arXiv Bans Submitters Of AI-Generated Hallucinations
arXiv cracks down hard: Submit AI-generated hallucinations and face a permanent ban. Academic integrity just got its biggest enforcement upgrade yet.
2026
Read More
CISA Adds Microsoft Exchange XSS Flaw To KEV Catalog
CISA adds Microsoft Exchange Server XSS vulnerability to KEV Catalog amid active exploitation. Federal agencies have a deadline—but all orgs should patch now.
Turla Transforms Kazuar Into Modular P2P Botnet
Russian state hackers Turla transformed their Kazuar backdoor into a stealthy P2P botnet for persistent access. FSB-linked group ups their game with modular malware.
Hackers Deploy XWorm RAT via PyInstaller AMSI Bypass
Hackers weaponize PyInstaller to smuggle XWorm RAT past Windows defenses. AMSI patching lets them steal data and hijack devices undetected.
Gunra Ransomware Expands RaaS After Conti Shift
Gunra ransomware evolved from Conti roots into a full-scale RaaS operation, hitting dozens of orgs globally in under a year with leak sites and affiliate programs
Avada Builder Flaws Expose 1M WordPress Sites To Theft
One million WordPress sites at risk: Avada Builder flaws let hackers steal credentials and database secrets. Patch now or face a data breach nightmare.
Four Chained OpenClaw Flaws Threaten Full System Takeover
Researchers have disclosed four chained vulnerabilities in OpenClaw, collectively dubbed Claw Chain, enabling attackers to steal data, escalate privileges, and establish persistence through the AI agent’s own runtime. All flaws have been patched in OpenClaw version 2026.4.22 and users are urged to update immediately.
SpaceX Starship Upgrade Launches New Space Security Era
SpaceX’s upgraded Starship launches first test flight May 19. New capabilities could reshape space infrastructure—and expand the attack surface cybersecurity pros must defend.
Hackers Exploit OAuth Flow To Steal M365 Credentials
Hackers are weaponizing Microsoft’s OAuth device flow to steal M365 credentials at scale. This little-known attack vector has exploded since late 2024.
Critical Cisco SD-WAN Flaw Grants Admin Access Remotely
Critical CVE-2026-20182 hits Cisco SD-WAN with CVSS 10.0 rating. Unauthenticated attackers can gain full admin access remotely. Active exploitation confirmed.