05/18

The down fall of bug bounties

https://shubs.io/the-down-fall-of-bug-bounties/
The down fall of bug bounties

'Claw Chain' OpenClaw Flaws Allow Sandbox Escape, Backdoor Delivery - SecurityWeek

https://www.securityweek.com/claw-chain-openclaw-flaws-allow-sandbox-escape-backdoor-delivery/
'Claw Chain' OpenClaw Flaws Allow Sandbox Escape, Backdoor Delivery - SecurityWeek

Grafana Confirms Breach After Hackers Claim They Stole Data - SecurityWeek

https://www.securityweek.com/grafana-confirms-breach-after-hackers-claim-they-stole-data/
Grafana Confirms Breach After Hackers Claim They Stole Data - SecurityWeek

Exploitation of Critical NGINX Vulnerability Begins - SecurityWeek

https://www.securityweek.com/exploitation-of-critical-nginx-vulnerability-begins/
Exploitation of Critical NGINX Vulnerability Begins - SecurityWeek

7-Eleven Data Breach Confirmed After ShinyHunters Ransom Demand - SecurityWeek

https://www.securityweek.com/7-eleven-data-breach-confirmed-after-shinyhunters-ransom-demand/
7-Eleven Data Breach Confirmed After ShinyHunters Ransom Demand - SecurityWeek

Four Malicious npm Packages Deliver Infostealers and Phantom Bot DDoS Malware

https://thehackernews.com/2026/05/four-malicious-npm-packages-deliver.html
Four Malicious npm Packages Deliver Infostealers and Phantom Bot DDoS Malware

Ivanti, Fortinet, SAP, VMware, n8n Patch RCE, SQL Injection, Privilege Escalation Flaws

https://thehackernews.com/2026/05/ivanti-fortinet-sap-vmware-n8n-patch.html
Ivanti, Fortinet, SAP, VMware, n8n Patch RCE, SQL Injection, Privilege Escalation Flaws

Exploit available for new DirtyDecrypt Linux root escalation flaw

https://www.bleepingcomputer.com/news/security/exploit-available-for-new-dirtydecrypt-linux-root-escalation-flaw/
Exploit available for new DirtyDecrypt Linux root escalation flaw

New Windows 'MiniPlasma' zero-day exploit gives SYSTEM access, PoC released

https://www.bleepingcomputer.com/news/microsoft/new-windows-miniplasma-zero-day-exploit-gives-system-access-poc-released/
New Windows 'MiniPlasma' zero-day exploit gives SYSTEM access, PoC released

CISA Admin Leaked AWS GovCloud Keys on Github – Krebs on Security

https://krebsonsecurity.com/2026/05/cisa-admin-leaked-aws-govcloud-keys-on-github/
CISA Admin Leaked AWS GovCloud Keys on Github – Krebs on Security

Hackers earn $1,298,250 for 47 zero-days at Pwn2Own Berlin 2026

https://www.bleepingcomputer.com/news/security/hackers-earn-1-298-250-for-47-zero-days-at-pwn2own-berlin-2026/
Hackers earn $1,298,250 for 47 zero-days at Pwn2Own Berlin 2026

New Windows 'MiniPlasma' Zero-Day Let Attackers Gain SYSTEM Access - PoC Released

https://cybersecuritynews.com/windows-miniplasma-zero-day/
New Windows 'MiniPlasma' Zero-Day Let Attackers Gain SYSTEM Access - PoC Released

Malicious JPEG Images Could Trigger PHP Memory Safety Vulnerabilities

https://cybersecuritynews.com/malicious-jpeg-images-php-memory-safety-vulnerabilities/
Malicious JPEG Images Could Trigger PHP Memory Safety Vulnerabilities

First Shai-Hulud Worm Clones Emerge - SecurityWeek

https://www.securityweek.com/first-shai-hulud-worm-clones-emerge/
First Shai-Hulud Worm Clones Emerge - SecurityWeek