2026-05-11: Google catches the first confirmed AI-developed zero-day before mass exploitation

Show Notes - 2026-05-11 Stories Covered: - Today: - cPanel CVE-2026-41940 Under Active Exploitation to Deploy Filemanager Backdoor (https://thehackernews.com/2026/05/cpanel-cve-2026-41940-under-active.html) - Google Detects First AI-Developed Zero-Day Exploit (2FA Bypass) (https://cloud.google.com/blog/topics/threat-intelligence/ai-vulnerability-exploitation-initial-access/) - EtherRat and TukTuk C2 End in The Gentlemen Ransomware (https://thedfirreport.com/2026/05/11/flash-alert-etherrat-and-tuktuk-c2-end-in-the-gentleman-ransomware/) - The State of Ransomware Q1 2026: Consolidation and The Gentlemen's Breakout (https://research.checkpoint.com/2026/the-state-of-ransomware-q1-2026/) - Checkmarx Jenkins AST Plugin Compromised in Supply Chain Attack (https://www.securityweek.com/checkmarx-jenkins-ast-plugin-compromised-in-supply-chain-attack/) - Build Application Firewalls Aim to Stop Supply Chain Attacks (https://www.securityweek.com/build-application-firewalls-aim-to-stop-the-next-supply-chain-attack/) - Why Changing Passwords Doesn't End an Active Directory Breach (https://www.bleepingcomputer.com/news/security/why-changing-passwords-doesnt-end-an-active-directory-breach/) - AI-Augmented Threat Operations: Autonomous Malware and Defense Evasion (https://cloud.google.com/blog/topics/threat-intelligence/ai-vulnerability-exploitation-initial-access/) - FCC Relaxes Foreign Router Ban to Allow Security Updates Until 2029 (https://news.risky.biz/risky-bulletin-fcc-relaxes-foreign-router-ban-to-allow-for-security-updates/) - ShinyHunters Disrupts US Schools via Instructure Canvas Platform (https://news.risky.biz/risky-bulletin-fcc-relaxes-foreign-router-ban-to-allow-for-security-updates/) - Microsoft Security Update Guide - Linux Kernel CVEs (https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31706) CVEs Referenced: CVE-2025-55182, CVE-2026-31706, CVE-2026-31707, CVE-2026-31709, CVE-2026-31712, CVE-2026-41940, CVE-2026-42246, CVE-2026-43338 Full brief: https://carolinacleartech.com/brief/2026-05-11/