2026-05-12: Linux systems face a second privilege escalation exploit in two weeks with Dirty Frag working

Show Notes - 2026-05-12

Stories Covered

• Today:
• Linux Dirty Frag Vulnerability (CVE-2026-43284, CVE-2026-43500) [Critical Alerts]
• Active Directory Certificate Services Exploitation [Critical Alerts]
• Instructure Pays Ransom to ShinyHunters [Ransomware & Extortion]
• The Gentlemen Ransomware Group Suffers Data Breach [Ransomware & Extortion]
• State of Ransomware in 2026 [Ransomware & Extortion]
• Checkmarx Jenkins Plugin Compromised by TeamPCP [Business & Infrastructure Threats]
• Mini Shai-Hulud Worm Spreads Across npm and PyPI [Business & Infrastructure Threats]
• GhostLock Tool Abuses Windows API for File Access Denial [Business & Infrastructure Threats]
• FleetWave Data Breach Confirmed [Business & Infrastructure Threats]
• State-Sponsored Actors: Long-Term Covert Access [Business & Infrastructure Threats]
• FCC Extends Foreign Router Support Deadline [Vulnerability Disclosures]
• OpenAI Launches Daybreak AI Security Platform [Vulnerability Disclosures]
• CrowdStrike Automated Leads: AI-Powered Threat Detection [Vulnerability Disclosures]
• GM Settles California CCPA Violation for $12.75M [General Security News]
• Apple and Google Launch Cross-Platform E2EE RCS [General Security News]
• DOJ Charges Premium Home Service with Fake Review Scheme [General Security News]
• Fake Claude Code Installers Deliver Credential Stealers [General Security News]

CVEs Referenced

CVE-2022-26923, CVE-2026-43284, CVE-2026-43500, CVE-2026-45321

Read the full brief