StubZero: $148,337 RCE in Google Cloud Production · Brutecat
https://brutecat.com/articles/google-cloud-rce/
Cisco Patches CVSS 10.0 Secure Workload REST API Flaw Enabling Data Access
https://thehackernews.com/2026/05/cisco-patches-cvss-100-secure-workload.html
Megalodon GitHub Attack Targets 5,561 Repos with Malicious CI/CD Workflows
https://thehackernews.com/2026/05/megalodon-github-attack-targets-5561.html
[CYBER FEST|2026] Pavel Yosifovich, Hidden Windows: The Undocumented Native API - YouTube
https://youtu.be/rATWqBwMyik![[CYBER FEST|2026] Pavel Yosifovich, Hidden Windows: The Undocumented Native API - YouTube](/image/screenshot/1b938712fd81838a4b3a1cc19f9dde9b.webp)
Cross-Platform NPM Stealer - SANS Internet Storm Center
https://isc.sans.edu/diary/33006
Ubiquiti patches three max severity UniFi OS vulnerabilities
https://www.bleepingcomputer.com/news/security/ubiquiti-patches-three-max-severity-unifi-os-vulnerabilities/
Drupal: Critical SQL injection flaw now targeted in attacks
https://www.bleepingcomputer.com/news/security/drupal-critical-sql-injection-flaw-now-targeted-in-attacks/
CISA Adds Exploited Langflow and Trend Micro Apex One Vulnerabilities to KEV
https://thehackernews.com/2026/05/cisa-adds-exploited-langflow-and-trend.html
PRODUCT.NAME - Request Brokerage Service
http://product.name
'First VPN' Cybercrime Service Disrupted, Administrator Arrested - SecurityWeek
https://www.securityweek.com/first-vpn-cybercrime-service-disrupted-administrator-arrested/
Striga: Lifting x86 to LLVM IR with Python | secret club
https://secret.club/2026/05/21/striga.html
Grafana Says Codebase and Other Data Stolen via TanStack Supply Chain Attack - SecurityWeek
https://www.securityweek.com/grafana-says-codebase-and-other-data-stolen-via-tanstack-supply-chain-attack/
TrendAI Patches Apex One Zero-Day Exploited in the Wild - SecurityWeek
https://www.securityweek.com/trendai-patches-apex-one-zero-day-exploited-in-the-wild/
Russian researcher claims state-backed MAX app secretly records users and monitors VPNs | TechRadar
https://www.techradar.com/vpn/vpn-privacy-security/russian-researcher-claims-state-backed-max-app-secretly-records-users-and-monitors-vpns
Canadian Man Arrested for Operating Kimwolf Botnet - SecurityWeek
https://www.securityweek.com/canadian-man-arrested-for-operating-kimwolf-botnet/