Thought Leadership
Patch incoming
A critical vulnerability in PAN-OS is already being actively exploited. Palo Alto Networks is working on patches, with the first round expected on May 13.
Critical WordPress plugin bug
A critical vulnerability in the WordPress plugin Breeze Cache allows attackers to take over entire websites. More than 400,000 installations are affected.
Classified as a zero-day vulnerability
More than 1,300 publicly accessible Microsoft SharePoint servers remain vulnerable to a critical spoofing security flaw that is already being actively exploited by threat actors.
Tax returns and ID cards
A misconfigured Cloudinary instance is leaking private user documents from the freelance platform, which are being indexed by Google. The researcher who discovered the issue has been waiting for a response from the company for over 40 days.
Risk rising fast
The rapid proliferation of artificial intelligence is delivering not just efficiency gains but also a fast-growing set of security challenges. A recent analysis by TrendAI reveals that vulnerabilities in the AI ecosystem are expanding significantly faster than in the broader software landscape, and many organizations are struggling to keep
Fewer false positives promised
Developed under the codename “Aardvark,” Codex Security aims to replace traditional SAST tools and already earned 14 CVE assignments during its beta.
Max Verstappen and others
A security flaw in the FIA’s IT systems allowed three security researchers to access confidential information, including personal data belonging to Max Verstappen and other Formula 1 drivers.
All windows versions affected
US cybersecurity agency CISA warns of active exploitation of a vulnerability in the Windows SMB protocol. Attackers can use it to gain SYSTEM-level privileges.
Warning signal for the entire industry
The security researchers at Check Point have discovered a zero-click vulnerability in Microsoft 365 Copilot, which they have named “EchoLink”.
CVE-2025-8088
Attackers exploited a directory traversal vulnerability in WinRAR to spread malware via manipulated archives. The vulnerability CVE-2025-8088 has been patched since version 7.13.
Most Read Articles
7. May 2026
4. May 2026
