Weekly News - Unpatched Microsoft Exchange Server vulnerability exploited

One keypress is all it takes to compromise four AI coding tools - View in browser  Weekly cybersecurity news May 18, 2026 Stealth is the new standard 80 percent of attacks now focus on evasion. Download the Red Report 2026 to see how malware plays dead and learn how to validate your defenses. Latest articles: Google lets Workspace admins apply one policy across all SAML apps Cisco patches another actively exploited SD-WAN zero-day (CVE-2026-20182) Thieves unlock stolen iPhones using cheap tools sold on Telegram Unpatched Microsoft Exchange Server vulnerability exploited (CVE-2026-42897) Rocky Linux launches opt-in security repository for urgent fixes Deepfake detection is losing ground to generative models Zombie linkages are keeping expired domains trusted for years The AI oversight paradox: Is the investment worth the cost of watching it? New infosec products of the week: May 15, 2026 Fragnesia: New Linux kernel LPE bug was spawned by Dirty Frag patch (CVE-2026-46300) Microsoft’s WinUI agent plugin trims token use by over 70% during development Microsoft turns Copilot Studio into an AI agent control center AI cyber capability is speeding past earlier projections CERN’s open source KiCad library gives the world 17,000 circuit board components Vector embedding security gap exposes enterprise AI pipelines Over 70% of organizations hit by identity breaches Machine identities outnumber humans 109 to 1 WhatsApp adds Incognito Chat for private Meta AI conversations Signal responds to phishing attacks with new in-app security warnings KDE gets over €1 million investment to strengthen security and core infrastructure Microsoft’s agentic security system found four critical Windows RCE flaws Sandyaa: Open-source autonomous security bug hunter The hidden risk of non-human identities in AI adoption Researchers open-source a Wi-Fi cyber range for security training Android pushes new scam, theft, and AI protections in 2026 update wave Fedora Hummingbird brings the container security model to a Linux host OS Microsoft May 2026 Patch Tuesday: Many fixes, but no zero-days Stealthy hackers exploit cPanel flaw in active backdoor campaign (CVE-2026-41940) Amazon Quick authorization bypass let users reach blocked AI chat agents Instructure took a risky approach to recover stolen Canvas data General Motors to pay $12.75 million over driver data sales Download: The IT and security field guide to AI adoption JetBrains TeamCity vulnerability allows privilege escalation, API exposure (CVE-2026-44413) Six new dnsmasq vulnerabilities open the door to DNS cache poisoning, local root Škoda confirms unauthorized access to its online shop OpenAI’s Daybreak uses Codex Security to identify risky attack paths HEIDI: Free IDE security plugin for open-source vulnerability checks The hidden smart fridge risks that emerge years after purchase Cybersecurity jobs available right now: May 12, 2026 iOS 26.5 is out, bringing encrypted RCS messaging to iPhone and Android users Poor security left hackers inside water company network for nearly two years Google researchers uncover criminal zero-day exploit likely built with AI Linux developers weigh emergency “killswitch” for vulnerable kernel functions Police take down relaunched criminal marketplace with 22,000 users, €3.6 million in revenue Instagram messaging encryption removed, and privacy advocates are pushing back The scam economy has found its AI upgrade Rustinel: Open-source endpoint detection for Windows and Linux Review: Foundations of Cybersecurity, 2nd edition Security teams are turning to AI to survive alert overload Video: Closing the AI governance gap in your enterprise Industry news: Akamai to acquire LayerX for $205 million Keycard helps developers secure autonomous AI agents with scoped access HYCU aiR detects insider risk and AI activity from backups Cofense adds AI-powered campaign detection to stop phishing attacks Tuskira’s Kairo exposes hidden AI-driven breach paths Apricorn hardens ASK3 encrypted USB drive for extreme conditions Versa CSPM brings continuous visibility to cloud risk and compliance exposure NetSPI AI-powered Continuous Pentesting identifies high-impact vulnerabilities SAP unveils Autonomous Enterprise for AI-driven business operations Exaforce raises $125 million to respond to AI-powered attacks ThreatDown ITDR prevents credential-based attacks Veeam Intelligent ResOps unifies data context and recovery Citrix moves secure access to a flexible, credit-based consumption model Zimperium Mobile App Response Agent helps security teams counter mobile attacks Red Hat extends open source technology into space Alation AI Governance creates a system of record for AI oversight SailPoint Agentic Fabric expands identity governance to autonomous AI agents The questionnaire-based TPRM model is broken, and TrustCloud has a fix Copyright © 2026 Help Net Security, All rights reserved. You are receiving Help Net Security daily security news because you opted in at our web site located on www.helpnetsecurity.com. Our mailing address is: Help Net Security Astus d.o.o. Kastav 51215 Croatia Add us to your address book No longer interested in receiving these emails? Unsubscribe Missed an issue? Access our past newsletters here: Archive