Vulnerability

Microsoft patches YellowKey BitLocker bypass after public disclosure. CVE-2026-45585 lets attackers circumvent disk encryption security features. Update now.

A single XSS vulnerability can silently register an attacker-controlled passkey on a victim’s account, creating a persistent authentication backdoor with zero user interaction. The widespread deployment of passkeys without attestation requirements makes this a critical and largely overlooked threat.

GitHub Actions supply chain attack hits actions-cool/issues-helper. Attackers redirected ALL repository tags to malicious commits, stealing CI/CD credentials.

INTERPOL’s Operation Ramz strikes hard: 201 arrested, 382 suspects identified across MENA region. Major cybercrime networks dismantled in historic crackdown.

Linux kernel flaw lets unprivileged users access root-only files. A critical vulnerability breaks fundamental security boundaries. Patch immediately.

Critical flaws in n8n workflow automation platform can be chained for full remote code execution. Three CVEs put automation systems at serious risk.

Microsoft brings back resizable taskbar and Start menu to Windows 11. A small UI change that could have big security implications for enterprise environments.

UK forced to buy US glide bombs for F-35s after software delays postpone British SPEAR 3 missile integration. StormBreaker becomes the stopgap solution.

Researchers chain 0-click Dolby exploit with new VPU driver bug to root Pixel 10. The kernel flaw took just 5 lines of code to exploit. Patched in 71 days.

Microsoft has acknowledged a critical installation failure in its May 2026 Patch Tuesday update KB5089549 for Windows 11, causing error 0x800f0922 due to insufficient EFI System Partition space. The company is actively rolling out a fix while advising administrators to monitor the Windows Release Health Dashboard.