Malicious JPEG Images Could Trigger PHP Memory Safety Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 16, 2026 Two critical memory-safety vulnerabilities in PHP’s image-processing functions could allow attackers to leak sensitive heap memory or to execute denial-of-service attacks via specially crafted JPEG files. The …

Linux Kernel Vulnerability “ssh-keysign-pwn” Lets Attackers Read SSH Keys and Shadow Passwords

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly disclosed Linux kernel vulnerability is raising serious concerns across the security community, as it allows attackers to access highly sensitive data, including SSH private keys and password hashes, …

Google Project Zero Discloses Zero-Click Exploit Chain for Pixel 10 Devices

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 16, 2026 A newly disclosed zero-click exploit chain targeting Google Pixel 10 devices has raised fresh concerns about Android’s low-level security. Google Project Zero researchers demonstrated how attackers could …

OpenClaw Chain Vulnerabilities Expose 245,000 Public AI Agent Servers to Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 15, 2026 A chain of four critical vulnerabilities discovered in OpenClaw, one of the fastest-growing open-source platforms for autonomous AI agents, has left an estimated 245,000 publicly accessible server …

Microsoft Edge, Windows 11 and LiteLLM Hacked in Pwn2Own Berlin 2026

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 15, 2026 Pwn2Own Berlin 2026 opened with a surge of zero-day exploits targeting modern browsers, operating systems, and emerging AI platforms. On Day One alone, security researchers successfully hacked …

Tycoon 2FA Operators Adopt OAuth Device Code Phishing to Bypass MFA

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybercriminals behind the Tycoon 2FA phishing kit have added a powerful new weapon to their playbook. By combining their well-known phishing infrastructure with OAuth Device Code abuse, they can now …

PraisonAI Vulnerability Exploited Within Hours of Public Disclosure

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 15, 2026 As artificial intelligence frameworks become central to enterprise operations, a critical flaw in a popular AI platform has exposed organizations to serious security risks from threat actors. …