May 19, 2026 The PostgreSQL Global Development Group has released critical security updates for all supported branches, fixing 11 vulnerabilities, including arbitrary code execution and several SQL injection flaws. PostgreSQL …
Two-Thirds of Nonhuman Accounts Are Unseen and Unmanaged, According to Orchid Security’s Identity Gap Report
May 19, 2026 New York, United States, May 19th, 2026, CyberNewswire New research shows identity dark matter continues to expand and erode enterprise identity, resulting in a fragile foundation for …
Attackers Use Cloudflare Storage Endpoint to Exfiltrate Files From Compromised Networks
May 19, 2026 Attackers have found a new way to quietly steal data from compromised networks, and this time, they are hiding behind a familiar face. Security researchers have uncovered …
New VoidStealer Malware Bypasses Chrome’s Protection to Steal User Data
May 19, 2026 A newly discovered malware called VoidStealer has emerged as a serious threat to Chrome users on Windows, using a clever technique to bypass one of the browser’s …
Nx Console VS Code Extension Compromised to Steal Developer and Cloud Secrets
May 19, 2026 A widely used Visual Studio Code extension was quietly turned into a credential-stealing tool in May 2026, putting millions of developers at serious risk without warning. The …
Microsoft to Retire Teams Together Mode to Enhance Performance Improvements
May 19, 2026 Microsoft has announced the retirement of its “Together Mode” feature in Microsoft Teams, marking a strategic shift toward performance optimization and simplified meeting experiences. The change will …
Hackers Compromise @antv Packages in Mini Shai-Hulud npm Attack Wave
May 19, 2026 A sweeping supply chain attack has hit the npm ecosystem, compromising hundreds of widely used JavaScript packages tied to the @antv data visualization library. The attack, which …
CISA Admin Exposes AWS GovCloud Credentials on Public GitHub Repository
May 19, 2026 A major security lapse has exposed highly sensitive U.S. government cloud credentials after a contractor working with the Cybersecurity and Infrastructure Security Agency (CISA) accidentally published them …
Hackers Abuse Microsoft Entra ID Accounts to Exfiltrate Microsoft 365 and Azure Data
May 19, 2026 A compromised version of the widely used Nx Console VS Code extension was published to the Visual Studio Code Marketplace on May 18, 2026, silently targeting developer …
Mythos Preview Builds PoC Exploits in Automated Vulnerability Research
May 19, 2026 Anthropic’s Mythos Preview security-focused AI model is crossing a critical threshold in automated vulnerability research, not just finding bugs, but chaining them together into working proof-of-concept exploits. …