Boulevard of Broken Dreams: Two Decades of Cyber Catastrophes

18. May 2026
Cybersecurity

Dark Reading analyzes two decades of cyber disasters: from MGM and Caesars to MOVEit, the report documents spectacular security failures, unnecessary vulnerabilities, and systemic omissions that cost companies billion-dollar lessons and show that data breaches have long become the norm.

Share on:

Developer Workstations Are Now Part of the Software Supply Chain

18. May 2026
Cybersecurity

Developer workstations are a critical attack vector, with attackers targeting credential harvesting from developer environments, requiring security teams to realign their protection strategies to this new supply chain reality.

Share on:

Windows Security Vulnerabilities: BitLocker Flaw and Privilege Escalation

18. May 2026
Cybersecurity

The IT researcher behind the “NightmareEclipse” project has disclosed new vulnerabilities: “YellowKey” in BitLocker and privilege escalation via “MiniPlasma”.

Share on:

Critical Patches Released for Ivanti, Fortinet, SAP, VMware, and n8n

18. May 2026
Cybersecurity

Five major software vendors patch critical vulnerabilities with CVSS scores from 7.8 upward – patches must be applied promptly.

Share on:

Windows Update: Installation Can Fail Due to Insufficient EFI Space

18. May 2026
Cybersecurity

Windows security updates from May are failing on some systems due to insufficient space on the EFI partition.

Share on:

Windows Zero-Day MiniPlasma Enables SYSTEM Access, Exploit Published

18. May 2026
Cybersecurity

A Windows vulnerability allegedly patched in 2020 (CVE-2020-17103) can still be exploited on current systems for privilege escalation, and the exploit has been publicly released.

Share on:

Hackers Earn $1.3 Million for 47 Zero-Day Vulnerabilities at Pwn2Own Berlin 2026

18. May 2026
Cybersecurity

Pwn2Own Berlin 2026 concluded with $1.3 million in prize money and 47 zero-day vulnerabilities discovered, with Team DEVCORE winning $505,000 and Orange Tsai receiving the highest individual reward of $200,000 for a Microsoft Exchange exploitation.

Share on:

Windows 11 KB5089549 Fails with Insufficient Space on EFI Partition

18. May 2026
Cybersecurity

Windows 11 KB5089549 aborts installation when the EFI System Partition has less than 10 MB free space and can be resolved through Known Issue Rollback or Group Policy configuration.

Share on:

DirtyDecrypt: Proof-of-Concept Released for Linux Kernel Vulnerability

18. May 2026
Cybersecurity

A working exploit now exists for the Linux vulnerability DirtyDecrypt (CVE-2026-31635), primarily affecting distributions like Fedora, Arch Linux, and openSUSE Tumbleweed; users should install kernel updates.

Share on:

Four Malicious npm Packages Distribute Infostealers and Phantom Bot DDoS Malware

18. May 2026
Cybersecurity

Four malicious npm packages from the same attacker distribute different malware: a DDoS botnet and infostealers, with one package cloning the newly published Shai-Hulud worm; users should immediately remove affected packages and reset their security credentials.

Share on: