P2PInfect Botnet Compromises Kubernetes Clusters Through Exposed Redis Instances

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 21, 2026 A well-known botnet is now targeting cloud environments in a more calculated way than before. P2PInfect, a Rust-written peer-to-peer malware active since mid-2023, has been observed compromising …

GitHub Internal Repositories Breached Via Weaponized VS Code Extension

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 21, 2026 GitHub confirmed a significant security breach on May 18, 2026, after attackers leveraged a weaponized Visual Studio Code extension to compromise an employee’s device and exfiltrate data …

Nine-year-old Linux Kernel Vulnerability Let Attackers Exfiltrate SSH Private Keys

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly disclosed Linux kernel vulnerability, tracked as CVE-2026-46333, exposes a serious local privilege escalation flaw that has remained undetected for nearly nine years. Security researchers at the Qualys Threat …

New Microsoft Defender 0‑Days Actively Exploited in the Wild

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 21, 2026 Two newly disclosed Microsoft Defender vulnerabilities are being actively exploited in the wild, enabling local attackers to elevate privileges to SYSTEM and potentially disrupt endpoint protection across …

New NGINX 0-Day RCE “nginx-poolslip” Affects Millions of NGINX Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 21, 2026 A newly disclosed zero-day remote code execution (RCE) vulnerability, dubbed nginx-poolslip, has been identified in NGINX version 1.31.0, the latest stable release of the widely deployed web …

WantToCry Ransomware Abuses SMB Services to Remotely Encrypt Files

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 21, 2026 A ransomware strain called WantToCry has been targeting businesses by abusing a widely used file-sharing protocol to encrypt files without dropping any malware on the victim’s system. …

Two U.S. Executives Plead Guilty in India-Based Tech-Support Fraud Schemes

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 21, 2026 Two former executives of a U.S.-based call routing and analytics company have pleaded guilty to federal charges for knowingly enabling India-based call centers to defraud thousands of …

New GhostTree Attack Causing EDR Products to Hang and Leave Files Unscanned

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 21, 2026 A novel evasion technique called GhostTree, which exploits NTFS junctions to create recursive directory loops. Uncovered by Varonis Threat Labs, this method traps Endpoint Detection and Response …

Claude Code’s Network Sandbox Vulnerability Exposes User Credentials and Source Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 21, 2026 Anthropic’s Claude Code AI coding assistant harbored a critical network sandbox bypass for over five months, allowing attackers to exfiltrate credentials, source code, and environment variables from …

Gremlin Stealer Stores C2 URLs and Exfiltration Paths in Encrypted Resource Sections

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

May 21, 2026 A newly analyzed variant of the Gremlin stealer malware has raised alarms by hiding its command-and-control (C2) addresses and data exfiltration paths inside encrypted resource sections of …