Hermes — Wednesday 13 May 2026

1

🔐 security Microsoft Security Blog

73%

Accelerating detection engineering using AI-assisted synthetic attack logs generation

What if you could generate realistic attack telemetry on demand? Explore research methods that translate attacker behaviors (TTPs) into synthetic logs that can trigger detections at scale and without…

Novelty

75%

Depth

70%

Practical

75%

Surprise

60%

Relevance

85%

https://www.microsoft.com/en-us/security/blog/2026/05/12/accelerating-detection-engineering-using-ai-assisted-synthetic-attack-logs-generation/

2

🔐 security Schneier on Security

72%

Copy.Fail Linux Vulnerability

This is the worst Linux vulnerability in years. TL;DR copy.fail is a Linux kernel local privilege escalation, not a browser or clipboard attack. Disclosed by Theori on 29 April 2026 with a working Po…

Novelty

80%

Depth

70%

Practical

65%

Surprise

75%

Relevance

75%

https://www.schneier.com/blog/archives/2026/05/copy-fail-linux-vulnerability.html

3

🤖 ai The Decoder

71%

Google says it stopped a mass cyberattack after AI was used to discover a zero-day exploit

Google's Threat Intelligence Group has identified the first known case of an attacker using AI to discover and weaponize a zero-day vulnerability. Google says it stopped the planned mass attack. Stat…

Novelty

85%

Depth

55%

Practical

55%

Surprise

85%

Relevance

90%

https://the-decoder.com/google-says-it-stopped-a-mass-cyberattack-after-ai-was-used-to-discover-a-zero-day-exploit/

4

🔐 security Microsoft Security Blog

69%

Defense at AI speed: Microsoft’s new multi-model agentic security system tops leading industry benchmark

Today Microsoft is announcing a major step forward in AI-powered cyber defense: a new multi-model agentic scanning harness (codenamed MDASH). The post Defense at AI speed: Microsoft’s new multi-model…

https://www.microsoft.com/en-us/security/blog/2026/05/12/defense-at-ai-speed-microsofts-new-multi-model-agentic-security-system-tops-leading-industry-benchmark/

5

🔐 security Microsoft Security Blog

68%

Undermining the trust boundary: Investigating a stealthy intrusion through third-party compromise

Microsoft Incident Response investigated an attack operated through legitimate and trusted administrative mechanisms to blend seamlessly into routine operations and remain undetected demonstrating th…

https://www.microsoft.com/en-us/security/blog/2026/05/12/undermining-the-trust-boundary-investigating-a-stealthy-intrusion-through-third-party-compromise/

6

🔐 security Krebs on Security

66%

Patch Tuesday, May 2026 Edition

Artificial intelligence platforms may be just as susceptible to social engineering as human beings, but they are proving remarkably good at finding security vulnerabilities in human-made computer cod…

https://krebsonsecurity.com/2026/05/patch-tuesday-may-2026-edition/

7

📦 m365 Petri IT Knowledgebase

61%

Microsoft to Retire Exchange ActiveSync Certificate-Based Authentication

Microsoft is phasing out an old authentication method for mobile email, which signals another major step toward stricter, modern security in Exchange Online. Organizations relying on certificate-base…

https://petri.com/microsoft-retire-exchange-activesync-certificate-authentication/

8

📦 m365 Petri IT Knowledgebase

59%

Dirty Frag Linux Flaw Allows Local Privilege Escalation to Root Access

A newly discovered Linux flaw dubbed “Dirty Frag” is raising alarms among security experts as it enables attackers to escalate minor breaches into full system takeovers quickly. This vulnerability hi…

https://petri.com/dirty-frag-linux-root-access-vulnerability/

9

⚡ tech Stratechery

56%

SpaceX and Anthropic, xAI’s Two Companies, Elon Musk and SpaceXAI’s Future

The Anthropic xAI deal is shocking but not surprising: Musk should double down on serving other companies.

https://stratechery.com/2026/spacex-and-anthropic-xais-two-companies-elon-musk-and-spacexais-future/

10

🤖 ai The Decoder

55%

Microsoft ousts its Israel chief following reports that Azure quietly powered military AI targeting in Gaza

Microsoft Israel's top executive is out after an internal investigation into the unit's work with Israel's defense ministry. Reporting over the past years points to what's likely at the center of it …

https://the-decoder.com/microsoft-ousts-its-israel-chief-following-reports-that-azure-quietly-powered-military-ai-targeting-in-gaza/

11

🤖 ai The Decoder

53%

Thinking Machines Lab ships its first model and argues interactivity is what OpenAI gets wrong about voice

Mira Murati's start-up presents its first AI model and aims to free voice AI from the question-and-answer model. The model processes audio, video and text in 200-millisecond chunks in parallel and ai…

https://the-decoder.com/thinking-machines-lab-ships-its-first-model-and-argues-interactivity-is-what-openai-gets-wrong-about-voice/

12

🤖 ai The Decoder

52%

"Tokenmaxxing" spreads at Amazon as employees game internal AI leaderboards

Amazon employees are automating unnecessary tasks just to climb internal AI leaderboards. The article "Tokenmaxxing" spreads at Amazon as employees game internal AI leaderboards appeared first on The…

https://the-decoder.com/tokenmaxxing-spreads-at-amazon-as-employees-game-internal-ai-leaderboards/

13

🔐 security Microsoft Security Blog

50%

Defending consumer web properties against modern DDoS attacks

Read how to protect consumer websites and defend against modern DDoS attacks with layered security, resilient architecture, and graceful service degradation. The post Defending consumer web propertie…

https://www.microsoft.com/en-us/security/blog/2026/05/12/defending-consumer-web-properties-against-modern-ddos-attacks/

14

⚡ tech The Verge

49%

Google announces its Chromebook successor: the Googlebook

Google is announcing a new line of laptops coming in the fall called Googlebooks. Details are sparse for now, as the tease is just a small part of various Android announcements during Google's Androi…

https://www.theverge.com/tech/928479/google-googlebook-laptops-android-tease-aluminium-chromebook

15

🔐 security SecurityWeek

47%

Microsoft Patches 137 Vulnerabilities

Fresh security updates resolve critical flaws in Azure, Windows, Dynamics 365, and the SSO Plugin for Jira & Confluence. The post Microsoft Patches 137 Vulnerabilities appeared first on SecurityWeek.

https://www.securityweek.com/microsoft-patches-137-vulnerabilities/