05/14

KongTuke hackers now use Microsoft Teams for corporate breaches

https://www.bleepingcomputer.com/news/security/kongtuke-hackers-now-use-microsoft-teams-for-corporate-breaches/
KongTuke hackers now use Microsoft Teams for corporate breaches

Disclosing new PebbleDash-based tools by Kimsuky | Securelist

https://securelist.com/kimsuky-appleseed-pebbledash-campaigns/119785/
Disclosing new PebbleDash-based tools by Kimsuky | Securelist

NGINX Rift: Achieving NGINX Remote Code Execution via an 18-Year-Old Vulnerability | depthfirst

https://depthfirst.com/research/nginx-rift-achieving-nginx-rce-via-an-18-year-old-vulnerability
NGINX Rift: Achieving NGINX Remote Code Execution via an 18-Year-Old Vulnerability | depthfirst

Researcher Drops YellowKey, GreenPlasma Windows Zero-Days - SecurityWeek

https://www.securityweek.com/researcher-drops-yellowkey-greenplasma-windows-zero-days/
Researcher Drops YellowKey, GreenPlasma Windows Zero-Days - SecurityWeek

Alleged Dream Market kingpin faces US, German charges

https://www.theregister.com/security/2026/05/14/alleged-dream-market-kingpin-faces-us-german-charges/5240315
Alleged Dream Market kingpin faces US, German charges

Thus Spoke…The Gentlemen - Check Point Research

https://research.checkpoint.com/2026/thus-spoke-the-gentlemen/
Thus Spoke…The Gentlemen - Check Point Research

Popular node-ipc npm Package Infected with Credential Steale...

https://socket.dev/blog/node-ipc-package-compromised
Popular node-ipc npm Package Infected with Credential Steale...

F5 Patches Over 50 Vulnerabilities - SecurityWeek

https://www.securityweek.com/f5-patches-over-50-vulnerabilities/
F5 Patches Over 50 Vulnerabilities - SecurityWeek

Dirty Frag gets a sequel as Fragnesia hands Linux attackers root-level access

https://www.theregister.com/security/2026/05/14/dirty-frag-gets-a-sequel-as-fragnesia-hands-linux-attackers-root-level-access/5240270
Dirty Frag gets a sequel as Fragnesia hands Linux attackers root-level access

Critical 18-Year-Old NGINX Vulnerability Enables Remote Code Execution Attacks

https://cybersecuritynews.com/18-year-old-nginx-rce-vulnerability/
Critical 18-Year-Old NGINX Vulnerability Enables Remote Code Execution Attacks

NIST Updates NVD Operations to Address Record CVE Growth | NIST

https://www.nist.gov/news-events/news/2026/04/nist-updates-nvd-operations-address-record-cve-growth
NIST Updates NVD Operations to Address Record CVE Growth | NIST