GoKawiil - Tech News

151.

Hackers bypass SonicWall VPN MFA due to incomplete patching (bleepingcomputer.com)

2026-05-20 | get SonicWall VPN Security Kit → | tags: sonicwall, cve-2024-12802, gen6

152.

Fintech firm Mercury hits $5.2 billion valuation after funding round, up 49% in 14 months (cnbc.com)

2026-05-20 | by Hugh Son | get Mercury Startup Tech Notebook → | tags: mercury, fintech, tcv

153.

Max-severity flaw in ChromaDB for AI apps allows server hijacking (bleepingcomputer.com)

2026-05-19 | get ChromaDB Security Patch → | tags: chromadb, cve-2026-45829, fastapi

154.

Critical Microsoft Vulnerabilities Doubled: From Exposure to Escalation (bleepingcomputer.com)

2026-05-19 | get Microsoft Security Patch Kit → | tags: microsoft vulnerabilities, beyondtrust, elevation of privilege

155.

New Windows 'MiniPlasma' Zero-Day Exploit Gives SYSTEM Access, PoC Released (slashdot.org)

2026-05-18 | get Windows Security Patch Kit → | tags: windows, miniplasma, cve-2020-17103

156.

Microsoft Exchange Zero-Day Under Attack, No Patch Available (darkreading.com)

2026-05-18 | get Microsoft Exchange Security Book → | tags: microsoft exchange, cve-2026-42897, outlook web access

157.

When Fast Fourier Transform Meets Transformer for Image Restoration (2024) (news.ycombinator.com)

2026-05-18 | get Fourier Transform Image Filter → | tags: fast fourier transform, transformer, image restoration

158.

Exploit available for new DirtyDecrypt Linux root escalation flaw (bleepingcomputer.com)

2026-05-18 | get Linux Exploit Development Book → | tags: dirtydecrypt, linux kernel, rxgk module

159.

Microsoft Exchange Server Vulnerability Actively Exploited, in a Bad Week for Microsoft (slashdot.org)

2026-05-17 | by Posted | get Microsoft Exchange Server Security Kit → | tags: microsoft exchange server, cve-2026-42897, outlook web access

160.

Anyone on the Internet Can Ring Your Doorbell (news.ycombinator.com)

2026-05-17 | get Ring Video Doorbell → | tags: naxclow, smart doorbell, x smart home

161.

Microsoft rejects critical Azure vulnerability report, no CVE issued (bleepingcomputer.com)

2026-05-16 | get Azure Security Monitoring Tool → | tags: azure, microsoft, cve

162.

Avada Builder WordPress plugin flaws allow site credential theft (bleepingcomputer.com)

2026-05-15 | get WordPress Security Plugin → | tags: avada builder, wordpress, cve-2026-4782

163.

Microsoft warns of Exchange zero-day flaw exploited in attacks (bleepingcomputer.com)

2026-05-15 | get Microsoft Exchange Security Patch → | tags: exchange server, microsoft, cve-2026-42897

164.

Maximum Severity Cisco SD-WAN Bug Exploited in the Wild (darkreading.com)

2026-05-14 | by Nate Nelson | get Cisco SD-WAN Security Patch → | tags: cisco, sd-wan, cvss

165.

New Nginx Exploit (news.ycombinator.com)

2026-05-14 | get Nginx Security Patch Kit → | tags: nginx, cve-2026-42945, heap buffer overflow

166.

Hackers exploit auth bypass flaw in Burst Statistics WordPress plugin (bleepingcomputer.com)

2026-05-14 | get WordPress Security Plugin → | tags: burst statistics, wordpress plugin, cve-2026-8181

167.

Cisco warns of new critical SD-WAN flaw exploited in zero-day attacks (bleepingcomputer.com)

2026-05-14 | get Cisco SD-WAN Security Kit → | tags: cisco, catalyst sd-wan, cve-2026-20182

168.

18-year-old NGINX vulnerability allows DoS, potential RCE (bleepingcomputer.com)

2026-05-14 | get NGINX Security Patch → | tags: nginx, cve-2026-42945, reverse proxy

169.

New Fragnesia Linux flaw lets attackers gain root privileges (bleepingcomputer.com)

2026-05-14 | get Linux Kernel Security Book → | tags: linux, kernel, fragnasia

170.

It's Patch Tuesday for Microsoft & Not a Zero-Day In Sight (darkreading.com)

2026-05-12 | by Jai Vijayan | get Microsoft Security Update Kit → | tags: attacker, code, cves

171.

CERT is releasing six CVEs for serious security vulnerabilities in dnsmasq (news.ycombinator.com)

2026-05-12 | get Dnsmasq Security Patch Kit → | tags: dnsmasq, cves, cert

172.

Dead.Letter (CVE-2026-45185) – How XBOW found an unauthenticated RCE on Exim (news.ycombinator.com)

2026-05-12 | get Exim Email Server Security Kit → | tags: exim, cve-2026-45185, xbown

173.

Dead.letter (CVE-2026-45185) Humans vs. LLM for Unauthenticated RCE Race on Exim (news.ycombinator.com)

2026-05-12 | get Exim Email Server Security Book → | tags: exim, cve-2026-45185, unauthenticated rce

174.

Fortinet warns of critical RCE flaws in FortiSandbox and FortiAuthenticator (bleepingcomputer.com)

2026-05-12 | get Fortinet FortiSandbox Security Kit → | tags: fortinet, fortisandbox, fortiauthenticator

175.

Incident Report: CVE-2024-YIKES (news.ycombinator.com)

2026-05-10 | by Andrew Nesbitt | get CVE-2024-YIKES Security Patch → | tags: cve-2024-yikes, yubikey, left-justify

176.

Local privilege escalation via execve() (news.ycombinator.com)

2026-05-09 | get Linux Privilege Escalation Toolkit → | tags: privilege escalation, execve, local exploit

177.

Non-determinism is an issue with patching CVEs (news.ycombinator.com)

2026-05-08 | by Flox Team | get Cybersecurity Patch Management Kit → | tags: cve, sqlite, microsoft copilot

178.

Dirty Frag: Universal Linux LPE (news.ycombinator.com)

2026-05-08 | get Linux Privilege Escalation Toolkit → | tags: dirty frag, linux kernel, xfrm-esp

179.

The React2Shell Story (news.ycombinator.com)

2026-05-08 | get React Developer Toolkit → | tags: react, meta, next.js

180.

CISA gives feds four days to patch Ivanti flaw exploited as zero-day (bleepingcomputer.com)

2026-05-08 | get Ivanti Security Patch Kit → | tags: cisa, ivanti, epmm