2026-05-29: Gogs zero-day enables remote code execution on 2,400+ Internet-exposed servers

Show Notes - 2026-05-29

Stories Covered

• Today:
• Gogs Zero-Day Allows Remote Code Execution [Critical Alerts]
• DAEMON Tools Supply Chain Attack (CVE-2026-8398) [Critical Alerts]
• Multiple Windows Zero-Days Under Active Exploitation (CVE-2026-33825, CVE-2026-41091, CVE-2026-45498) [Critical Alerts]
• GitHub and Nx Console Supply Chain Intrusions (CVE-2026-48027) [Critical Alerts]
• FortiClient EMS Vulnerability Exploited for Infostealer Deployment (CVE-2026-35616) [Critical Alerts]
• The Gentlemen Ransomware: Self-Propagating Go Encryptor [Ransomware & Extortion]
• 1,350 C2 Servers Across Middle East Infrastructure [Business & Infrastructure Threats]
• Azure Backup for AKS Privilege Escalation Flaw [Business & Infrastructure Threats]
• Romanian Cybercrime Operator Sentenced to 56 Months [Business & Infrastructure Threats]
• IBM and Red Hat Commit $5 Billion to "Project Lightwell" for Open Source Supply Chain Security [General Security News]
• MacGregor Voyage Data Recorder (VDR) G4e [Vulnerability Disclosures]
• KMW CCTV Security Cameras (CVE-2026-5386) [Vulnerability Disclosures]
• Perl Archive::Tar Vulnerabilities [Vulnerability Disclosures]
• Multiple Linux Kernel CVEs [Vulnerability Disclosures]
• bzip2 Off-by-One Vulnerability (CVE-2026-42250) [Vulnerability Disclosures]

CVEs Referenced

CVE-2024-39930, CVE-2024-39932, CVE-2024-39933, CVE-2025-8110, CVE-2026-33825, CVE-2026-35616, CVE-2026-40425, CVE-2026-41091, CVE-2026-42250, CVE-2026-42496, CVE-2026-42929, CVE-2026-42941, CVE-2026-42951, CVE-2026-44611, CVE-2026-45498, CVE-2026-45585, CVE-2026-46107, CVE-2026-46155, CVE-2026-46186, CVE-2026-46195, CVE-2026-46232, CVE-2026-48027, CVE-2026-5386, CVE-2026-8398, CVE-2026-9538

Read the full brief