The Brutalist Report

Bleeping Computer

• Critical Nginx UI auth bypass flaw now actively exploited in the wild [46d]
• New AgingFly malware used in attacks on Ukraine govt, hospitals [46d]
• WordPress plugin suite hacked to push malware to thousands of sites [46d]
• Signed software abused to deploy antivirus-killing scripts [46d]
• Microsoft pays $2.3M for cloud and AI flaws at Zero Day Quest [46d]
• CISA flags Windows Task Host vulnerability as exploited in attacks [46d]
• Rolling Networks: Securing the Transportation Sector [46d]
• Microsoft: April updates trigger BitLocker key prompts on some servers [47d]
• Microsoft fixes bug behind Windows Server 2025 automatic upgrades [47d]