Hermes — Saturday 23 May 2026

1

🔐 security Microsoft Security Blog

74%

From edge appliance to enterprise compromise: Multi-stage Linux intrusion via F5 and Confluence

A multi-stage attack on Linux devices began with an exposed F5 BIG-IP edge appliance and pivoted to an internal Confluence server for credential theft and identity compromise. Learn how the threat ac…

Novelty

70%

Depth

80%

Practical

75%

Surprise

55%

Relevance

85%

https://www.microsoft.com/en-us/security/blog/2026/05/22/from-edge-appliance-to-enterprise-compromise-multi-stage-linux-intrusion-via-f5-and-confluence/

2

🤖 ai The Decoder

67%

The first AI proof worthy of math's top journal landed and it won't be the last

A reasoning model from OpenAI has disproved a conjecture by mathematician Paul Erdős on unit-distance geometry that stood open since 1946 - using tools from algebraic number theory that experts never…

https://the-decoder.com/openai-shifts-the-boundary-of-automated-reasoning-with-a-milestone-in-ai-mathematics-that-experts-are-now-unpacking/

3

📦 m365 Petri IT Knowledgebase

66%

Microsoft Expands Purview, Entra ID, and Agent 365 Security Capabilities

Microsoft has detailed the recent security enhancements designed to give organizations stronger oversight, management, and defense across increasingly complex digital environments. These updates help…

https://petri.com/microsoft-purview-dspm-entra-id-security-updates/

4

📦 m365 Petri IT Knowledgebase

66%

How New Windows Zero-Day Bugs Bypass BitLocker and Enable SYSTEM-Level Access

A cybersecurity researcher has disclosed two new zero-day vulnerabilities affecting Windows and also released a proof-of-concept exploit for another flaw that Microsoft patched back in 2020. The disc…

https://petri.com/windows-zero-days-bitlocker-privilege-controls/

5

🤖 ai The Decoder

65%

US Cyber Command races to deploy AI on top-secret networks

US Cyber Command has launched a task force to run AI models from OpenAI, Google, and others on the most classified Pentagon and NSA networks. The trigger: AI systems like Anthropic's Claude Mythos ca…

https://the-decoder.com/us-cyber-command-races-to-deploy-ai-on-top-secret-networks/

6

🤖 ai The Decoder

64%

OpenAI launches a ChatGPT Powerpoint plugin and warns it might accidentally delete your content

OpenAI brings ChatGPT directly into PowerPoint. A new beta plugin creates presentations from notes, documents, or images and edits existing slides. The add-in is available worldwide across all tiers.…

https://the-decoder.com/openai-launches-a-chatgpt-powerpoint-plugin-and-warns-it-might-accidentally-delete-your-content/

7

🔐 security Schneier on Security

63%

macOS Kernel Memory Corruption Exploit

A group used Anthropic’s Mythos AI model to help find a kernel memory corruption vulnerability and exploit on Apple’s M5. News article.

https://www.schneier.com/blog/archives/2026/05/macos-kernel-memory-corruption-exploit.html

8

📦 m365 Petri IT Knowledgebase

62%

Microsoft Seizes Websites And Servers Used To Issue Fake Code-Signing Certificates

Microsoft has disrupted a cybercrime network by seizing its websites and shutting down hundreds of virtual machines used to issue fake code‑signing certificates. These certificates helped ransomware …

https://petri.com/microsoft-fake-code-signing-network-ransomware/

9

🔐 security Schneier on Security

61%

CISA Security Leak

Crazy story: Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privi…

https://www.schneier.com/blog/archives/2026/05/cisa-security-leak.html

10

🔐 security SecurityWeek

60%

Microsoft Patches Exploited UnDefend and RedSun Defender Zero-Days

The bugs could be exploited to elevate privileges to System or create a denial-of-service (DoS) condition. The post Microsoft Patches Exploited UnDefend and RedSun Defender Zero-Days appeared first o…

https://www.securityweek.com/microsoft-patches-exploited-undefend-and-redsun-defender-zero-days/

11

🔐 security Krebs on Security

59%

Lawmakers Demand Answers as CISA Tries to Contain Data Leak

Lawmakers in both houses of Congress are demanding answers from the U.S. Cybersecurity & Infrastructure Security Agency (CISA) after KrebsOnSecurity reported this week that a CISA contractor intentio…

https://krebsonsecurity.com/2026/05/lawmakers-demand-answers-as-cisa-tries-to-contain-data-leak/

12

📦 m365 Petri IT Knowledgebase

59%

Microsoft Releases Rampart And Clarity Tools To Improve AI Agent Safety

AI systems are rapidly evolving from simple chat tools into powerful agents that can take real-world actions, which raises new and urgent safety challenges. In response, Microsoft has launched two op…

https://petri.com/microsoft-rampart-clarity-ai-safety-tools/

13

🔐 security SecurityWeek

57%

Google’s Surge in Chrome Vulnerability Discoveries Likely Driven by AI

More than 200 vulnerabilities patched in recent Chrome releases are marked as ‘reported by Google’. The post Google’s Surge in Chrome Vulnerability Discoveries Likely Driven by AI appeared first on S…

https://www.securityweek.com/googles-surge-in-chrome-vulnerability-discoveries-likely-driven-by-ai/

14

🤖 ai The Decoder

57%

Anthropic is about to become the first profitable AI lab

Anthropic is approaching its first profitable quarter, the Wall Street Journal reports - with a projected operating profit of $559 million on $10.9 billion in Q2 revenue. Just last summer, the compan…

https://the-decoder.com/anthropic-is-about-to-become-the-first-profitable-ai-lab/

15

🤖 ai The Decoder

57%

Google checks websites for llms.txt in new agentic browsing audit

Google is testing how well websites handle AI agents through a new experimental category called "Agentic Browsing" in its Lighthouse analysis tool. The article Google checks websites for llms.txt in …

https://the-decoder.com/google-tests-websites-for-llms-txt-and-agent-compatibility/