Weekly Malware Roundup: JDownloader Hack & TrickMo Threat
JDownloader site compromised to distribute Python RAT. New TrickMo variant targets banking apps. Mr_Rot13 exploits CVE for backdoor access. Weekly malware roundup.
2026
Read More
NGINX CVE-2026-42945 Actively Exploited in the Wild
Critical NGINX vulnerability CVE-2026-42945 now under active attack. Heap buffer overflow affects versions 0.6.27-1.30.0. CVSS 9.2. Patch immediately.
Physical Phishing Letters Target Ledger Crypto Users
Scammers are now sending physical phishing letters to Ledger users. The attack uses QR codes to steal crypto seed phrases. Old-school mail meets new-school scams.
Grafana Labs Breach: Hackers Steal Code Via GitHub Token
Grafana Labs hit by security breach: hackers stole privileged GitHub token, downloaded private code, then demanded ransom. The company disclosed the incident publicly.
Grafana GitHub Token Breach Leads To Extortion Attempt
Grafana confirms unauthorized GitHub token breach — attackers downloaded codebase and attempted extortion. No customer data compromised.
First Public macOS Kernel Exploit Hits Apple M5 Chip
Apple M5 chip exploited for first time: researchers achieve kernel memory corruption on macOS 26.4.1 in just 5 days, bypassing hardware-level protections.
DEVCORE Wins Pwn2Own Berlin With 47 Zero-Days Found
DEVCORE dominates Pwn2Own Berlin 2026, claiming Master of Pwn title. 47 zero-days discovered, $1.3M paid out in three intense days of hacking competition.
Microsoft Denies Azure Flaw After Alleged Secret Patch
Microsoft accused of secretly patching Azure vulnerability after rejecting researcher’s report—no CVE issued. Company denies changes despite documented fix.
CISA Flags Actively Exploited Microsoft Exchange Zero-Day
CISA has added CVE-2026-42897, an actively exploited Microsoft Exchange Server XSS vulnerability, to its Known Exploited Vulnerabilities catalog. Federal agencies have until May 29, 2026 to remediate the flaw, which enables spoofing attacks via Outlook Web Access.
Russian APT Turla Evolves Kazuar Into Stealth P2P Botnet
Russian APT Turla transforms Kazuar malware into stealthy P2P botnet for long-term network persistence. Nation-state threat actors evolving tactics.