Category: Cyber Security News

Technical details and proof-of-concept exploit code are now available for CVE-2026-42945, a critical NGINX flaw that can cause denial of service and, with ASLR disabled, possible remote code execution. The vulnerability affects NGINX servers using rewrite and set directives and has been patched in F5’s latest releases. #CVE-2026-42945 #NGINX #F5 #ngx_http_rewrite_module…

OpenAI is responding to a supply chain attack that affected its signing keys and limited internal source code repositories, requiring macOS users to update their apps by June 12 to stay supported and protected. The broader campaign also hit TanStack, Mistral AI, LiteLLM, Mercor, and the European Commission, with TeamPCP linked…

The Federal Trade Commission will begin enforcing the Take Down Act on May 19, requiring platforms to remove nonconsensual deepfake media within 48 hours of a victim’s notice or face FTC fines and investigation. The policy applies to major services including X, Meta, TikTok, and others, and comes with a maximum civil penalty of $53,088 per violation. #TakeItDownAct #FTC #X #Grok

Colorado Governor Jared Polis commuted the prison sentence of former Mesa County election clerk Tina Peters, who was convicted in a major election-related data breach tied to the 2020 U.S. election. Peters was accused of stealing voting data and sharing it with Trump allies, while the case drew criticism from election and cybersecurity experts and cost Mesa County millions in fallout. #TinaPeters #JaredPolis #MesaCounty #DonaldTrump

A supply-chain attack has injected credential-stealing malware into malicious node-ipc versions on npm, affecting a package that is downloaded more than 690,000 times each week. The infostealer collects cloud and developer credentials, then exfiltrates the stolen data using DNS TXT queries after the maintainer account ‘atiertant’ was compromised. #node-ipc #npm #atiertant

Pwn2Own Berlin 2026’s second day saw competitors earn $385,750 by exploiting 15 unique zero-day vulnerabilities across products such as Windows 11, Microsoft Exchange, Red Hat Enterprise Linux for Workstations, and the NVIDIA Container Toolkit. The event also featured notable AI-targeted exploits against Cursor AI and OpenAI Codex, with Orange Tsai, DEVCORE Research Team, and other researchers collecting major bounties. #Windows11 #MicrosoftExchange #RedHatEnterpriseLinux #NVIDIAContainerToolkit #CursorAI #OpenAICodex #OrangeTsai #DEVCORE

A critical flaw in the Funnel Builder WordPress plugin is being actively exploited to inject malicious JavaScript into WooCommerce checkout pages and deploy a payment card skimmer. FunnelKit has fixed the issue in version 3.15.0.3 and recommends users update immediately and inspect External Scripts for rogue code. #FunnelBuilder #FunnelKit #WooCommerce #Sansec

CISA warned federal agencies to patch CVE-2026-20182 in Cisco SD-WAN systems by Sunday after exploitation was observed and a 10/10 severity flaw was confirmed. The vulnerability lets a remote attacker bypass authentication and gain administrative privileges, echoing a February campaign previously linked to active exploitation and emergency directives. #CVE-2026-20182 #CiscoSDWAN #CISA…

THORChain said a vault compromise led to the theft of more than $10 million in protocol-owned funds, while the network automatically halted signing activity to prevent further losses and protect user funds. The incident follows a series of major crypto thefts, including attacks on Drift and other platforms, highlighting continued pressure…

Bitdefender argues that the biggest security risk in many organizations is not malware, but the trusted administration tools and over-entitled endpoints attackers abuse to move inside the network. Its complimentary Internal Attack Surface Assessment uses GravityZone PHASR to identify and reduce those risks in 45 days, helping organizations shrink exposure without…

Cyera disclosed four flaws in OpenClaw, collectively named Claw Chain, that can be chained to steal data, escalate privileges, and maintain persistence. The issues affect OpenShell and OpenClaw’s access control model, and were fixed in OpenClaw version 2026.4.22. #ClawChain #OpenClaw #OpenShell #CVE-2026-44112 #CVE-2026-44113 #CVE-2026-44115 #CVE-2026-44118…

Turla has evolved its Kazuar backdoor into a modular P2P botnet designed for stealth, persistence, and long-term access on compromised systems. Microsoft says the new architecture uses Kernel, Bridge, and Worker modules to coordinate tasks, collect data, and exfiltrate information while reducing its visible footprint. #Turla #Kazuar #SecretBlizzard #FSB…

This weekly roundup covers major cybersecurity developments, including a data breach affecting Nvidia’s GeForce NOW users through GFN.am, new AI and encryption policy debates, and fresh attack campaigns targeting developers and organizations worldwide. It also highlights notable vulnerabilities and security updates from Google, Audi, Cisco, and the FBI’s warning after ShinyHunters’…

Microsoft is updating Edge so saved passwords will no longer be loaded into process memory in clear text at startup, reversing a behavior that a researcher had shown could expose credentials. The change follows disclosure by Tom Jøran Sønstebyseter Rønning and will roll out to all supported Edge channels as a defense-in-depth improvement. #Microsoft #Edge #TomJøranSønstebyseterRønning