Emma Davis

News · May 6, 2026

vm2 CVE-2026-26956: Node.js sandbox escape enables host code execution

A critical sandbox-escape flaw in vm2 3.10.4 can let untrusted Node.js code reach the host environment. Upgrade to vm2 3.10.5 or later.

News · May 6, 2026

MuddyWater used Microsoft Teams screen sharing in a Chaos ransomware ‘false flag,’ Rapid7 says

Security researchers say the Iranian-linked group MuddyWater used Microsoft Teams chats and interactive screen sharing to trick employees into handing over credentials — then...

News · May 6, 2026

Palo Alto PAN-OS CVE-2026-0300 RCE Is Being Exploited

Palo Alto Networks says CVE-2026-0300 is under limited exploitation against exposed User-ID Authentication Portals. Disable or restrict the portal while patches roll out.

News · May 6, 2026

Microsoft Warns of AiTM Phishing Campaign Targeting 35,000 Users

Microsoft says a code of conduct-themed AiTM phishing campaign targeted more than 35,000 users across 13,000 organizations and could bypass non-phishing-resistant MFA by stealing...

News · May 5, 2026

Instructure Canvas Breach: Data Exposure, Login Defacement, and What Users Should Do

Instructure says Canvas is back online after a security incident involving names, emails, student IDs, and messages. Here is what is confirmed and what...

News · May 5, 2026

Apache HTTP Server 2.4.67 Fixes CVE-2026-23918 HTTP/2 RCE Risk

Apache HTTP Server 2.4.67 fixes CVE-2026-23918, an HTTP/2 double-free in 2.4.66 that can crash workers and may allow RCE in specific conditions.

News · May 5, 2026

DAEMON Tools Installers Carried a Backdoor Since April 8

Official DAEMON Tools installers reportedly carried a backdoor from April 8, 2026. Users who installed it recently should remove it, scan Windows, and wait...

News · May 5, 2026

Grok Wallet Drained After Bankr Prompt Injection Moves 3B DRB

A reported Bankr/Grok prompt-injection incident moved 3B DRB tokens from a labeled Grok wallet on Base after a gifted NFT and a crafted Morse-code...

News · May 5, 2026

Weaver E-cology CVE-2026-22679 RCE Is Being Exploited

CVE-2026-22679 is an unauthenticated RCE in Weaver E-cology 10.0 builds before 20260312. Patch exposed systems and check for post-exploitation activity.

News · May 1, 2026

30,000 Facebook Accounts Hacked in Google AppSheet Phishing Campaign

A Google AppSheet phishing wave dubbed AccountDumpling hijacked roughly 30,000 Facebook accounts, many tied to business pages and ad access.

News · May 1, 2026

Poisoned Ruby Gems and Go Modules Used to Steal CI Secrets

A BufferZoneCorp package cluster in RubyGems and Go targeted developer machines and CI pipelines, stealing secrets, tampering with GitHub Actions, and planting SSH persistence.

News · May 1, 2026

Gemini CLI CVSS 10 Flaw Could Put CI/CD Workflows at Risk

Google and security researchers disclosed a CVSS 10.0 flaw in Gemini CLI this week, with public details landing on April 28, 2026 and wider...