Sveriges mest populära poddar
Cyber Threat Brief
NyheterTeknologi

2026-05-20: Microsoft faces a sixth zero-day disclosure in six weeks as researcher "Nightmare Eclipse" releases

19 min•20 maj 2026

Show Notes - 2026-05-20

Stories Covered

  • May 20, 2026
  • Today:
  • YellowKey BitLocker Bypass (CVE-2026-45585) [Critical Alerts]
  • Action: [Critical Alerts]
  • Drupal Core Security Release Tonight [Critical Alerts]
  • Action: [Critical Alerts]
  • CISA Credentials Exposed in Public GitHub Repository [Critical Alerts]
  • Action: [Critical Alerts]
  • GreenPlasma Windows Privilege Escalation [Windows / AD Security]
  • Action: [Windows / AD Security]
  • MiniPlasma: Six-Year-Old Vulnerability Still Exploitable [Windows / AD Security]
  • Action: [Windows / AD Security]
  • Microsoft Teams macOS Location Prompt Issue [Windows / AD Security]
  • Action: [Windows / AD Security]
  • ABB CoreSense Path Traversal (CVE-2025-3465) [Vulnerability Disclosures]
  • Action: [Vulnerability Disclosures]
  • Kieback & Peter DDC Building Controllers XSS (CVE-2026-4293) [Vulnerability Disclosures]
  • Action: [Vulnerability Disclosures]
  • ZKTeco CCTV Cameras Authentication Bypass (CVE-2026-8598) [Vulnerability Disclosures]
  • Action: [Vulnerability Disclosures]
  • ExifTool macOS Vulnerability (CVE-2026-3102) [Vulnerability Disclosures]
  • Action: [Vulnerability Disclosures]
  • Microsoft CVE Disclosures [Vulnerability Disclosures]
  • Action: [Vulnerability Disclosures]
  • Sophos Firewall Update Bricking Devices [Business & Infrastructure Threats]
  • Action: [Business & Infrastructure Threats]
  • PAN-OS GlobalProtect Portal Command Injection (CVE-2026-47612) [Business & Infrastructure Threats]
  • Action: [Business & Infrastructure Threats]
  • Ivanti Endpoint Manager Mobile (EPMM) Critical Vulnerabilities [Business & Infrastructure Threats]
  • Action: [Business & Infrastructure Threats]
  • Adobe ColdFusion Patches Critical Pre-Auth RCE [Business & Infrastructure Threats]
  • Action: [Business & Infrastructure Threats]
  • AI Vulnerability Discovery Accelerates [General Security News]
  • SentinelOne Announces Prompt Security for Agentic AI [General Security News]
  • Ransomware Tracker API Disruptions [General Security News]

CVEs Referenced

CVE-2020-17103, CVE-2025-3465, CVE-2026-3102, CVE-2026-4293, CVE-2026-43491, CVE-2026-43492, CVE-2026-43493, CVE-2026-45585, CVE-2026-47612, CVE-2026-8598

Indicators of Compromise

IP Addresses: 1.4.1.12

Read the full brief

Fler avsnitt av Cyber Threat Brief

Visa alla avsnitt av Cyber Threat Brief
2026-07-05: A U.S
•6 min
2026-07-04: A new Linux kernel privilege escalation bug called Bad Epoll achieves root from unprivileged
•22 min
2026-07-03: Anubis ransomware exploits Citrix Bleed 2 with CISA-mandated July 11 deadline
•24 min
2026-07-02: SharePoint RCE hits CISA's known exploited list with a Friday deadline
•28 min
2026-07-01: Citrix patches a high-severity NetScaler memory disclosure flaw reminiscent of CitrixBleed
•24 min
2026-06-30: Oracle E-Business Suite CVE-2026-46817 (CVSS 9.8) moved from patched-but-quiet to actively
•26 min
2026-06-20: CISA orders federal agencies to patch Splunk Enterprise by Sunday as active exploitation confirmed
•29 min
2026-06-19: CISA adds actively exploited Splunk vulnerability to its KEV catalog days after disclosure
•30 min
2026-06-18: FortiBleed exposes 73,000 Fortinet VPN credentials to a Russian-speaking threat group targeting
•32 min
2026-06-17: CISA gives federal agencies until tomorrow to patch an actively exploited cPanel plugin
•36 min

Cyber Threat Brief med Carolina Clear Tech, LLC finns tillgänglig på flera plattformar. Informationen på denna sida kommer från offentliga podd-flöden.