EPISODE · May 18, 2026 · 24 MIN
2026-05-18: Windows zero-day MiniPlasma grants SYSTEM privileges on fully patched systems with PoC released
from Cyber Threat Brief
Show Notes - 2026-05-18 Stories Covered: - May 18, 2026 - Today: - MiniPlasma Windows Zero-Day Enables SYSTEM Privilege Escalation (CVE-2025-62221, CVE-2020-17103) (https://thehackernews.com/2026/05/miniplasma-windows-0-day-enables-system.html) - NGINX CVE-2026-42945 Exploited in the Wild (https://thehackernews.com/2026/05/nginx-cve-2026-42945-exploited-in-wild.html) - openDCIM Critical Vulnerabilities Exploited (https://thehackernews.com/2026/05/nginx-cve-2026-42945-exploited-in-wild.html) - Tycoon2FA Hijacks Microsoft 365 Accounts via Device-Code Phishing (https://www.bleepingcomputer.com/news/security/tycoon2fa-hijacks-microsoft-365-accounts-via-device-code-phishing/) - Grafana Labs Confirms Breach After Source Code Theft (https://www.securityweek.com/grafana-confirms-breach-after-hackers-claim-they-stole-data/) - First Shai-Hulud Worm Clones Emerge (https://www.securityweek.com/first-shai-hulud-worm-clones-emerge/) - Pre-Stuxnet Fast16 Malware Tampered with Nuclear Weapons Simulations (https://thehackernews.com/2026/05/pre-stuxnet-fast16-malware-tampered.html) - Indonesia Emerges as New Hub for Cyber Scam Operations (https://news.risky.biz/risky-bulletin-indonesia-emerges-as-a-new-hub-for-cyber-scams/) - Microsoft Confirms Windows 11 Security Update Install Issues (KB5089549) (https://www.bleepingcomputer.com/news/microsoft/microsoft-confirms-kb5089549-windows-11-security-update-install-issues/) - DirtyDecrypt Linux Root Escalation Flaw (CVE-2026-31635) (https://www.bleepingcomputer.com/news/security/exploit-available-for-new-dirtydecrypt-linux-root-escalation-flaw/) - Pwn2Own Berlin 2026 Results (https://www.bleepingcomputer.com/news/security/hackers-earn-1-298-250-for-47-zero-days-at-pwn2own-berlin-2026/) - Linus Torvalds: AI-Powered Bug Hunters Have Made Linux Security Mailing List 'Almost Entirely Unmanageable' (https://www.theregister.com/security/2026/05/18/linus-torvalds-says-ai-powered-bug-hunters-have-made-linux-security-mailing-list-almost-entirely-unmanageable/5241633) - Former CISA Nominee Sean Plankey Named US CEO of Defense Startup (https://cyberscoop.com/former-cisa-nominee-sean-plankey-named-us-ceo-of-defense-startup/) - South Korea Tests Deepfake Laws in June Local Elections (https://www.darkreading.com/vulnerabilities-threats/can-laws-stop-deepfakes-south-korea) CVEs Referenced: CVE-2020-17103, CVE-2025-62221, CVE-2026-28515, CVE-2026-28516, CVE-2026-28517, CVE-2026-31635, CVE-2026-33825, CVE-2026-42945 Full brief: https://carolinacleartech.com/brief/2026-05-18/
Embed this episode
What this episode covers
Show Notes - 2026-05-18 Stories Covered: - May 18, 2026 - Today: - MiniPlasma Windows Zero-Day Enables SYSTEM Privilege Escalation (CVE-2025-62221, CVE-2020-17103) (https://thehackernews.com/2026/05/miniplasma-windows-0-day-enables-system.html) - NGINX CVE-2026-42945 Exploited in the Wild (https://
NOW PLAYING
2026-05-18: Windows zero-day MiniPlasma grants SYSTEM privileges on fully patched systems with PoC released
No transcript for this episode yet
Similar Episodes
No similar episodes found.