2026-05-08: Ivanti ships its third EPMM zero-day patch of 2026 (CVE-2026-6973, active exploitation confirmed)

Show Notes - 2026-05-08

Stories Covered

• Today:
• Ivanti EPMM Zero-Day (CVE-2026-6973) [Critical Alerts]
• Palo Alto Networks Firewall Zero-Day (CVE-2026-0300) [Critical Alerts]
• Linux Dirty Frag Zero-Day (No CVE Assigned) [Critical Alerts]
• RansomHouse Claims Trellix Breach [Ransomware & Extortion]
• TCLBanker Malware Spreads via WhatsApp and Outlook [Business & Infrastructure Threats]
• Microsoft Expands Passkey Support [Windows / AD Security]
• AI Agent Framework RCE Vulnerabilities [Windows / AD Security]
• Android ADB Authentication Bypass (CVE-2026-0073) [General Security News]
• Microsoft May 2026 Security Updates [Vulnerability Disclosures]

CVEs Referenced

CVE-2026-0073, CVE-2026-0300, CVE-2026-1281, CVE-2026-1340, CVE-2026-23631, CVE-2026-25243, CVE-2026-25592, CVE-2026-26030, CVE-2026-26164, CVE-2026-31431, CVE-2026-33109, CVE-2026-40379, CVE-2026-5786, CVE-2026-5787, CVE-2026-5788, CVE-2026-6973, CVE-2026-7821, CVE-2026-7973, CVE-2026-7982, CVE-2026-7988, CVE-2026-7995, CVE-2026-8013, CVE-2026-8016, CVE-2026-8017, CVE-2026-8019, CVE-2026-8021, CVE-2026-8022

Indicators of Compromise

IP Addresses: 12.6.1.1, 12.7.0.1, 12.8.0.1

Read the full brief