Blog

Cybersecurity

187 articles

All articles tagged Cybersecurity.

Drupal Emergency Patch Today: Exploits Expected Within Hours

Drupal has scheduled a critical security update for May 20, warning administrators that threat actors could develop working exploits within hours of disclosure. The vulnerability affects Drupal core versions 8 and later, putting government, education, and healthcare sites at particular risk.

Huma Shazia·20 May 2026

Cybersecurity·4 min

Crypto ATM Scams Cost Americans $388 Million in 2025

The FBI reports a 58% surge in losses from cryptocurrency kiosk scams, with victims over 50 accounting for more than $302 million of the total. Three states have now banned the machines outright.

Manaal Khan·20 May 2026

Cybersecurity·4 min

Microsoft Launches Driver Quality Initiative for Windows 11

Microsoft announced the Driver Quality Initiative at WinHEC 2026, a four-pillar program to address reliability issues caused by faulty drivers. The company is pushing third-party drivers out of kernel mode, tightening partner verification, and cleaning up the Windows Update catalog.

Manaal Khan·19 May 2026

Cybersecurity·4 min

Microsoft Confirms Windows Update Failures in Restricted Networks

Windows systems in air-gapped or firewalled environments are failing to download updates after installing January 2026 preview patches. Microsoft has released Known Issue Rollback policies as a workaround while developing a permanent fix.

Huma Shazia·19 May 2026

Cybersecurity·6 min

5 Steps to Stop Shadow AI Without Blocking Productivity

Employees use an average of three to five AI tools daily, and most were never reviewed by IT. Adaptive Security research shows 80% of workers use unapproved generative AI apps while only 12% of companies have formal governance policies. A structured discovery and approval process can close the gap.

Huma Shazia·19 May 2026

Cybersecurity·4 min

Windows 11 Finally Gets Resizable Taskbar and Start Menu

Microsoft is testing a resizable taskbar and customizable Start menu in Windows 11 Insider Preview Build 26300.8493. Users can now move the taskbar to any screen edge and toggle off recommended content in the Start menu.

Manaal Khan·18 May 2026

Cybersecurity·5 min

Pwn2Own Berlin 2026: 47 Zero-Days Net Hackers $1.3 Million

Security researchers exploited 47 zero-day vulnerabilities across Microsoft, Linux, VMware, and AI products at the three-day Pwn2Own Berlin 2026 contest. DEVCORE took first place with $505,000 in prizes after chaining bugs for remote code execution on Microsoft Exchange. Vendors now have 90 days to patch before public disclosure.

Huma Shazia·18 May 2026

Cybersecurity·4 min

Windows Zero-Day 'MiniPlasma' Gives SYSTEM Access on Patched PCs

A security researcher has released a working exploit for a Windows privilege escalation flaw that Microsoft supposedly fixed in 2020. The 'MiniPlasma' exploit grants SYSTEM-level access on fully updated Windows 11 machines, and it's now publicly available on GitHub.

Huma Shazia·18 May 2026

Cybersecurity·5 min

Microsoft Rejects Azure Vulnerability, Blocks CVE Assignment

A security researcher says Microsoft quietly patched a critical Azure Backup for AKS privilege escalation flaw after rejecting his report. CERT validated the vulnerability, but Microsoft blocked CVE issuance, leaving the researcher without formal recognition.

Manaal Khan·17 May 2026

Cybersecurity·5 min

Russian Hackers Upgrade Kazuar Backdoor Into P2P Botnet

The FSB-linked hacking group Secret Blizzard has transformed its Kazuar malware into a modular peer-to-peer botnet. Microsoft researchers found the new variant uses a three-module architecture designed for stealth and long-term espionage operations against government targets.

Huma Shazia·16 May 2026

Cybersecurity·5 min

Microsoft Exchange Zero-Day Exploited: No Patch, Only Mitigations

Microsoft disclosed CVE-2026-42897, a high-severity Exchange Server vulnerability actively exploited in the wild. The flaw lets attackers execute arbitrary JavaScript through specially crafted emails opened in Outlook Web Access. No patch exists yet, but Microsoft has released mitigations through its Emergency Mitigation Service.

Manaal Khan·15 May 2026

Cybersecurity·4 min

Hackers Demand $25K for Stolen Mistral AI Source Code

The TeamPCP hacker group claims to have stolen 450 internal repositories from Mistral AI after the Mini Shai-Hulud supply-chain attack. The hackers are threatening to leak the 5GB of source code publicly if no buyer is found within a week.

Huma Shazia·15 May 2026

Cybersecurity·4 min

Cisco SD-WAN Zero-Day Exploited: CISA Orders Patch by May 17

Cisco disclosed a critical authentication bypass flaw in its Catalyst SD-WAN Controller that attackers have been exploiting in the wild. The vulnerability allows attackers to gain administrative privileges and manipulate network configurations. CISA has added it to the Known Exploited Vulnerabilities catalog with a three-day patch deadline.

Huma Shazia·15 May 2026

Cybersecurity·5 min

18-Year-Old NGINX Bug Allows DoS and Remote Code Execution

A critical vulnerability hiding in NGINX source code since 2008 has been uncovered by an AI-powered security scanner. The flaw, rated 9.2 severity, affects versions powering a third of top-ranked websites and can lead to denial of service or worse.

Manaal Khan·14 May 2026

Cybersecurity·5 min

KongTuke Hackers Use Microsoft Teams to Breach Networks in 5 Minutes

Initial access broker KongTuke has shifted tactics, now using Microsoft Teams to trick employees into running malicious PowerShell commands. ReliaQuest researchers observed attackers moving from cold outreach to persistent network access in under five minutes.

Manaal Khan·14 May 2026

Cybersecurity·4 min

West Pharma Cyberattack Encrypts Systems, Steals Data

West Pharmaceutical Services, an S&P 500 company with $3 billion in annual revenue, disclosed a cyberattack that encrypted systems and exfiltrated data. The company detected the intrusion on May 4 and took global systems offline. Manufacturing has partially restarted, but full restoration remains incomplete.

Manaal Khan·14 May 2026

Cybersecurity·5 min

Iranian Hackers Spent Week Inside Korean Electronics Firm

The MuddyWater hacking group infiltrated a major South Korean electronics manufacturer for seven days in February 2026, stealing credentials and establishing persistent access. Symantec researchers say the campaign marks a shift toward global targets and sophisticated evasion techniques.

Huma Shazia·14 May 2026

Cybersecurity·5 min

BitLocker Zero-Day Bypass Exposes Encrypted Drives via USB

A security researcher has released working proof-of-concept exploits for two unpatched Windows vulnerabilities. The more severe flaw, YellowKey, bypasses BitLocker encryption through the Windows Recovery Environment, granting full access to protected drives. Multiple independent researchers have confirmed the exploit works.

Manaal Khan·13 May 2026

Cybersecurity·4 min

Microsoft Fixes BitLocker Recovery Bug, But Only for Windows 11

The April 2026 Windows security update triggered unexpected BitLocker recovery prompts on enterprise systems. Microsoft has patched the issue for Windows 11 25H2 users, but Windows 10 and Windows Server admins must wait for a future fix while applying workarounds.

Huma Shazia·13 May 2026

Cybersecurity·4 min

Windows 11 May 2026 Patch Tuesday Fixes 120 Vulnerabilities

Microsoft released KB5089549 and KB5087420 cumulative updates for Windows 11, patching 120 security vulnerabilities and adding Xbox desktop mode. The mandatory updates also bring haptic feedback for compatible devices and expanded archive format support in File Explorer.

Manaal Khan·13 May 2026

Cybersecurity·4 min

Android 17 Blocks Banking Scam Calls Automatically

Google's upcoming Android 17 release introduces automatic termination of spoofed banking calls, expanded malware detection, and stronger theft protection. The features will work with major banks including Revolut, Itaú Unibanco, and Nubank at launch.

Manaal Khan·12 May 2026

Cybersecurity·5 min

Canvas LMS Breach: ShinyHunters Stole 3.6TB from 8,800 Schools

Instructure confirmed that hackers exploited cross-site scripting vulnerabilities in Canvas LMS to steal data from thousands of educational institutions. ShinyHunters followed up by defacing login portals with ransom demands, using the same flaw that enabled the initial breach.

Manaal Khan·11 May 2026

Cybersecurity·5 min

Why Password Resets Don't Stop Active Directory Attacks

Password resets are the first response to a breach, but they don't immediately invalidate old credentials across all authentication paths. Cached password hashes, Kerberos tickets, and hybrid sync delays give attackers windows to maintain access even after credentials change.

Huma Shazia·11 May 2026

Cybersecurity·5 min

Google: Hackers Used AI to Build First Zero-Day Exploit

Google's Threat Intelligence Group has identified what it believes is the first zero-day exploit developed with AI assistance. The attack targeted a popular web administration tool's two-factor authentication. While the attack was stopped before mass exploitation, the case signals a shift in how threat actors approach vulnerability discovery.

Huma Shazia·11 May 2026