#news


Agent AI is Coming. Are You Ready?

May 20, 2026 // 15:00

On May 19th, 2026, Orchid Security released the results of our Identity Gap: Snapshot 2026. Among the findings, “identity dark matter” (the unseen, unmanaged elements […]

GitHub investigates internal repositories breach claimed by TeamPCP

May 20, 2026 // 13:57

Update May 20, 04:17 EDT: GitHub has now confirmed the breach of ~3,800 internal repositories after an employee installed a malicious VS Code extension. GitHub is investigating […]

Microsoft shares mitigation for YellowKey Windows zero-day

May 20, 2026 // 13:57

Microsoft has shared mitigations for YellowKey, a recently disclosed Windows BitLocker zero-day vulnerability that grants access to protected drives. The security flaw was disclosed last […]

GitHub confirms breach of 3,800 repos via malicious VSCode extension

May 20, 2026 // 13:57

GitHub has confirmed that roughly 3,800 internal repositories were breached after one of its employees installed a malicious VS Code extension. The company has since […]

Exploit released for new PinTheft Arch Linux root escalation flaw

May 20, 2026 // 13:56

A recently patched Linux privilege escalation vulnerability now has a publicly available proof-of-concept (PoC) exploit that allows local attackers to gain root privileges on Arch […]

GitHub Breached — Employee Device Hack Led to Exfiltration of 3,800+ Internal Repos

May 20, 2026 // 13:41

GitHub on Tuesday said it’s investigating unauthorized access to its internal repositories after the notorious threat actor known as TeamPCP listed the platform’s source code […]

Grafana GitHub Breach Exposes Source Code via TanStack npm Attack

May 20, 2026 // 13:41

Grafana Labs, on May 19, 2026, said an investigation into its recent breach found no evidence of customer production systems or operations being compromised. It […]

Microsoft Releases Mitigation for YellowKey BitLocker Bypass CVE-2026-45585 Exploit

May 20, 2026 // 13:41

Microsoft on Tuesday released a mitigation for a BitLocker bypass vulnerability named YellowKey following its public disclosure last week. The zero-day flaw, now tracked as […]

Typosquatting Is No Longer a User Problem. It’s a Supply Chain Problem

May 20, 2026 // 13:41

Typosquatting is no longer a user problem. Attackers now embed lookalike domains inside legitimate third-party scripts. No mistyped URL required, no server breach needed. AI […]

Max-severity flaw in ChromaDB for AI apps allows server hijacking

May 20, 2026 // 01:36

A max-severity vulnerability in the latest Python FastAPI version of the ChromaDB project allows unauthenticated attackers to run arbitrary code on exposed servers. The flaw […]

Previous 1 … 295 296 297 298 299 … 388 Next