Cybersecurity

Google Documents First Observed AI-Developed Zero-Day Exploit Tied to a Planned Mass-Exploitation Campaign

Google's Threat Intelligence Group has described what it believes is the first case of an AI-developed zero-day exploit attached to a mass-exploitation plan — a milestone defenders have been bracing for.

18 May 2026 · 8 min read

Cybersecurity

Cisco Patches Sixth SD-WAN Zero-Day of 2026 — UAT-8616 Attribution from Talos

Cisco shipped an emergency advisory for CVE-2026-20182 on 15 May 2026, a peering authentication bypass in Catalyst SD-WAN Controller and Manager. It is the sixth SD-WAN zero-day Cisco has patched this year and the second tied by Talos to threat actor UAT-8616.

18 May 2026 · 3 min read

Cybersecurity

CISA Orders Federal Agencies to Patch Linux Kernel "Copy Fail" Zero-Day Within Two Weeks

A 732-byte Python script is all an unprivileged local user needs to take root on Ubuntu 24.04, RHEL 10.1, SUSE 16 and nearly every other major Linux distribution shipped in the last seven years. CISA gave federal agencies a May 15 deadline.

18 May 2026 · 3 min read

Cybersecurity

EchoLeak: Zero-Click Prompt Injection in Microsoft 365 Copilot Quietly Exfiltrates Enterprise Data

EchoLeak shows a malicious email can trigger Microsoft 365 Copilot into exfiltrating enterprise data without a single user click. The bug type is now OWASP's top AI risk for 2026.

17 May 2026 · 8 min read

Cybersecurity

Hackers Reach Anthropic's Restricted Mythos Model Through a Vendor Environment as FSB Calls Briefing

A small group of unauthorised users reached Mythos via a third-party vendor environment on the same day Anthropic announced the model. The Financial Stability Board has now asked Anthropic to brief regulators on the findings.

17 May 2026 · 9 min read

Cybersecurity

Anthropic's Project Glasswing Lines Up AWS, Apple, Google, Microsoft, JPMorgan to Test Mythos for Cyber Defence

Project Glasswing pairs Anthropic's restricted Mythos model with a roster of hyperscalers, banks and the Linux Foundation. $100 million in model credits plus $4 million in open-source security donations underwrite the programme.

16 May 2026 · 8 min read

Cybersecurity

Exchange Server Zero-Day CVE-2026-42897 — Crafted-Email XSS Spoofs OWA Without User Click

Microsoft disclosed CVE-2026-42897 on 14 May 2026 — an XSS spoofing flaw in Exchange OWA exploited via crafted email. CVSS 8.1, no patch at disclosure. Mitigations and detection guidance.

14 May 2026 · 13 min read

Cybersecurity

Instructure Pays Ransom to ShinyHunters After Canvas Breach Exposes 275 Million Records Across 8,809 Schools

After ShinyHunters stole 3.65TB of data from 8,809 schools using the Canvas LMS, Instructure quietly paid the ransom. What this means for the education sector and the wider ransomware economy.

12 May 2026 · 12 min read

Cybersecurity

ShinyHunters Breach Instructure Canvas: 275 Million Students' Data Stolen in One of Education's Largest Ever Cyberattacks

Hacking group ShinyHunters claims to have stolen data on 275 million people from Canvas LMS operator Instructure, exposing names, emails, student IDs and private messages across 9,000 schools worldwide.

8 May 2026 · 9 min read

Cybersecurity

Critical Palo Alto Firewall Zero-Day Actively Exploited by State-Sponsored Hackers — CISA Orders Patch by 9 May

CVE-2026-0300, a critical PAN-OS buffer overflow enabling unauthenticated root-level RCE, is being actively exploited by state-sponsored actors. CISA has ordered federal agencies to patch by 9 May 2026. Singapore organisations should act immediately.

8 May 2026 · 8 min read