Security Daily Digest

Cybersecurity news, daily.

2026.05.23

16 sources scanned

FEATURED

CISA Adds Langflow and Trend Micro Apex One Vulnerabilities to KEV

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added vulnerabilities in Langflow and Trend Micro Apex One to its Known Exploited Vulnerabilities (KEV) catalog. The Apex One zero-day, actively exploited in the wild, allows attackers to execute arbitrary code. Organizations using these products should prioritize patching to mitigate potential threats and reduce their attack surface.

SRC The Hacker NewsBleepingComputer

Global Takedown of VPN Used by 25 Ransomware Groups

Authorities in Europe and North America dismantled a criminal VPN service used by 25 ransomware groups, intercepting traffic and seizing domains. This operation highlights the importance of monitoring VPN services that facilitate cybercriminal activities. Security teams should review their VPN usage policies to ensure compliance and prevent potential misuse by threat actors.

SRC The Hacker NewsArs Technica Security

Megalodon Campaign Targets GitHub Repos with Malicious Workflows

A new automated attack campaign, Megalodon, has been disclosed, targeting over 5,561 GitHub repositories with malicious CI/CD workflows. This campaign represents a significant threat to open-source projects, as it can lead to the distribution of compromised code. Developers should audit their CI/CD configurations and implement security measures to defend against such attacks.

SRC The Hacker NewsArs Technica Security

SIGNAL

01 Verizon DBIR: Healthcare Fends Off Increased Social Engineering Attacks Dark Reading
02 Ghostwriter Targets Ukraine Government Entities with Prometheus Phishing Malware The Hacker News
03 Cisco Patches CVSS 10.0 Secure Workload REST API Flaw Enabling Data Access The Hacker News
04 Hackers steal patient and billing data from German hospitals via third-party provider - The Record from Recorded Future News Google News Security

STAY UPDATED

Daily security digest, straight to your inbox.