2026-05-11: Google catches the first confirmed AI-developed zero-day before mass exploitation

Show Notes - 2026-05-11

Stories Covered

• Today:
• cPanel CVE-2026-41940 Under Active Exploitation to Deploy Filemanager Backdoor [Critical Alerts]
• Google Detects First AI-Developed Zero-Day Exploit (2FA Bypass) [Critical Alerts]
• EtherRat and TukTuk C2 End in The Gentlemen Ransomware [Ransomware & Extortion]
• The State of Ransomware Q1 2026: Consolidation and The Gentlemen's Breakout [Ransomware & Extortion]
• Checkmarx Jenkins AST Plugin Compromised in Supply Chain Attack [Business & Infrastructure Threats]
• Build Application Firewalls Aim to Stop Supply Chain Attacks [Business & Infrastructure Threats]
• Why Changing Passwords Doesn't End an Active Directory Breach [Windows / AD Security]
• AI-Augmented Threat Operations: Autonomous Malware and Defense Evasion [General Security News]
• FCC Relaxes Foreign Router Ban to Allow Security Updates Until 2029 [General Security News]
• ShinyHunters Disrupts US Schools via Instructure Canvas Platform [General Security News]
• Microsoft Security Update Guide - Linux Kernel CVEs [Vulnerability Disclosures]

CVEs Referenced

CVE-2025-55182, CVE-2026-31706, CVE-2026-31707, CVE-2026-31709, CVE-2026-31712, CVE-2026-41940, CVE-2026-42246, CVE-2026-43338

Read the full brief