2026-05-18: Windows zero-day MiniPlasma grants SYSTEM privileges on fully patched systems with PoC released

Show Notes - 2026-05-18

Stories Covered

• May 18, 2026
• Today:
• MiniPlasma Windows Zero-Day Enables SYSTEM Privilege Escalation (CVE-2025-62221, CVE-2020-17103) [Critical Alerts]
• NGINX CVE-2026-42945 Exploited in the Wild [Critical Alerts]
• openDCIM Critical Vulnerabilities Exploited [Critical Alerts]
• Tycoon2FA Hijacks Microsoft 365 Accounts via Device-Code Phishing [Business & Infrastructure Threats]
• Grafana Labs Confirms Breach After Source Code Theft [Business & Infrastructure Threats]
• First Shai-Hulud Worm Clones Emerge [Business & Infrastructure Threats]
• Pre-Stuxnet Fast16 Malware Tampered with Nuclear Weapons Simulations [Business & Infrastructure Threats]
• Indonesia Emerges as New Hub for Cyber Scam Operations [Business & Infrastructure Threats]
• Microsoft Confirms Windows 11 Security Update Install Issues (KB5089549) [Windows / AD Security]
• DirtyDecrypt Linux Root Escalation Flaw (CVE-2026-31635) [Vulnerability Disclosures]
• Pwn2Own Berlin 2026 Results [Vulnerability Disclosures]
• Linus Torvalds: AI-Powered Bug Hunters Have Made Linux Security Mailing List 'Almost Entirely Unmanageable' [General Security News]
• Former CISA Nominee Sean Plankey Named US CEO of Defense Startup [General Security News]
• South Korea Tests Deepfake Laws in June Local Elections [General Security News]

CVEs Referenced

CVE-2020-17103, CVE-2025-62221, CVE-2026-28515, CVE-2026-28516, CVE-2026-28517, CVE-2026-31635, CVE-2026-33825, CVE-2026-42945

Read the full brief