2026-05-09: Palo Alto Networks is patching CVE-2026-0300, a critical zero-day in PAN-OS being actively

Show Notes - 2026-05-09

Stories Covered

• May 9, 2026
• Today:
• Palo Alto Networks PAN-OS Zero-Day (CVE-2026-0300) [Critical Alerts]
• Ivanti EPMM Zero-Day Exploited (CVE-2026-6973) [Critical Alerts]
• Dirty Frag Linux Privilege Escalation Under Active Exploitation [Critical Alerts]
• BerriAI LiteLLM SQL Injection (CVE-2026-42208) [Critical Alerts]
• Karakurt Extortion Negotiator Sentenced to 9 Years [Ransomware & Extortion]
• North Korean IT Worker Laptop Farm Operators Sentenced [Ransomware & Extortion]
• RansomHouse Claims Trellix Source Code Breach [Ransomware & Extortion]
• ShinyHunters Second Breach of Instructure Canvas [Ransomware & Extortion]
• PCPJack Cloud Worm Evicts TeamPCP, Harvests Credentials [IOCs & Detection]
• Poland Documents ICS Breaches at Five Water Treatment Plants [Business & Infrastructure Threats]
• Zara Breach Exposes 197,000 Customer Records [Business & Infrastructure Threats]
• NVIDIA GeForce NOW Armenian Partner Breach [Business & Infrastructure Threats]
• AI Platform Braintrust Breach Exposes Customer API Keys [Business & Infrastructure Threats]
• TCLBANKER Banking Trojan Spreads via WhatsApp and Outlook [Windows / AD Security]
• Quasar Linux RAT Targets Developer Credentials for Supply Chain Attacks [General Security News]
• PamDOORa Linux Backdoor Advertised for $900 [General Security News]
• SOC Alert Backlogs Hiding Real Threats [General Security News]
• Fake Android Call History Apps Steal $7.3M in Subscriptions [General Security News]
• cPanel and WHM Patch Three Vulnerabilities [Vulnerability Disclosures]

CVEs Referenced

CVE-2026-0300, CVE-2026-1281, CVE-2026-1340, CVE-2026-29201, CVE-2026-29202, CVE-2026-29203, CVE-2026-41940, CVE-2026-42208, CVE-2026-43284, CVE-2026-43500, CVE-2026-6973

Indicators of Compromise

IP Addresses: 12.8.0.0, 12.6.1.1, 12.7.0.1, 12.8.0.1, 11.136.0.9

Read the full brief