05/23

StubZero: $148,337 RCE in Google Cloud Production · Brutecat

https://brutecat.com/articles/google-cloud-rce/
StubZero: $148,337 RCE in Google Cloud Production · Brutecat

Laravel-Lang PHP Packages Compromised to Deliver Cross-Platform Credential Stealer

https://thehackernews.com/2026/05/laravel-lang-php-packages-compromised.html
Laravel-Lang PHP Packages Compromised to Deliver Cross-Platform Credential Stealer

Claude Mythos AI Finds 10,000 High-Severity Flaws in Widely Used Software

https://thehackernews.com/2026/05/claude-mythos-ai-finds-10000-high.html
Claude Mythos AI Finds 10,000 High-Severity Flaws in Widely Used Software

Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV

https://thehackernews.com/2026/05/drupal-core-sql-injection-bug-actively.html
Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV

Netherlands seizes 800 servers of hosting firm enabling cyberattacks

https://www.bleepingcomputer.com/news/security/netherlands-seizes-800-servers-of-hosting-firm-enabling-cyberattacks/
Netherlands seizes 800 servers of hosting firm enabling cyberattacks

‘Underminr’ Vulnerability Lets Attackers Hide Malicious Connections Behind Trusted Domains - SecurityWeek

https://www.securityweek.com/underminr-vulnerability-lets-attackers-hide-malicious-connections-behind-trusted-domains/
‘Underminr’ Vulnerability Lets Attackers Hide Malicious Connections Behind Trusted Domains - SecurityWeek