SecurityTicks

MiniPlasma Windows 0-Day Enables SYSTEM Privilege Escalation on Fully Patched Systems 2026-05-18 at 12:08 By Chaotic Eclipse, the security researcher behind the recently disclosed Windows flaws, YellowKey and GreenPlasma, has released a proof-of-concept (PoC) for a Windows privilege escalation zero-day flaw that grants attackers SYSTEM privileges on fully patched Windows systems. Codenamed MiniPlasma, the vulnerability

Pre-Stuxnet Fast16 Malware Tampered with Nuclear Weapons Simulations 2026-05-18 at 12:08 By A new analysis of the Lua-based fast16 malware has confirmed that it was a cyber sabotage tool designed to tamper with nuclear weapons testing simulations. According to Broadcom-owned Symantec and Carbon Black teams, the pre-Stuxnet tool was engineered to corrupt uranium-compression simulations that

NGINX CVE-2026-42945 Exploited in the Wild, Causing Worker Crashes and Possible RCE 2026-05-17 at 18:32 By A newly disclosed security flaw impacting NGINX Plus and NGINX Open has come under active exploitation in the wild, days after its public disclosure, according to VulnCheck. The vulnerability, tracked as CVE-2026-42945 (CVSS score: 9.2), is a heap buffer

AI advances are breaking into the physical world – and robots will soon learn how to do your washing and ironing 2026-05-17 at 16:09 By Michael Kaplan A tech VC said, physical AI is “the challenge of figuring out how to reinvent the physical world. It’s a big challenge.” In describing Project Prometheus, he added,

Grafana GitHub Token Breach Led to Codebase Download and Extortion Attempt 2026-05-17 at 14:39 By Grafana has disclosed that an “unauthorized party” obtained a token that granted them the ability to access the company’s GitHub environment and download its codebase. “Our investigation has determined that no customer data or personal information was accessed during this

Funnel Builder Flaw Under Active Exploitation Enables WooCommerce Checkout Skimming 2026-05-16 at 19:49 By A critical security vulnerability impacting the Funnel Builder plugin for WordPress has come under active exploitation in the wild to inject malicious JavaScript code into WooCommerce checkout pages with the goal of stealing payment data. Details of the activity were published

Fast16: Pre-Stuxnet Sabotage Tool Was Built to Subvert Nuclear Weapons Simulations 2026-05-16 at 17:33 By Threat Hunter Team New analysis confirms the targeted applications and reveals fast16 was tailored to corrupt uranium-compression simulations central to nuclear weapon design. This article is an excerpt from SECURITY.COM View Original Source