Anthropic’s Claude Mythos Preview Uncovers 10,000+ 0-Days in Project Glasswing

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 23, 2026 Anthropic has revealed the staggering initial results of Project Glasswing, a collaborative cybersecurity initiative designed to secure critical infrastructure using advanced AI before malicious actors can exploit …

Hackers Abuse Middle East Telecom Networks for Large-Scale Command-and-Control Operations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are using telecom networks and hosting providers across the Middle East as a foundation for massive command-and-control operations, turning trusted infrastructure into a launchpad for cyberattacks. A newly released …

Hackers Use Six-Layer Persistence to Maintain Access on Compromised FreePBX Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 22, 2026 A hacker group known as INJ3CTOR3 has been running an active campaign against FreePBX systems, deploying a newly discovered PHP webshell called JOMANGY that uses six separate …

Ubiquiti Patches Critical UniFi OS Vulnerabilities Allowing Remote Privilege Escalation

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 22, 2026 Ubiquiti Networks has released urgent security updates to address a series of highly critical vulnerabilities affecting its UniFi OS platform. These severe flaws could allow unauthenticated, remote …

LiteSpeed cPanel Plugin 0-Day Exploited in the wild to Gain Server Root Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 22, 2026 LiteSpeed has disclosed and patched a critical 0‑day privilege escalation flaw in its user-end cPanel plugin that is already being actively exploited to gain root access on …

CISA adds Langflow Origin Validation Flaw to Known Exploited Vulnerabilities Catalog

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 22, 2026  The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Langflow vulnerability, tracked as CVE-2025-34291, to its Known Exploited Vulnerabilities (KEV) Catalog, signaling active exploitation …

Lawmakers Demand Answers as CISA Tries to Contain Data Leak

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Lawmakers in both houses of Congress are demanding answers from the U.S. Cybersecurity & Infrastructure Security Agency (CISA) after KrebsOnSecurity reported this week that a CISA contractor intentionally published AWS …

Operation Dragon Whistle Uses Malicious LNK Files to Target Changzhou University

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 22, 2026 A newly uncovered cyber operation has raised concerns among security professionals after a coordinated wave of attacks targeted government institutions in Pakistan. The campaign, now tracked as …