Drupal Critical SQL Injection Flaw CVE-2026-9082 Now Under Active Attack
May 23, 2026 Drupal has confirmed that a highly critical SQL injection vulnerability (CVE-2026-9082) in its core database abstraction API is now under active attack. Disclosed on May 18, 2026, the flaw allows unauthenticated remote attackers to execute…
Trend Micro Apex One Zero-Day Under Active Exploit
May 22, 2026 On May 22, 2026, Trend Micro disclosed a zero-day vulnerability in its enterprise endpoint protection platform, Apex One. The flaw is actively being exploited in the wild. Tracked as CVE-2026-34926, it is a directory traversal vulnerability…
Apache HTTP Server Double-Free Vulnerability
May 10, 2026 The Apache Software Foundation released an emergency security patch on May 5, 2026, to address CVE-2026-23918, a critical HTTP/2 double-free vulnerability in the Apache HTTP Server that enables remote code execution (RCE). With a CVSS v3.1…
Canvas LMS Cyberattack by ShinyHunters: Education Platform Breach Shuts Thousands of Schools
May 9, 2026 The Canvas Learning Management System (LMS) — a platform used by thousands of schools and universities worldwide — was hit by a devastating cyberattack from the ShinyHunters hacking group on May 8, 2026. The Canvas data breach disrupted…
Dirty Frag Linux Kernel Vulnerability Grants Root Access
May 8, 2026 A critical local privilege escalation vulnerability known as Dirty Frag (CVE-2026-43284) has been disclosed, affecting the Linux kernel’s xfrm-ESP subsystem. First reported to the Linux kernel maintainers on April 30, 2026, this…
Trellix Source Code Breach: Unauthorized Access Raises Fears of Infrastructure Compromise
May 7, 2026 On May 4, 2026, cybersecurity giant Trellix confirmed that a source code breach had compromised its development repository, exposing intellectual property and raising alarms across the supply chain ecosystem. The attack, which occurred…
Qilin Ransomware Attack on Armstrong George Cohen Will Ophthalmology
May 5, 2026 On May 2, 2026, the notorious Qilin ransomware group executed a sophisticated attack against Armstrong George Cohen Will Ophthalmology, a leading eye care practice in the United States. The healthcare breach resulted in the exposure of…