New Windows 'MiniPlasma' zero-day exploit gives SYSTEM access, PoC released

Multiple high-risk security developments reported by BleepingComputer: a new Windows privilege-escalation zero-day called “MiniPlasma” has a public proof-of-concept that yields SYSTEM on fully patched hosts; the Tycoon2FA phishing kit now supports device-code phishing to hijack Microsoft 365 accounts; a researcher alleges Microsoft silently fixed an Azure Backup for AKS issue without issuing a CVE; the Kazuar backdoor has been refactored into a modular P2P botnet by the Secret Blizzard group; several WordPress plugins (Funnel Builder, Avada Builder, Burst Statistics) are being actively abused—