patching — Cybersecurity News

NGINX CVE-2026-42945 Exploited in the Wild, Causing Worker Crashes and Possible RCE

RedSide Security May 17, 2026 CVE 241 views

A critical NGINX vulnerability tracked as CVE-2026-42945 is now being actively exploited in the wild, just days after public disclosure. The flaw allows attackers to crash NGINX worker processes and potentially achieve remote code execution under specific conditions. At the same time, threat actors have also begun weaponizing multiple critical vulnerabilities in openDCIM to deploy PHP web shells and gain remote access to exposed systems.

cybersecurity infosec vulnerability patching hardening alerts exploitation malware exploit threat-actors news monitoring attack-prevention endpoint-security-threat-intelligence nginx cve rce opensource linux threat-detection

Continue reading: NGINX CVE-2026-42945 Exploited in the Wild, Causin…

First Public macOS Kernel Exploit on Apple M5 Prepared Using Mythos Preview in Five Days

RedSide Security May 17, 2026 Vulnerability 314 views

Security researchers have reportedly developed the first public macOS kernel exploit targeting Apple’s new M5 silicon, successfully bypassing the company’s hardware-based Memory Integrity Enforcement (MIE) protections. The exploit chain achieves full root access on macOS 26.4.1 using only standard system calls from an unprivileged local account, highlighting the growing impact of AI-assisted offensive security research.

cybersecurity infosec vulnerability patching hardening exploitation malware exploit threat-actors news apple ai gpt privilege-escalation bypass endpoint-security-threat-intelligence red-team

Continue reading: First Public macOS Kernel Exploit on Apple M5 Prep…

New BitUnlocker Downgrade Attack on Windows 11 Allows Access to Encrypted Disks in 5 Minutes

RedSide Security May 13, 2026 Vulnerability 248 views

Researchers have unveiled BitUnlocker, a new downgrade attack capable of bypassing Microsoft BitLocker encryption on patched Windows 11 systems in under five minutes. The attack abuses a flaw in the Windows Recovery Environment (WinRE) and a trusted legacy Secure Boot certificate to boot vulnerable components, allowing attackers with physical access to decrypt protected drives without triggering security alerts.

patching zero-day Cybersecurity Exploit active directory Windows

Continue reading: New BitUnlocker Downgrade Attack on Windows 11 All…