Recent Advisories

Severity ID Title Vendor Product Date Type
NONE WIRED:BAEB0AC16...

Cybercrime Crew Claims It Hacked Mike Lindell’s MyPillow_WIRED:BAEB0AC168BB85F580DD445421CFD6D8

Plus: A ransomware group is now stealing data in person, BusPatrol wants to hand its license plate surveillance data to the cops, and more.

N/A N/A WIRED
CRITICAL 9.1 THN:5420E058363...

PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation_THN:5420E05836399B582D9F84504D254736

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgkaW0i4ALAlpWQ_cOjfhoqUlNgMlZysJA6ay0qPViGI_KxEEG-Hh0KdtWLqBXDH42ZBGSONs0ZJuzOqdRF7v...

N/A N/A THN
NONE MSSECURE:3C5DF3...

Malicious npm packages abuse dependency confusion to profile developer environments_MSSECURE:3C5DF3D0AA26613EA1FD65DED6D3D94F

In this article 1. Attack chain overview 2. Threat actor attribution 3. Mitigation and protection guidance 4. Indicators of Compromise (IO...

N/A N/A MSSECURE
HIGH 7.8 AVLEONOV:DC2C56...

About Elevation of Privilege – Linux Kernel “Fragnesia” (CVE-2026-46300) vulnerability_AVLEONOV:DC2C567BE0A660C930F16FF6A180612B

![About Elevation of Privilege - Linux Kernel Fragnesia \(CVE-2026-46300\) vulnerability](https://avleonov.com/wp-content/uploads/2026/05/photo_i06...

N/A N/A AVLEONOV
NONE WIRED:E3AFEEA08...

The White House’s Aliens.gov Site Brags That ICE Arrested More Than 700 US Citizens_WIRED:E3AFEEA08ACC038C3CB08703E115A94D

The website, which compares human beings to extraterrestrials, touts arrest numbers from the Trump administration’s sweeping immigration crackdown....

N/A N/A WIRED
NONE SCHNEIER:AB790A...

Friday Squid Blogging: Another Squid_SCHNEIER:AB790AACA9160C4160BA05434A27E6FA

Someone named "Squid" seems to be a "West Country legend." As usual, you can also use this squid post to talk about the security stories in the ne...

N/A N/A SCHNEIER
CRITICAL 9.8 IMPERVABLOG:E4E...

Imperva Customers Protected Against CVE-2026-45247 in Mirasvit Full Page Cache Warmer for Magento_IMPERVABLOG:E4E2C1D23C9CF8EE01C3B384B9B152C9

**_TL;DR:_** _CVE-2026-45247_ _is a critical unauthenticated remote code execution (RCE) vulnerability affecting Mirasvit Full Page Cache Warmer fo...

N/A N/A IMPERVABLOG
NONE THN:6FDBDBEA9B3...

ChatGPhish Vulnerability Turns ChatGPT Web Summaries Into a Phishing Surface_THN:6FDBDBEA9B3BA49A883376D3F70DF272

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEikkk-MbHPjc5UpAORUC9pUfe-LntIu7A2tsg3EBFPXh3b6WXoiv8HtxvSakdqICfwN1YGSY452zIdjuyafsc...

N/A N/A THN
NONE MSSECURE:6BDCB3...

Microsoft is named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection_MSSECURE:6BDCB33EB53AA1C5936582EA9C1ADAEC

As threats become more coordinated and faster to execute, endpoint protection has become the proving ground for modern defense. For the seventh con...

N/A N/A MSSECURE
CRITICAL 9.8 THN:3C404181085...

Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit_THN:3C404181085B3C2B076605769A25DAC5

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi20dgnD8cZh6NCcPM9Xa3fzLgNygU4O6AmBUmN1w6KwsDMJ8_jkpZPk77r8phf3MX-cXOlVxke-ypIuj2xh3...

N/A N/A THN