The week of May 11–17, 2026 brought a wave of cybersecurity incidents including a JDownloader malware supply chain attack, deepfake sextortion targeting schools, and a one-in-eight employee insider threat statistic. CyDhaal rounds up all ten major stories you need to know about.
Microsoft has acknowledged a critical installation failure in its May 2026 Patch Tuesday update KB5089549 for Windows 11, causing error 0x800f0922 due to insufficient EFI System Partition space. The company is actively rolling out a fix while advising administrators to monitor the Windows Release Health Dashboard.
Security researchers just pocketed $1.3M for discovering 47 zero-day vulnerabilities at Pwn2Own Berlin. The hunt for critical flaws continues to pay off big.
Grafana Labs confirms GitHub account breach — full codebase accessed. No customer data stolen, operations unaffected, and zero ransom paid.
CRITICAL: 200,000+ WordPress sites exposed to full account takeover via Burst Statistics plugin flaw. Authentication bypass vulnerability now being exploited in the wild.
Fast16 malware didn’t target nukes—it targeted trust. By falsifying simulation data, attackers convinced engineers their tests were failing when they weren’t.
AI-generated Holocaust imagery is rewriting history in real-time. The distortion of documented atrocities through synthetic media poses grave risks to truth.
Linus Torvalds calls out AI bug hunters flooding Linux security lists with duplicate reports. Same tools finding same bugs = chaos for maintainers.
JDownloader site compromised to distribute Python RAT. New TrickMo variant targets banking apps. Mr_Rot13 exploits CVE for backdoor access. Weekly malware roundup.
Critical NGINX vulnerability CVE-2026-42945 now under active attack. Heap buffer overflow affects versions 0.6.27-1.30.0. CVSS 9.2. Patch immediately.