Daily Threat Briefing — May 13, 2026

📰 Cybersecurity News Headlines

Top stories from leading cybersecurity publications as of May 13, 2026.

1. US govt seeks Instructure testimony on massive Canvas cyberattack
   — Bleeping Computer
   
   The U.S. House Committee on Homeland Security is calling on Instructure executives to testify about two cyberattacks by the ShinyHunters ext…
2. Patch Tuesday, May 2026 Edition
   — Krebs on Security
   
   Artificial intelligence platforms may be just as susceptible to social engineering as human beings, but they are proving remarkably good at …
3. It's Patch Tuesday for Microsoft and Not a Zero-Day In Sight
   — Dark Reading
   
   It's the first time in two years with no zero-days. But with 137 flaws to patch, including nine critical ones, admins still have plenty of w…
4. UK fines water supplier $1.3M for exposing data of 664k customers
   — Bleeping Computer
   
   The Information Commissioner's Office has fined South Staffordshire Water Plc and parent company South Staffordshire Plc £963,900 ($1.3 mil…
5. Webinar: Fixing the gaps in network incident response
   — Bleeping Computer
   
   IT teams often struggle to quickly coordinate responses across disparate systems during network incidents. This upcoming webinar explores ho…
6. Signal adds security warnings for social engineering, phishing attacks
   — Bleeping Computer
   
   Signal has introduced new in-app confirmations and warning messages as additional safeguards against phishing and social engineering attempt…
7. Microsoft May 2026 Patch Tuesday, (Tue, May 12th)
   — SANS ISC
   
   Today's Microsoft patch Tuesday fixes 137 different vulnerabilities. In addition, the update addresses 137 Chromium-relat…
8. New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution
   — The Hacker News
   
   Exim has released security updates to address a severe security issue affecting certain configurations that could enable memory corruption a…
9. RubyGems Suspends New Signups After Hundreds of Malicious Packages Are Uploaded
   — The Hacker News
   
   RubyGems, the standard package manager for the Ruby programming language, has temporarily paused account sign ups following what has been de…
10. Hugging Face Packages Weaponized With a Single File Tweak
    — Dark Reading
    
    A tokenizer library file present in Hugging Face AI models can be manipulated to hijack the model's outputs and exfiltrate data.
11. New TrickMo Variant Uses TON C2 and SOCKS5 to Create Android Network Pivots
    — The Hacker News
    
    Cybersecurity researchers have flagged a new version of the TrickMo Android banking trojan that uses The Open Network (TON) for command-and-…
12. 20 Leaders Who Built the CISO Era: 2 Decades of Change
    — Dark Reading
    
    As part of Dark Reading's 20th anniversary special coverage, we profile the CISOs, founders, researchers, criminals, and policymakers who re…

Generated by HiveNet.ai Threat Intelligence Platform · May 13, 2026 · Sources: The Hacker News, Bleeping Computer, Krebs on Security, Dark Reading, SANS ISC