Microsoft Patch Tuesday May 2026 – 120 Vulnerabilities Fixed, Including 29 Critical RCE Flaws

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 12, 2026 Microsoft’s May 2026 Patch Tuesday lands with a heavy enterprise focus, fixing 120 vulnerabilities across Windows, Office, Azure, developer tools, and Microsoft 365 apps, including 29 remote …

Fortinet Patches Five Vulnerabilities Across FortiAP, FortiOS, and Enterprise Products

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 12, 2026 Fortinet released security advisories on May 12, 2026, addressing five vulnerabilities spanning its wireless access point controllers, network operating system, and enterprise management platforms, including a critical …

Critical Fortinet FortiSandbox Vulnerability Enables Code Execution Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 12, 2026 A critical security flaw in Fortinet’s FortiSandbox platform is putting enterprise networks at serious risk, allowing unauthenticated attackers to execute arbitrary code or commands remotely, with no …

Threat Actors Leverage Vercel’s AI Tools to Mass‑Produce Realistic Phishing Sites

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 12, 2026 A new and growing wave of phishing attacks is making credential theft easier than ever before. Threat actors are now using Vercel, a legitimate AI-powered web development …

Zoom Rooms and Workplace Vulnerabilities Allow Attackers to Escalate Privileges

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 12, 2026 A series of newly discovered vulnerabilities in Zoom’s software ecosystem could hand local attackers the keys to your system. As organizations continue to rely heavily on virtual …

Malicious Chrome MV3 Extension Impersonates TronLink to Steal Crypto Wallet Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 12, 2026 A fake Chrome browser extension pretending to be the popular TronLink crypto wallet has been caught stealing sensitive wallet credentials from unsuspecting users. The malicious extension operates …

MistralAI PyPI Package Compromised to Inject Malicious Code – Microsoft Warns

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 12, 2026 A popular AI development library has been turned into a weapon. The mistralai PyPI package, version 2.4.6, was found to contain malicious code secretly injected by attackers, …

Claude’s Chrome Extension Vulnerability Allows Malicious Extensions to Steal Gmail and Drive Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 12, 2026 Researchers have exposed a catastrophic vulnerability hiding inside the “Claude in Chrome” extension. By weaponizing an otherwise harmless, zero-permission extension, invisible attackers can completely hijack the trusted …