Microsoft's Coreutils project brings Linux commands to Windows

2026-06-03T01:23:31Z3a5e083aa9e6d8e5fa76a5317bcfae0a424876e2a1edc4fd171f9ffa78cb66b4
CVE-2026-8206active-directory-discoveryai-toolingandroid-zero-daybrute-force-lockoutcisa-alertclickfixdashlanedrive-surgeedr-evasionfakeupdategoogle-patchinstagram-account-takeoverkirkimeta-ai-abusemiasmaminecraftnpmoracle-weblogicransomwarered-hatsupply-chainweedhackweehackwordpress

What happened

Multiple high-impact security incidents reported: a critical privilege-escalation bug in the Kirki WordPress plugin (CVE-2026-8206) is being actively exploited to hijack admin accounts; the WeedHack campaign has infected over 116,000 Minecraft systems; an AI-built ransomware toolkit automates Active Directory discovery and EDR evasion; Red Hat '@redhat-cloud-services' npm packages were compromised to distribute the Miasma credential‑stealer (supply-chain compromise); CISA warned of an actively exploited, high-severity Oracle WebLogic vulnerability; Google released June Android patches fixing 1

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
bleepingcomputer
Record identifier
3a5e083aa9e6d8e5fa76a5317bcfae0a424876e2a1edc4fd171f9ffa78cb66b4
Enrichment time
2026-06-03T01:23:31Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.