News

Google News
cybersecuritynews. com > microsoft-windows-11-update

Microsoft Confirms Windows 11 Update Fails With Error 0x800f0922

3+ hour, 18+ min ago  (327+ words) Microsoft has officially acknowledged a critical installation failure affecting its May 2026 Patch Tuesday cumulative update for Windows 11, KB5089549, leaving users stranded with error code 0x800f0922 and, in some cases, additional errors 0x80240069 and 0x80240031. The known issue was formally added to the update's change…...

Cyber Security News
cybersecuritynews. com > cisa-microsoft-exchange-server-vulnerability

CISA Warns of Microsoft Exchange Server Vulnerability Exploited in Attacks

1+ hour, 41+ min ago  (386+ words) CISA has issued a fresh warning about a newly disclosed Microsoft Exchange Server vulnerability that is already being exploited in real-world attacks, raising concerns for organizations relying on on-premises email infrastructure. According to the official advisory, the issue occurs during…...

Symbols: cwe-20
Cyber Security News
cybersecuritynews. com > windows-miniplasma-zero-day

New Windows 'Mini Plasma' Zero-Day Let Attackers Gain SYSTEM Access - Po C Released

4+ hour, 13+ min ago  (342+ words) A critical Windows privilege escalation zero-day vulnerability dubbed "Mini Plasma" has emerged with a public proof-of-concept exploit that allows attackers to achieve SYSTEM-level privileges on fully patched Windows systems. Security researcher Nightmare-Eclipse released the weaponized exploit on Git Hub on…...

Cyber Security News
cybersecuritynews. com > fast16-malware-manipulated-nuclear-weapons

Fast16 Malware Manipulated Nuclear Weapons Simulation Data to Sabotage Test Results

6+ hour, 29+ min ago  (717+ words) Fast16 malware has been reclassified as a precision tool engineered not to disrupt nuclear warheads directly, but to quietly falsify the outcome of nuclear weapons test simulations and stall weapons development. Rather than causing kinetic damage, Fast16s purpose was psychological and developmental:…...

Cyber Security News
cybersecuritynews. com > claude-code-rce-flaw > amp

Claude Code RCE Flaw Lets Attackers Execute Commands via Malicious Deeplinks

6+ hour, 59+ min ago  (419+ words) A critical remote code execution (RCE) vulnerability has been discovered in Anthropic's Claude Code CLI tool, allowing attackers to execute arbitrary commands on a victim's machine by tricking them into clicking a specially crafted deeplink. The issue stemmed from eager…...

Symbols: sse:when,cwe-78,query.ts
Cyber Security News
cybersecuritynews. com > wordpress-plugin-vulnerability-exposes-websites > amp

Critical Wordpress Plugin Vulnerability Exposes Websites to Authentication Bypass Attacks

6+ hour, 8+ min ago  (430+ words) A critical vulnerability in a widely used Word Press plugin has exposed over 200, 000 websites to full account takeover, raising urgent concerns across the security community. Tracked as CVE-2026-8181 with a CVSS score of 9. 8, the vulnerability enables unauthenticated attackers to bypass…...

Symbols: cwe-20
Cyber Security News
cybersecuritynews. com > grafana-labs-security-breach

Grafana Labs Security Breach - Hackers Access Git Hub and Download Codebase

1+ day, 1+ hour ago  (453+ words) A threat actor infiltrated Grafana Labs" Git Hub environment, stealing a privileged token to download the company"s private codebase, and then attempted to extort the open-source observability giant with an unanswered ransom demand. Grafana Labs disclosed on May 16, 2026, that…...

Symbols: btc-usd,eth-usd,cwe-77
Cyber Security News
cybersecuritynews. com > first-public-macos-kernel-exploit

First Public mac OS Kernel Exploit on Apple M5 Prepared Using Mythos Preview in Five Days

1+ day, 7+ hour ago  (472+ words) Apple's M5 silicon has reportedly been exploited for the first time in a public mac OS kernel memory corruption attack, successfully bypassing the company's notable hardware-level memory protection. Researchers from Calif, Bruce Dang, Dion Blazakis, and Josh Maine, developed a working…...

Cyber Security News
cybersecuritynews. com > jdownloader-website-compromised

JDownloader Website Compromised to Distribute Malicious Windows and Linux Installers

1+ day, 23+ hour ago  (362+ words) A widely used download manager trusted by millions has briefly turned into a malware delivery platform after attackers compromised the official JDownloader website, replacing legitimate installers with malicious versions targeting both Windows and Linux users. The incident, confirmed by developers…...

Cyber Security News
cybersecuritynews. com > microsoft-exchange-windows-11-and-cursor-zero-days-exploited-pwn2own

Microsoft Exchange, Windows 11, and Cursor Zero-Days Exploited on Pwn2 Own Day 2

1+ day, 23+ hour ago  (359+ words) Pwn2 Own Berlin 2026 is rapidly escalating into one of the most intense offensive security contests in recent years, with Day Two delivering a fresh wave of critical zero-day exploits targeting enterprise software, AI tools, and operating systems. Following a strong opening…...

Symbols: cwe-20