Cyber Security

New infosec products of the week: May 22, 2026

Here’s a look at the most interesting products from the past week, featurin...

The new economics of fraud: Cheaper, faster, more co...

Scams have become one of the fastest-growing consumer risks, driven by AI-ena...

How CISOs Should Prep for Agentic-Ready AI BOMs

Finding ways to document both component and execution attributes for AI bill ...

Google API Keys Remain Active After Deletion

A security researcher discovered the API keys can still be used for 23 minute...

Microsoft open-sources tools for designing and testi...

Microsoft has open-sourced two tools aimed at bringing security discipline to...

AI Agents Are Shifting Identity Security Budget Dyna...

AI agent projects are proliferating throughout the enterprise, and those AI a...

Showboat Linux Malware Hits Middle East Telecom with...

Cybersecurity researchers have disclosed details of a new Linux malware dubbe...

GitHub, Grafana Labs breaches traced back to TanStac...

GitHub CISO Alexis Wales has named the malicious VS Code extension behind the...

Chinese APTs Share Linux Backdoor in Central Asia Te...

"Showboat" doesn't show off, but clearly it doesn't need to, as it's long hel...

Content Delivery Exploit Opens Websites to Brand Hij...

The Underminr domain-fronting attack allows threat actors to modify Web reque...

Authorities dismantle First VPN, used by ransomware ...

First VPN, a virtual private network service marketed to cybercriminals, prom...

ThreatsDay Bulletin: Linux Rootkits, Router 0-Day, A...

This week starts small. A token leaks. A bad package slips in. A login trick...

Microsoft Defender vulnerabilities exploited in the ...

Attackers are exploiting two Microsoft Defender vulnerabilities (CVE-2026-410...

Fake Android Apps Commit Carrier Billing Fraud for P...

The disguised apps use WebView automation, JavaScript injection, and OTP inte...

Microsoft Warns of Two Actively Exploited Defender V...

Microsoft has disclosed that a privilege escalation and a denial-of-service f...

When Identity is the Attack Path

Consider a cached access key on a single Windows machine. It got there the wa...