2026-05-18: Windows zero-day MiniPlasma grants SYSTEM privileges on fully patched systems with PoC released episode artwork

EPISODE · May 18, 2026 · 24 MIN

2026-05-18: Windows zero-day MiniPlasma grants SYSTEM privileges on fully patched systems with PoC released

from Cyber Threat Brief

Show Notes - 2026-05-18 Stories Covered: - May 18, 2026 - Today: - MiniPlasma Windows Zero-Day Enables SYSTEM Privilege Escalation (CVE-2025-62221, CVE-2020-17103) (https://thehackernews.com/2026/05/miniplasma-windows-0-day-enables-system.html) - NGINX CVE-2026-42945 Exploited in the Wild (https://thehackernews.com/2026/05/nginx-cve-2026-42945-exploited-in-wild.html) - openDCIM Critical Vulnerabilities Exploited (https://thehackernews.com/2026/05/nginx-cve-2026-42945-exploited-in-wild.html) - Tycoon2FA Hijacks Microsoft 365 Accounts via Device-Code Phishing (https://www.bleepingcomputer.com/news/security/tycoon2fa-hijacks-microsoft-365-accounts-via-device-code-phishing/) - Grafana Labs Confirms Breach After Source Code Theft (https://www.securityweek.com/grafana-confirms-breach-after-hackers-claim-they-stole-data/) - First Shai-Hulud Worm Clones Emerge (https://www.securityweek.com/first-shai-hulud-worm-clones-emerge/) - Pre-Stuxnet Fast16 Malware Tampered with Nuclear Weapons Simulations (https://thehackernews.com/2026/05/pre-stuxnet-fast16-malware-tampered.html) - Indonesia Emerges as New Hub for Cyber Scam Operations (https://news.risky.biz/risky-bulletin-indonesia-emerges-as-a-new-hub-for-cyber-scams/) - Microsoft Confirms Windows 11 Security Update Install Issues (KB5089549) (https://www.bleepingcomputer.com/news/microsoft/microsoft-confirms-kb5089549-windows-11-security-update-install-issues/) - DirtyDecrypt Linux Root Escalation Flaw (CVE-2026-31635) (https://www.bleepingcomputer.com/news/security/exploit-available-for-new-dirtydecrypt-linux-root-escalation-flaw/) - Pwn2Own Berlin 2026 Results (https://www.bleepingcomputer.com/news/security/hackers-earn-1-298-250-for-47-zero-days-at-pwn2own-berlin-2026/) - Linus Torvalds: AI-Powered Bug Hunters Have Made Linux Security Mailing List 'Almost Entirely Unmanageable' (https://www.theregister.com/security/2026/05/18/linus-torvalds-says-ai-powered-bug-hunters-have-made-linux-security-mailing-list-almost-entirely-unmanageable/5241633) - Former CISA Nominee Sean Plankey Named US CEO of Defense Startup (https://cyberscoop.com/former-cisa-nominee-sean-plankey-named-us-ceo-of-defense-startup/) - South Korea Tests Deepfake Laws in June Local Elections (https://www.darkreading.com/vulnerabilities-threats/can-laws-stop-deepfakes-south-korea) CVEs Referenced: CVE-2020-17103, CVE-2025-62221, CVE-2026-28515, CVE-2026-28516, CVE-2026-28517, CVE-2026-31635, CVE-2026-33825, CVE-2026-42945 Full brief: https://carolinacleartech.com/brief/2026-05-18/

Episode metadata supplied by the publisher feed · Published May 18, 2026

Embed this episode

Show Notes - 2026-05-18 Stories Covered: - May 18, 2026 - Today: - MiniPlasma Windows Zero-Day Enables SYSTEM Privilege Escalation (CVE-2025-62221, CVE-2020-17103) (https://thehackernews.com/2026/05/miniplasma-windows-0-day-enables-system.html) - NGINX CVE-2026-42945 Exploited in the Wild (https://

Distinct summary based on available episode metadata or transcript content.

NOW PLAYING

2026-05-18: Windows zero-day MiniPlasma grants SYSTEM privileges on fully patched systems with PoC released

0:00 24:14

No transcript for this episode yet

We transcribe on demand. Request one and we'll notify you when it's ready — usually under 10 minutes.

No similar episodes found.

Frequently Asked Questions

How long is this episode of Cyber Threat Brief?

This episode is 24 minutes long.

When was this Cyber Threat Brief episode published?

This episode was published on May 18, 2026.

Can I download this Cyber Threat Brief episode?

Yes. Use the download control on the episode player to save the publisher-provided media file.
URL copied to clipboard!