internet AI is having its “Ford T” moment as Zero Day assembly lines appear — TechRadar Microsoft warns of Exchange zero-day flaw exploited in attacks — BleepingComputer Finding the blind spot: How Canonical hunts logic flaws with AI — Ubuntu.com 15 maja 2026 — Mrugalski.pl From the Trenches As a cybersecurity practitioner, I’m seeing two trends that are making me sit up and take notice. First, it’s the fact that Europe has built its own sovereign clouds to escape US control, only to forget about the processors behind them. This is a classic case of “out of sight, out of mind” when it comes to cybersecurity. Cloud providers need to ensure that their infrastructure is secure, not just the data stored on it. It’s a sobering reminder that security isn’t just about compliance, but also about the underlying technology. ...

Cybersecurity Headlines — May 16, 2026 CVE-2026-42897: Microsoft confirms active exploitation of Exchange Server zero-day — Securityaffairs.com Was Your Data Exposed in the Massive New Cyberattack? — Geeky Gadgets TanStack Supply Chain Attack Hits Two OpenAI Employee Devices, Forces macOS Updates — Internet AI is having its “Ford T” moment as Zero Day assembly lines appear — TechRadar Microsoft warns of Exchange zero-day flaw exploited in attacks — BleepingComputer Finding the blind spot: How Canonical hunts logic flaws with AI — Ubuntu.com 15 maja 2026 — Mrugalski.pl CISA Adds Cisco SD-WAN CVE-2026-20182 to KEV After Admin Access Exploits — Internet Providence’s Ratliff Says Merging Cybersecurity and Emergency Management Builds Stronger Cyber Resiliency — Healthsystemcio.com Untrained AI agents are easy security targets — they don’t know bad people exist, says KnowBe4 CEO — SiliconANGLE News From the Trenches As a cybersecurity practitioner, I’m seeing two major red flags that require immediate attention from organizations across various industries. The first is the confirmed active exploitation of a zero-day flaw in Microsoft’s Exchange Server (CVE-2026-42897). This means attackers have already found and are exploiting a previously unknown vulnerability in the server software, making it a prime target for malware and lateral movement. ...

Cybersecurity Headlines — May 15, 2026 Kazuar: Anatomy of a nation-state botnet — Microsoft.com Combating the new wave of AI crimes and threats — Techtarget.com Siemens Ruggedcom Rox — Cisa.gov Siemens Ruggedcom Rox — Cisa.gov Siemens Ruggedcom Rox — Cisa.gov How AI Hallucinations Are Creating Real Security Risks — Internet Microsoft unveils MDASH, its AI agent-driven security platform — and it’s already spotted a host of new Windows flaws — TechRadar Trend Micro Reports Earnings Results for Q1 2026 — PRNewswire ICO Publishes Five-Step Plan to Counter Emerging AI-Powered Attacks — Infosecurity Magazine Caveat Canvas: ShinyHunters Hacks the Education Sector — CounterPunch From the Trenches As a cybersecurity practitioner, I’m always on the lookout for threats that can compromise our systems and data. Two stories caught my attention recently - Kazuar: Anatomy of a nation-state botnet and Microsoft unveils MDASH, its AI agent-driven security platform. ...

Cybersecurity Headlines — May 14, 2026 US lawmakers demand answers from Instructure after Canvas data breaches | TechCrunch — TechCrunch Microsoft’s MDASH AI System Finds 16 Windows Flaws Fixed in Patch Tuesday — Internet Spear Phishing Market Size to Reach USD 6.36 Billion by 2035, Fueled by Rising Sophistication of Cyberattacks and Remote Work Adoption | Research by SNS Insider — GlobeNewswire Azerbaijani Energy Firm Hit by Repeated Microsoft Exchange Exploitation — Internet Top Cybersecurity Threats Developers Must Prepare for in 2026 — C-sharpcorner.com Secure AI Development: Best Practices for Enterprise Software Teams — C-sharpcorner.com AI Tools for Developers: Productivity Boost or Security Risk? — C-sharpcorner.com Microsoft’s Latest .NET Updates: Performance, Security, and AI Enhancements — C-sharpcorner.com AI in Cybersecurity: How Intelligent Threat Detection Is Evolving — C-sharpcorner.com Quantum-Safe Security in .NET and Visual Studio: What It Means for Developers — C-sharpcorner.com From the Trenches As a cybersecurity practitioner, I’ve been keeping an eye on the latest developments in the field, and there are two stories that caught my attention today. ...

Cybersecurity Headlines — May 13, 2026 OpenAI’s new cybersecurity push has a lesson for crypto: stop waiting for the hack — CryptoSlate Google Detects First AI-Developed Zero-Day Exploit Used by Threat Actors — Hot Hardware Canvas Developer Indicates That It Paid Hackers to Delete Stolen Data — PCMag.com Canvas Developer Indicates That It Paid Hackers to Delete Stolen Data — PCMag.com Exploited vulnerabilities jump 43% in Q1 as cyber criminals leverage AI for more effective attacks - Beazley Security — PRNewswire Caveat Canvas: ShinyHunters Hacks the Education Sector — Globalresearch.ca Google disrupts hackers using AI to exploit an unknown weakness in a company’s digital defense — Abcnews.com Attackers exploit cPanel CVE-2026-41940 to deploy Filemanager Backdoor — Securityaffairs.com Claude Mythos Finds Only One Curl Vulnerability; Experts Divided on What It Really Means — Securityweek.com Google just blocked a zero-day exploit made with AI — Android Authority From the Trenches As a cybersecurity practitioner, I’ve been following the recent developments in AI-powered attacks, and it’s clear that threat actors are getting more sophisticated by the day. The fact that Google has detected an AI-developed zero-day exploit used by threat actors is a stark reminder of the evolving threat landscape. This exploit highlights the need for companies to stay vigilant and proactive in their security measures. ...

Cybersecurity Headlines — May 12, 2026 The patching treadmill: Why traditional application security is no longer enough — ZDNet Beyond the cleanup job: Redefining application security for the modern enterprise — ZDNet Google disrupts hackers using AI to exploit an unknown weakness in a company’s digital defense — KPRC Click2Houston Vulnerability Summary for the Week of May 4, 2026 — Cisa.gov Google disrupts hackers using AI to exploit an unknown weakness in a company’s digital defense — Abcnews.com ‘It’s here’: Google issues dire warning after catching hackers using AI to break into computers — Fortune Google disrupts hackers using AI to exploit an unknown weakness in a company’s digital defense — seattlepi.com Google disrupts hackers using AI to exploit weakness in defense — Boston Herald Google says criminals used AI to build a working zero-day exploit for the first time — SiliconANGLE News From the Trenches As a cybersecurity practitioner, I’ve seen my fair share of vulnerabilities and exploits. But lately, it seems like the game has changed. The patching treadmill is no longer enough to keep our applications secure - we need to redefine application security for the modern enterprise. ...

Cybersecurity Headlines — May 11, 2026 Security Affairs newsletter Round 576 by Pierluigi Paganini – INTERNATIONAL EDITION — Securityaffairs.com Beware, OpenAI: China Is Building World’s Fastest-Growing AI Cybersecurity Powerhouse — Sputnikglobe.com Instructure Confirms Major Hack Affecting Canvas Users Across Thousands of Schools — Legalinsurrection.com JDownloader site hacked to replace installers with Python RAT malware — BleepingComputer Why a 2017 Linux bug is now a major concern for the crypto industry — Cointelegraph Anthropic’s Mythos found thousands of zero-day vulnerabilities. The Fed chair called the banks. — The Next Web Mythos ‘Discovered’ a CVE in Its Training Data and That’s Still Worrying — Rival.security Chair’s statement of the 48th Asean summit — Red Voltaire Federal Reserve Spring 2026 survey highlights geopolitical risks, AI concerns as top threats to financial stability — Crypto Briefing OpenAI introduces GPT‑5.5‑Cyber for high-impact cybersecurity research — SiliconANGLE News From the Trenches As a cybersecurity practitioner, I’ve been keeping an eye on some concerning developments that warrant attention from the industry. One of the most alarming stories is the hack of Instructure’s Canvas learning management system, which has affected thousands of schools worldwide (Legalinsurrection.com). This highlights the importance of robust security measures in place for critical infrastructure like educational platforms. ...

Cybersecurity Headlines — May 10, 2026 Anthropic’s Mythos found thousands of zero-day vulnerabilities. The Fed chair called the banks. — The Next Web Mythos ‘Discovered’ a CVE in Its Training Data and That’s Still Worrying — Rival.security Federal Reserve Spring 2026 survey highlights geopolitical risks, AI concerns as top threats to financial stability — Crypto Briefing OpenAI introduces GPT‑5.5‑Cyber for high-impact cybersecurity research — SiliconANGLE News Hackers breached five Polish water treatment plants. The attack vector was default passwords. Seventy per cent of American water utilities fail the same test. — The Next Web Unleashing AI across the US government: The data security challenge holding back decision advantage — Nextgov Canvas is back online, but questions — and final exam disruptions — linger — NPR IMF Recommends New Resilience Standards to Counter AI Cyberattacks — pymnts.com Canvas breach disrupts schools nationwide: 6 steps to take now — ZDNet 1 Campaign, 2 Targets: China’s Cyber Operations Hit Asian Governments and Dissidents Abroad — The Diplomat From the Trenches The latest cybersecurity landscape is filled with alarming signs of vulnerability and negligence. Anthropic’s recent discovery of thousands of zero-day vulnerabilities in its Mythos AI model raises serious concerns about the potential for catastrophic breaches. The fact that a single training data CVE has been identified highlights the need for robust testing and validation procedures to ensure AI systems are secure. ...

Cybersecurity Headlines — May 09, 2026 Anthropic’s Mythos set off a cybersecurity ‘hysteria.’ Experts say the threat was already here — CNBC Why the approaching flood of vulnerabilities changes everything — and what to do about it — Tenable.com Is Canvas still hacked - what is a data breach? The shocking Canvas cyberattack timeline — The Times of India Canvas Learning Platform Paralyzed for Hours by Cyberattack as Finals Week Chaos Hits Millions of Students — Ibtimes.com.au Beyond Bank Runs: The OCC Warns Of A More Complex Financial Threat — Forbes Nation-state actors exploit Palo Alto PAN-OS zero-day for weeks — Securityaffairs.com Gen Crosses $5B in FY26 Revenue with Growth Accelerating to Double-Digits — PRNewswire Unplug your way to better code — Talosintelligence.com SentinelOne (S) Launches Wayfinder Frontier AI for Proactive Security — Yahoo Entertainment Claude Mythos changes the AI security threat matrix — Techtarget.com From the Trenches As a cybersecurity practitioner, I’ve been following the recent news cycle closely, and there are two stories that caught my attention. The first one is Anthropic’s Mythos set off a cybersecurity ‘hysteria.’ Experts say the threat was already here (CNBC). This incident highlights how quickly a vulnerability can spread and become a major concern. It’s essential for organizations to take proactive measures to identify and remediate vulnerabilities before they’re exploited by attackers. ...