2026-05-01: cPanel's CVE-2026-41940 authentication bypass is being actively exploited after months as a

Show Notes - 2026-05-01

Stories Covered

• Today:
• cPanel and WHM Authentication Bypass (CVE-2026-41940) [Critical Alerts]
• Linux Copy Fail Local Privilege Escalation (CVE-2026-31431) [Critical Alerts]
• Former Incident Responders Sentenced for BlackCat Attacks [Ransomware & Extortion]
• New Scattered Spider-Affiliated Extortion Groups [Ransomware & Extortion]
• PyTorch Lightning Supply Chain Attack [Business & Infrastructure Threats]
• SAP npm Packages Compromised in Mini Shai-Hulud Campaign [Business & Infrastructure Threats]
• Ruby Gems and Go Modules Supply Chain Attack [Business & Infrastructure Threats]
• Intercom-client npm Package Compromised [Business & Infrastructure Threats]
• AI Phishing Campaigns Dominate Threat Landscape [Business & Infrastructure Threats]
• 18 AI Browser Extensions Deliver RATs and Infostealers [Business & Infrastructure Threats]
• Gemini CLI Vulnerability Enabled Supply Chain Attacks [Business & Infrastructure Threats]
• Windows 11 KB5083631 Optional Update Released [Windows / AD Security]
• April KB5083769 Update Breaks Backup Software [Windows / AD Security]
• SonicWall Firewall Vulnerabilities [Vulnerability Disclosures]
• ABB Ability Symphony Plus PostgreSQL Vulnerabilities [Vulnerability Disclosures]
• ABB Ability OPTIMAX Azure AD Authentication Bypass [Vulnerability Disclosures]
• Versus Project Marketplace Operator Extradited [General Security News]
• Transnational Business Email Compromise Scheme [General Security News]
• 15-Year-Old Arrested in French Government Data Leak [General Security News]
• DPRK IT Worker Fraud and Insider Risk [General Security News]

CVEs Referenced

CVE-2023-39417, CVE-2023-5869, CVE-2024-30098, CVE-2025-14510, CVE-2026-0204, CVE-2026-0205, CVE-2026-0206, CVE-2026-31431, CVE-2026-41940

Indicators of Compromise

IP Addresses: 11.110.0.97, 11.118.0.63, 11.126.0.54, 11.132.0.29, 11.134.0.20, 11.136.0.5, 11.136.1.7, 6.5.5.2, 6.5.5.1

Read the full brief