May 12, 2026 Microsoft’s May 2026 Patch Tuesday lands with a heavy enterprise focus, fixing 120 vulnerabilities across Windows, Office, Azure, developer tools, and Microsoft 365 apps, including 29 remote …
Fortinet Patches Five Vulnerabilities Across FortiAP, FortiOS, and Enterprise Products
May 12, 2026 Fortinet released security advisories on May 12, 2026, addressing five vulnerabilities spanning its wireless access point controllers, network operating system, and enterprise management platforms, including a critical …
Critical Fortinet FortiSandbox Vulnerability Enables Code Execution Attacks
May 12, 2026 A critical security flaw in Fortinet’s FortiSandbox platform is putting enterprise networks at serious risk, allowing unauthenticated attackers to execute arbitrary code or commands remotely, with no …
Threat Actors Leverage Vercel’s AI Tools to Mass‑Produce Realistic Phishing Sites
May 12, 2026 A new and growing wave of phishing attacks is making credential theft easier than ever before. Threat actors are now using Vercel, a legitimate AI-powered web development …
Zoom Rooms and Workplace Vulnerabilities Allow Attackers to Escalate Privileges
May 12, 2026 A series of newly discovered vulnerabilities in Zoom’s software ecosystem could hand local attackers the keys to your system. As organizations continue to rely heavily on virtual …
North Korean Hackers Weaponize Git Hooks to Deploy Cross-Platform Malware
May 12, 2026 North Korean hackers have found a new way to hide malware inside the tools that software developers rely on every single day. Instead of sending phishing emails …
Malicious Chrome MV3 Extension Impersonates TronLink to Steal Crypto Wallet Credentials
May 12, 2026 A fake Chrome browser extension pretending to be the popular TronLink crypto wallet has been caught stealing sensitive wallet credentials from unsuspecting users. The malicious extension operates …
MistralAI PyPI Package Compromised to Inject Malicious Code – Microsoft Warns
May 12, 2026 A popular AI development library has been turned into a weapon. The mistralai PyPI package, version 2.4.6, was found to contain malicious code secretly injected by attackers, …
Claude’s Chrome Extension Vulnerability Allows Malicious Extensions to Steal Gmail and Drive Data
May 12, 2026 Researchers have exposed a catastrophic vulnerability hiding inside the “Claude in Chrome” extension. By weaponizing an otherwise harmless, zero-permission extension, invisible attackers can completely hijack the trusted …
Critical PHP SOAP Extension Vulnerabilities Enables Remote Code Execution Attacks
May 12, 2026 A serious cluster of vulnerabilities has been uncovered in PHP’s core string processing and ext-soap components, putting numerous web servers at immediate risk of total takeover. While …