GitLab Patches Multiple Duo AI, DoS, and Authorization Flaws in Community and Enterprise Edition

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 30, 2026 GitLab has released emergency security updates for both Community Edition (CE) and Enterprise Edition (EE), addressing multiple Duo AI, denial‑of‑service, and authorization flaws in recent versions of the platform. On May 27, 2026, GitLab shipped versions 19.0.1, …

Pentest Swarm AI Tool With Live Access to nmap, sqlmap, Burp, Metasploit, and Others

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 30, 2026 Pentest Swarm AI is the first open-source autonomous penetration testing platform built on a swarm intelligence architecture, not just multiple agents firing in a fixed sequence. Developed by Armur AI, it gives security professionals live, coordinated access …

Google Chrome’s Device-Bound Session Credentials Now GA to Block Account Takeovers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 30, 2026 Google has officially moved Device Bound Session Credentials (DBSC) to general availability in the Chrome browser on Windows, delivering a powerful defense against one of the most persistent threats in modern cybersecurity session cookie theft. Previously available …

GREYVIBE Hackers Leverage ChatGPT and Google Gemini to Fuel Cyberattacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 30, 2026 GREYVIBE hackers are increasingly leveraging generative AI tools such as ChatGPT and Google Gemini to enhance cyberattack operations. The campaign, active since at least August 2025, primarily targets Ukraine and related entities across the government, military, and …

Palo Alto Networks PAN-OS Authentication Vulnerability Bypass Exploited in the Wild

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Palo Alto Networks authentication bypass vulnerability, CVE-2026-0257, affecting PAN-OS and Prisma Access, is now being actively exploited in the wild, with CISA adding it to the Known Exploited Vulnerabilities (KEV) catalog on May 29, 2026. Palo Alto Networks published its …

Ransomware Uses SYSTEM Scheduled Task to Encrypt Local Drives With Elevated Privileges

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 29, 2026 A newly analyzed ransomware strain called The Gentlemen is raising serious alarms across the cybersecurity community. Built in the Go programming language and obfuscated with a tool called Garble, it combines powerful per-file encryption with an aggressive …

Hackers Use Fake Adobe Document Cloud Pages to Deliver ScreenConnect Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 29, 2026 A sophisticated phishing campaign is actively targeting financial organizations by using fake Adobe Document Cloud pages to silently install ScreenConnect remote access malware on victim machines. The operation is well-structured, deceptive, and difficult to detect because it …

Google Employee Charged for Making $1.2 Million With Confidential Information

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 29, 2026 A Google software engineer has been charged in the United States for allegedly using confidential internal data to generate more than $1.2 million in profits through prediction market trading. The case highlights growing concerns around insider threats …

VS Code Remote-SSH RCE Lets Attackers Pivot From Developer Machines to Cloud Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 29, 2026 A newly disclosed vulnerability in Visual Studio Code’s Remote-SSH extension exposes a critical post-compromise attack path that allows threat actors to pivot from infected developer machines into cloud and production environments. Given the extension’s widespread adoption across …

Hackers Exploit Microsoft Teams’ Collaboration Features to Impersonate IT Helpdesk Staff

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 29, 2026 A growing wave of vishing (voice phishing) campaigns in which threat actors abuse Microsoft Teams’ external collaboration features to impersonate IT helpdesk personnel and investigators is now turning to the Microsoft 365 Unified Audit Log (UAL) as …