MiniPlasma Windows 0-Day Enables SYSTEM Privilege Escalation on Fully Patched Systems
What's new: A newly disclosed Windows zero-day vulnerability, codenamed MiniPlasma, allows attackers to escalate privileges to SYSTEM on fully patched...
nsamag
Grafana GitHub Token Breach Led to Codebase Download and Extortion Attempt
What's new: Grafana has reported a breach where an unauthorized party accessed its GitHub environment using a compromised token, allowing...
CISA Admin Leaked AWS GovCloud Keys on Github
What's new: A contractor for the Cybersecurity & Infrastructure Security Agency (CISA) inadvertently exposed AWS GovCloud credentials and sensitive internal...
NSAuditor AI EE 0.6.3 Closes Alerting-Destination False-PASS in GuardDuty and Inspector2 Audit
What's new: Nsasoft US LLC has released NSAuditor AI Enterprise Edition v0.6.3, closing a critical substrate-without-sink false-PASS class in plugin...
NGINX CVE-2026-42945 Exploited in the Wild, Causing Worker Crashes and Possible RCE
What's new: A critical vulnerability in NGINX, tracked as CVE-2026-42945, has been actively exploited in the wild. This heap buffer...
