Новости за 05.05.2026

The malicious emails claim to contain a conduct report and lure victims to a Microsoft phishing website that leverages AitM.

AI red team specialist details his methods for manipulating AI guardrails through jailbreaking and data poisoning, helping developers harden machine learning models.

Dubbed Bleeding Llama, the heap out-of-bounds read issue can be exploited remotely, without authentication.

CVE-2026-0073 affects Android’s System component and it can be exploited without any user interaction. 

The most severe of these security defects could allow remote attackers to execute arbitrary code.

Deniss Zolotarjovs was directly involved in extortion strategies and in negotiations with victim companies.

The security defects allow unauthenticated, remote attackers to execute arbitrary code through crafted requests.

The vulnerabilities were reported to Meta through its bug bounty program and were patched with updates released earlier this year.