News
New Windows 'Mini Plasma' Zero-Day Let Attackers Gain SYSTEM Access - Po C Released
5+ hour, 53+ min ago (433+ words) A critical Windows privilege escalation zero-day vulnerability dubbed "Mini Plasma" has emerged with a public proof-of-concept exploit that allows attackers to achieve SYSTEM-level privileges on fully patched Windows systems. Security researcher Nightmare-Eclipse released the weaponized exploit on Git Hub on…...
Sector-aware threat intel API: stop triaging hundreds of CVEs manually
3+ day, 12+ hour ago (499+ words) A Monday morning in a SOC A SOC (Security Operations Center) is the team that watches for. .. Tagged with cybersecurity, osint, python, devops....
Critical n8n Flaw Expose Automation Nodes to Full RCE
51+ min ago (378+ words) Three critical vulnerabilities have been disclosed in n8n, the popular open-source workflow automation platform, any one of which could allow an authenticated attacker to achieve remote code execution (RCE) or read arbitrary files from the host server. Published five days ago…...
Mini Plasma Zero-Day Hits Fully Patched Windows PCs
4+ hour, 39+ min ago (457+ words) The original discoverer is Chaotic Eclipse, who is also associated with the recent Yellow Key and Green Plasma vulnerabilities. The importance of Mini Plasma lies in the fact that SYSTEM access is nearly equivalent to possession of the encryption keys…...
Researcher Drops Mini Plasma Windows Exploit for Unpatched 2020 CVE
1+ hour, 15+ min ago (550+ words) The researcher dropped the Mini Plasma exploit that uses the original proof-of-concept (Po C) code targeting the bug. A security researcher has released an exploit targeting a Windows vulnerability disclosed in 2020, warning that it might have never been patched." The flaw,…...
Marimo Security Flaw Enables remote code execution Attacks
1+ hour, 25+ min ago (248+ words) A critical pre-authentication remote code execution (RCE) vulnerability has been discovered in Marimo, a widely used Python notebook framework, exposing data science and AI development environments to full system compromise. Tracked as'CVE-2026-39987, the flaw allows unauthenticated attackers to hijack a…...
1 Million Word Press Sites Affected by Avada Builder File Read and SQL Injection Flaws
3+ hour, 23+ min ago (383+ words) A widely used Word Press plugin powering over one million websites has been hit by two serious vulnerabilities that could allow attackers to'steal sensitive data and access server files. Security researchers warn that the flaws in the Avada Builder plugin…...
Hackers Exploit Critical NGINX RCE Vulnerability in the Wild
2+ hour, 3+ min ago (442+ words) A critical heap buffer overflow flaw in F5 NGINX, tracked as'CVE-2026-42945, has moved from disclosure to active exploitation in just three days, with threat actors already targeting internet-exposed servers before most organizations have had time to patch. Dubbed'NGINX Rift, CVE-2026-42945 was…...
Grafan Git Hub extortion, Microsoft rejects Azure report
18+ hour, 30+ min ago (501+ words) Cybersecurity News: Grafan Git Hub extortion, Microsoft rejects Azure report, Funnel Builder flaw CISO Series In today's cybersecurity news" Grafana Git Hub token breach leads to extortion attempt Grafana Labs disclosed that an attacker gained unauthorized access to part of…...
First Shai-Hulud Worm Clones Emerge
2+ hour, 8+ min ago (612+ words) At least one threat actor has adopted the recently released malware source code in attacks against NPM developers. The first Shai-Hulud worm clones emerged only days after Team PCP released the malware's source code on Git Hub, Ox Security reports....