Fortinet Patch Tuesday – May 2026
Overview Fortinet published 11 advisories on Patch Tuesday describing as many bugs, including two dealing with critical-severity code execution security defects. While the company did not tag these two security…
CVE-2026-42897 — Microsoft Exchange Server OWA XSS Vulnerability
Overview Microsoft has confirmed active exploitation of CVE-2026-42897, a Cross-Site Scripting vulnerability in Microsoft Exchange Server carrying a CVSS score of 8.1.The flaw stems from improper neutralization of input during…
CVE-2026-20182 – Cisco Catalyst SD-WAN Auth Bypass to KEV
Overview CVE-2026-20182 carries a CVSSv3.1 score of 10.0 (Critical) and is classified under CWE-287: Improper Authentication. The flaw affects the Cisco Catalyst SD-WAN Controller (formerly vSmart), which serves as the…
Microsoft MDASH: When the Machine Becomes the Red Team
AI-native vulnerability discovery has crossed from research curiosity into production-grade defense — and the implications for how enterprises think about security engineering are irreversible. The Announcement in Context On May…
Nitrogen Ransomware — Foxconn Breach
On May 11, 2026, the Nitrogen ransomware group claimed to have stolen 8 terabytes of data from Foxconn's Mount Pleasant, Wisconsin facility — over 11 million files including assembly instructions,…
Microsoft Patch Tuesday — May 2026
By the Numbers 137 vulnerabilities patched. 17 rated Critical — 14 RCE, 2 EoP, 1 information disclosure. No zero-days exploited in the wild, no public disclosures ahead of release. Notably,…
