Hackers use AI to develop first known zero-day 2FA bypass for large-scale exploitation
Google said on Monday that it had identified an unknown attacker using a zero-day exploit that was likely developed on an artificial intelligence (AI) system, marking the first time the technology has actually been used in a malicious context for vulnerability discovery and exploit generation. The activity is said to be the work of cybercriminal […]
Linux Rootkit, macOS Crypto Stealer, WebSocket Skimmers and More
Ravie LakshmananMay 11, 2026Cybersecurity / Hacking Rough Monday. Somebody poisoned a trusted download again, somebody else turned cloud servers into public housing, and a few crews are still getting into boxes with bugs that should’ve died years ago — the same old holes, same lazy access paths, same “how the hell is this still open” […]
Your purple team is not purple – just red and blue in the same room
The network defense at 2:00 a.m. looks like this: The analyst copies the hash from the PDF and pastes it into the SIEM query. The red team’s script has been manually rewritten for use by the blue team. The patch is awaiting a change approval period that is longer than the exploitation period itself. There […]
Fake OpenAI privacy filter repository hits #1 spot with ‘hug face’, attracts 244,000 downloads
Ravi LakshmananMay 11, 2026Supply chain attack/threat intelligence The malicious Hugging Face repository made its way onto the platform’s trending list by impersonating OpenAI’s privacy filter’s openweight model and delivering a Rust-based information stealer to Windows users. The project, named Open-OSS/privacy-filter, pretended to be the legitimate version released by OpenAI late last month (openai/privacy-filter) and copied […]
How to Test a Salesforce Experience Site Like an Apex Predator
As the foremost CRM solution, Salesforce is often considered the preeminent SaaS platform. It is used by companies from small start-ups to major corporations. And many of those companies use Salesforce Experience Cloud to run native sites – that run on their Salesforce and are deeply integrated with it. Those web apps are powerful and […]
OAuth and MCP investigation checklist
OAuth permissions are the silent back door of modern SaaS, and with the rise of remote MCP servers, that back door is only getting wider. Every time an employee clicks “Sign in with Google” or connects an AI agent to a new MCP server, another vendor obtains the key to the data, often without IT […]
Ollama out-of-bounds read vulnerability causes remote process memory leak
Cybersecurity researchers have revealed that Ollama has significant security vulnerabilities. Successful exploitation of this vulnerability could allow a remote, unauthenticated attacker to leak entire process memory. This out-of-bounds read flaw can impact over 300,000 servers worldwide and is tracked as CVE-2026-7482 (CVSS score: 9.1). Codenamed Bleeding Llama by Cyera. Ollama is a popular open source […]
cPanel WHM Releases Fixes for 3 New Vulnerabilities – Patch Now
Ravi LakshmananMay 9, 2026Vulnerabilities / Web Hosting cPanel has released updates that address three vulnerabilities in cPanel and Web Host Manager (WHM). These vulnerabilities can be exploited to achieve privilege escalation, code execution, and denial of service. Here is the list of vulnerabilities: CVE-2026-29201 (CVSS score: 4.3) – Insufficient input validation of the feature file […]
TCLBANKER banking Trojan targets financial platforms via WhatsApp and Outlook worms
Threat hunters flagged a previously undocumented Brazilian banking Trojan called TCLBANKER. This Trojan can target 59 banking, fintech, and cryptocurrency platforms. This activity is tracked by Elastic Security Labs under the name REF3076. This malware family is rated as a major update to Maverick and is known to utilize a worm called SORVEPOTEL to spread […]
Fake call history app steals payments from users after 7.3 million downloads on Play Store
Ravi LakshmananMay 8, 2026Android/mobile security Cybersecurity researchers have discovered a fraudulent app on the official Google Play Store for Android that pretends to provide access to the call history of any phone number, only to trick users into providing fake data and signing up for a subscription that incurs financial loss. The 28 apps had […]