Cyera Disclosed CVE-2026-7482 in Ollama on May 5. 300,000 Servers Exposed. Three API Calls Extract the Entire Process Memory. Pre-Auth, No Credentials, CVSS 9.1. Patch in 0.17.1. Bleeding Llama.Atarus Security TeamMay 60 min read
The long weekend in review: Glasswing found 10,000 vulnerabilities. The supply chain attacks didn't break for the holiday.
Trend Micro patched an actively exploited Apex One zero-day. Compromise the endpoint security server, own every endpoint it manages.
GitHub confirmed overnight: TeamPCP exfiltrated 3,800 internal repositories via a poisoned VS Code extension.
Comments