Nitrogen Ransomware — Foxconn Breach
On May 11, 2026, the Nitrogen ransomware group claimed to have stolen 8 terabytes of data from Foxconn's Mount Pleasant, Wisconsin facility — over 11 million files including assembly instructions,…
Microsoft Patch Tuesday — May 2026
By the Numbers 137 vulnerabilities patched. 17 rated Critical — 14 RCE, 2 EoP, 1 information disclosure. No zero-days exploited in the wild, no public disclosures ahead of release. Notably,…
NIST AI RMF — The Governance Capstone for Enterprise AI
Why This Piece Exists Nine pieces. Nine distinct threat vectors. One series that documented everything an attacker can do to your AI systems — and everything a defender must build…
CISA adds CVE-2026-6973 | Ivanti EPMM Authenticated RCE to KEV Catalog
Overview CISA has added CVE-2026-6973 to the Known Exploited Vulnerabilities catalog, giving federal civilian agencies until May 10, 2026 to remediate the flaw. The vulnerability is an improper input validation…
Google 148 Stable Channel Released with 127 Bug fixes
Overview Google has released Chrome 148 to the stable channel, delivering one of the largest security update batches in the browser's history — patching 127 vulnerabilities across Windows, macOS, and…
CVE-2026-0300 — Critical PAN-OS Buffer Overflow Bug
Overview Palo Alto Networks has confirmed that CVE-2026-0300, a critical PAN-OS vulnerability with a CVSS score of 9.3, is actively exploited in the wild. The flaw is a buffer overflow…
Critical CVE-2026-0073 — Android ADB Wireless Authentication Bypass RCE
Overview CVE-2026-0073 is a critical remote code execution vulnerability residing in the adbd_tls_verify_cert function within auth.cpp — the Android Debug Bridge (ADB) daemon's TLS certificate verification routine. The flaw is…
CISA adds cPanel and Linux Kernel to KEV
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog — a critical authentication bypass in cPanel & WHM…