Microsoft has released Windows 10 KB5087544 to address May 2026 Patch Tuesday vulnerabilities and fix a Remote Desktop warning display issue. The update also includes Secure Boot improvements, a daylight saving time change for Egypt, and a note about a BitLocker recovery key prompt affecting some systems. #Windows10 #KB5087544 #RemoteDesktop #SecureBoot #BitLocker
Category: Cyber Security News
Signal has added new in-app confirmations, warning messages, and educational prompts to help users spot phishing and social engineering attempts. The update follows attacks that used bogus “Signal Support” alerts and the Linked Device feature to compromise accounts, including incidents linked to Russian state-sponsored hackers. #Signal #SignalSupport #FBI #RussianHackers
BleepingComputer and Tines will host a live webinar on June 2, 2026, focused on fixing gaps in network incident response by replacing manual alert triage with coordinated workflows. The session will show how automation and AI can help IT teams enrich alerts, prioritize incidents, and move faster from initial alert to resolution. #BleepingComputer #Tines
South Staffordshire Water Plc and South Staffordshire Plc were fined £963,900 after a cyberattack exposed the personal data of 663,887 customers and employees, with the ICO confirming the leaked data was authentic. The breach began with a phishing attack in 2020, went undetected for 20 months, and involved malware that led to privilege escalation and domain administrator access. #SouthStaffordshireWaterPlc #SouthStaffordshirePlc #ICO #Cl0p
Exim has patched CVE-2026-45185, also known as Dead.Letter, a severe use-after-free flaw in BDAT message handling that could lead to heap corruption and potential code execution on affected GnuTLS-based builds. The issue impacts Exim versions 4.97 through 4.99.2 and is fixed in 4.99.3, with users urged to upgrade immediately. #Exim #CVE-2026-45185…
Exaforce has raised $125 million in a Series B round, bringing its total funding to $200 million, to expand its agentic SOC platform for cloud and SaaS security operations. The platform uses autonomous Exabots, a real-time knowledge graph, and a multi-model AI engine to automate detection, triage, investigation, and response. #Exaforce…
Microsoft patched 137 vulnerabilities across its products, including critical flaws in the Microsoft SSO Plugin for Jira & Confluence and high-severity remote code execution bugs in Microsoft Word. Several issues are considered more likely to be exploited, while Adobe also released patches for 52 vulnerabilities across 10 products. #Microsoft #MicrosoftSSOPluginforJiraConfluence #MicrosoftWord…
Google has begun rolling out Intrusion Logging for Android phones, a new forensic feature in Advanced Protection Mode designed to preserve evidence of sophisticated intrusions such as spyware installs and device compromise. Amnesty International called it an important first for helping investigators detect and respond to advanced attacks on Android devices, though the feature is currently limited to Android 16 Pixel devices and requires careful handling of sensitive logs. #Google #AmnestyInternational #Android #Pixel #AdvancedProtectionMode
Android 17 will add stronger anti-theft, scam-call blocking, and threat detection features, including tighter protections for banking apps, improved Live Threat Detection, and biometric “Mark as lost” controls. Google also plans broader privacy and security upgrades such as APK scanning, OTP hiding, post-quantum cryptography, and expanded Advanced Protection across Android versions. #Android17 #Revolut #ItaúUnibanco #Nubank #PlayProtect
Škoda Auto disclosed a data breach after attackers exploited a vulnerability in its online store and accessed customer personal data. The company said payment details were not exposed, but warned affected users to watch for phishing attempts and possible credential reuse attacks. #ŠkodaAuto #VolkswagenGroup
BWH Hotels said hackers accessed a web application containing guest reservation data for more than six months, exposing names, email addresses, phone numbers, and reservation details. The company confirmed that payment and financial information was not stored in the affected system, but warned the stolen data could be used for scams…
White Circle, a Paris-based AI control platform startup founded in 2025, has raised $11 million in seed funding from angel investors. The company says its platform monitors AI inputs and outputs to detect hallucinations, prompt injection, sensitive data leakage, abuse, and model drift, while helping organizations enforce policies and control AI…
Adobe released patches for 52 vulnerabilities across 10 products, including critical flaws in Adobe Connect that could enable arbitrary code execution and privilege escalation. The update also addresses numerous issues in Adobe Commerce, Content Authenticity SDK, After Effects, Premiere Pro, and other products, with Adobe saying there is no evidence of…
Instructure says it reached an agreement with ShinyHunters after the group stole and then returned data from a breach affecting its Canvas LMS, which serves over 30 million users across 8,000 schools and universities. The attack exploited Free-for-Teacher and Canvas XSS flaws to steal information and deface login portals, and Instructure says no customers will be extorted. #Instructure #Canvas #ShinyHunters
SAP’s May 2026 security updates fix 15 vulnerabilities across its product lineup, including critical issues in Commerce Cloud and S/4HANA. The flaws include unauthenticated code execution and SQL injection, while SAP also recently faced a supply-chain compromise involving official npm packages. #SAP #CommerceCloud #S4HANA #CVE-2026-34263 #CVE-2026-34260