GoKawiil - Tech News

91.

Palo Alto GlobalProtect VPN auth bypass flaw now exploited in attacks (bleepingcomputer.com)

2026-05-30 | get GlobalProtect VPN Security Patch → | tags: palo alto networks, globalprotect, pan-os

92.

Microsoft 0-day feud escalates as researcher threatens another exploit dump (news.ycombinator.com)

2026-05-29 | by Jessica Lyons | get Microsoft Security Update Kit → | tags: microsoft, nightmare eclipse, windows zero-days

93.

CVE-Bench: testing LLM agents on real-world vulnerability patches (news.ycombinator.com)

2026-05-29 | by Giovanni Gatti Pinheiro | get CVE-Database Security Book → | tags: cve, openai, poolside

94.

Hackers exploit FortiClient EMS flaw to push infostealer malware (bleepingcomputer.com)

2026-05-28 | get FortiClient EMS Security Patch → | tags: forticlient, fortinet, cve-2026-35616

95.

Wide-ranging 7-zip vulnerability with 8.8 CVE rating allows for code execution — hundreds of millions of machines potentially at risk (tomshardware.com)

2026-05-28 | by Bruno Ferreira | get 7-Zip File Archiver → | tags: 7-zip, cve-2024-xxxx, 7z binary

96.

AI-Assisted Exploit Development Outpaces Scanner Detection (darkreading.com)

2026-05-27 | get Cybersecurity Exploit Kit → | tags: according new, ai dramatically, attackers

97.

CISA gives feds 4 days to patch actively exploited cPanel plugin flaw (bleepingcomputer.com)

2026-05-27 | get cPanel Security Patch Kit → | tags: cisa, litespeed, cpanel

98.

Apple adds new CVE details to several macOS, iOS, iPadOS, visionOS, and watchOS updates [U] (9to5mac.com)

2026-05-26 | by Marcus Mendes | get Apple Security Update Kit → | tags: macos, ios, visionos

99.

Apple adds new CVE details to several macOS, iOS, iPadOS, visionOS, and watchOS updates (9to5mac.com)

2026-05-26 | by Marcus Mendes | get Apple Security Update Kit → | tags: macos, ios, visionos

100.

Millions of AI agents imperiled by critical vulnerability in open source package (arstechnica.com)

2026-05-26 | get OpenAI GPT-4 Developer Kit → | tags: starlette, fastapi, asgi

101.

KnowledgeDeliver flaw exploited as a zero-day to install web shells (bleepingcomputer.com)

2026-05-26 | get Cybersecurity Web Shell Toolkit → | tags: knowledgedeliver, cve-2026-5426, web shells

102.

BadHost – CVE-2026-48710: Starlette Host-Header Auth Bypass (news.ycombinator.com)

2026-05-26 | by D-Sec | get Starlette Web Framework Book → | tags: starlette, cve-2026-48710, host-header

103.

CISA orders feds to patch actively exploited Drupal vulnerability (bleepingcomputer.com)

2026-05-26 | get Drupal Security Patch Kit → | tags: cisa, drupal, cve-2026-9082

104.

CVE-2026-28952: Apple macOS 26.5 Kernel Vuln found by Claude (news.ycombinator.com)

2026-05-25 | get Apple MacBook Air M2 → | tags: apple, macos, cve-2026-28952

105.

Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign (bleepingcomputer.com)

2026-05-24 | get SQL Injection Testing Tool → | tags: ghost cms, sql injection, cve-2026-26980

106.

Trend Micro warns of Apex One zero-day exploited in the wild (bleepingcomputer.com)

2026-05-22 | get Trend Micro Apex One Security → | tags: trend micro, apex one, cve-2026-34926

107.

Drupal: Critical SQL injection flaw now targeted in attacks (bleepingcomputer.com)

2026-05-22 | get SQL Injection Security Kit → | tags: drupal, sql injection, postgresql

108.

Max severity Cisco Secure Workload flaw gives Site Admin privileges (bleepingcomputer.com)

2026-05-21 | get Cisco Secure Workload Security Book → | tags: cisco secure workload, cve-2026-20223, site admin privileges

109.

Microsoft warns of new Defender zero-days exploited in attacks (bleepingcomputer.com)

2026-05-21 | get Microsoft Defender Security Pack → | tags: microsoft defender, zero-day exploits, cve-2026-41091

110.

Hackers bypass SonicWall VPN MFA due to incomplete patching (bleepingcomputer.com)

2026-05-20 | get SonicWall VPN Security Kit → | tags: sonicwall, cve-2024-12802, gen6

111.

Max-severity flaw in ChromaDB for AI apps allows server hijacking (bleepingcomputer.com)

2026-05-19 | get ChromaDB Security Patch → | tags: chromadb, cve-2026-45829, fastapi

112.

Critical Microsoft Vulnerabilities Doubled: From Exposure to Escalation (bleepingcomputer.com)

2026-05-19 | get Microsoft Security Patch Kit → | tags: microsoft vulnerabilities, beyondtrust, elevation of privilege

113.

New Windows 'MiniPlasma' Zero-Day Exploit Gives SYSTEM Access, PoC Released (slashdot.org)

2026-05-18 | get Windows Security Patch Kit → | tags: windows, miniplasma, cve-2020-17103

114.

Microsoft Exchange Zero-Day Under Attack, No Patch Available (darkreading.com)

2026-05-18 | get Microsoft Exchange Security Book → | tags: microsoft exchange, cve-2026-42897, outlook web access

115.

Exploit available for new DirtyDecrypt Linux root escalation flaw (bleepingcomputer.com)

2026-05-18 | get Linux Exploit Development Book → | tags: dirtydecrypt, linux kernel, rxgk module

116.

Microsoft Exchange Server Vulnerability Actively Exploited, in a Bad Week for Microsoft (slashdot.org)

2026-05-17 | by Posted | get Microsoft Exchange Server Security Kit → | tags: microsoft exchange server, cve-2026-42897, outlook web access

117.

Anyone on the Internet Can Ring Your Doorbell (news.ycombinator.com)

2026-05-17 | get Ring Video Doorbell → | tags: naxclow, smart doorbell, x smart home

118.

Microsoft rejects critical Azure vulnerability report, no CVE issued (bleepingcomputer.com)

2026-05-16 | get Azure Security Monitoring Tool → | tags: azure, microsoft, cve

119.

Avada Builder WordPress plugin flaws allow site credential theft (bleepingcomputer.com)

2026-05-15 | get WordPress Security Plugin → | tags: avada builder, wordpress, cve-2026-4782

120.

Microsoft warns of Exchange zero-day flaw exploited in attacks (bleepingcomputer.com)

2026-05-15 | get Microsoft Exchange Security Patch → | tags: exchange server, microsoft, cve-2026-42897