May 21, 2026

Threat hunters find Google API keys still usable 23 minutes after deletion

Plenty of time for cyber crims to grab data or hit you with a giant bill

HackerOne takes an axe to its bug bounty rewards

Critical flaw payouts slashed by more than 75%

Attackers spill plaintext passwords of 46k Myspace93 users after 2021 breach

Leakage blamed on treacherous friends exposed unencrypted credentials, email addresses

Cisco serves up yet another perfect 10 bug with Secure Workload admin flaw

Switchzilla says attackers could access sensitive data and make configuration changes across tenant boundaries through vulnerable internal APIs

Microsoft storms RAMPART, adds Clarity to agentic AI safety

Redmond open sources two tools for building and maintaining safer agents

Zombie user account let hackers control the city’s water

Failing to disable a former employee’s account was a huge mistake

Copyright © 2026 Lugapel