News Archives

Active Exploitation of cPanel CVE-2026-41940 Used to Install Filemanager Backdoor

Researchers say the threat actor “Mr_Rot13” is actively exploiting cPanel flaw CVE-2026-41940 to install a cross-platform backdoor called Filemanager, steal credentials and harvest sensitive data from compromised hosts.

May 12, 2026

Dirty Frag: New Linux Kernel LPE Chains Two Page-Cache Bugs to Gain Root on Major Distros

A newly disclosed Linux kernel local privilege escalation called Dirty Frag can yield root on many major distributions by combining two page-cache write flaws. Details, affected systems, origins, and temporary mitigations are covered.

May 9, 2026

Multiple Critical Flaws in vm2 Node.js Sandbox Allow Escape and Remote Code Execution

A set of critical vulnerabilities in the vm2 Node.js sandbox library lets attackers escape isolation and run arbitrary code. Users should upgrade to vm2 3.11.2.

May 7, 2026

Critical cPanel Flaw Exploited to Hit Government, Military and MSP Networks

A newly observed actor is exploiting a critical cPanel/WHM vulnerability (CVE-2026-41940) to compromise government, military and MSP hosting environments across multiple countries, using public PoCs and custom exploit chains to gain persistence and exfiltrate data.

May 4, 2026

CISA Adds Actively Exploited Linux Local-Root Bug CVE-2026-31431 to KEV

CISA has placed CVE-2026-31431, a local privilege escalation affecting many Linux kernels (aka Copy Fail), on its Known Exploited Vulnerabilities list. Patches are available; agencies must remediate by May 15, 2026.

May 3, 2026

Cybersecurity professionals sentenced to four years for involvement in BlackCat ransomware campaign

The U.S. Department of Justice sentenced two cybersecurity professionals to four years in prison for their involvement in BlackCat ransomware attacks carried out in 2023. Details on the defendants, conspiracy, payouts, and related convictions are summarized.

May 1, 2026