Security Bulletin

CVE: CVE-2026-5946 Title: Invalid handling of CLASS != IN Document version: 2.0 Posting date: 20 May 2026 Program impacted: BIND 9 Versions affected: BIND 9.11.0 -> 9.16.50 9.18.0 -> 9.18.48 9.20.0 -> 9.20.22 9.21.0 -> 9.21.21 BIND Supported Preview...

CVE: CVE-2026-3592 Title: Amplification vulnerabilities via self-pointed glue records Document version: 2.0 Posting date: 20 May 2026 Program impacted: BIND 9 Versions affected: BIND 9.11.0 -> 9.16.50 9.18.0 -> 9.18.48 9.20.0 -> 9.20.22 9.21.0 -> 9...

CVE: CVE-2026-3593 Title: Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation Document version: 2.0 Posting date: 20 May 2026 Program impacted: BIND 9 Versions affected: BIND 9.20.0 -> 9.20.22 9.21.0 -> 9.21.21 BIND Supported...

CVE: CVE-2026-3039 Title: BIND 9 server memory exhaustion during GSS-API TKEY negotiation Document version: 2.0 Posting date: 20 May 2026 Program impacted: BIND 9 Versions affected: BIND 9.0.0 -> 9.16.50 9.18.0 -> 9.18.48 9.20.0 -> 9.20.22 9.21.0 ->...

While the numbers are modest, the crackdown on cybercrime involved 13 countries in the MENA region, the largest law enforcement collaboration to date.

Five ways CISOs can prepare for consuming AI Bill of Materials and influence the direction of how they're generated.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

A brief overview of the forces at play that will get more organizations on board with creating and consuming AI bill of materials (BOMs).

Verizon's "2026 Data Breach Investigations Report" ("DBIR") finds that exploits are now involved in 31% of initial access for breaches, while patching lags too far behind the bad guys.

YellowKey, GreenPlasma, and MiniPlasma add to the growing list of vulnerabilities a security researcher disclosed over the past six weeks.

The agency's GitHub repository, publicly available since November 2025, was ironically named "Private-CISA."

The SHub Reaper stealer, which hides behind fake WeChat and Miro installers, marks a shift from ClickFix social engineering to Apple script-based execution.