CISA Warns of Supply Chain Attacks Targeting GitHub and Developer Tools
Multiple campaigns compromised CI/CD pipelines through malicious VS Code extensions and GitHub Actions workflows.
Month: May 2026
Microsoft Criticises Public Zero-Day Disclosures After GitHub Account Removal
Software giant reinforces coordinated disclosure policy following researcher's public vulnerability releases.
CISA Adds Daemon Tools Lite Vulnerability to KEV Catalog
Federal agency gives agencies three days to patch or remove software with embedded malicious code…
JINX-0164 Threat Actor Targets Cryptocurrency Firms with macOS Malware
Previously unknown threat group uses fake recruiting lures and custom malware to target digital asset…
CISA adds three actively exploited vulnerabilities to KEV catalog
Federal agencies must patch Daemon Tools Lite, TanStack, and Nx Console flaws by assigned deadlines…
CISA warns of DoS vulnerability in ABB automation systems
Critical infrastructure operators urged to patch ABB B&R Automation Runtime after disclosure of unauthenticated network…
Cisco Patches Maximum Severity Flaw in Secure Workload REST API
CVE-2026-20223 allows unauthenticated attackers to access sensitive data through insufficient API validation.
Microsoft Copilot Cowork Vulnerability Enables Data Exfiltration via Email
Security flaw allows attackers to steal OneDrive files through prompt injection and automated email messages…
CISA Adds LiteSpeed Plugin Vulnerability to Exploited List
CVE-2026-48172 privilege escalation flaw in LiteSpeed cPanel plugin now under active exploitation
Microsoft Mitigates YellowKey BitLocker Bypass Vulnerability CVE-2026-45585
The company has released a mitigation for the publicly disclosed zero-day flaw that allows attackers…