Critrical cPanel flaw mass-exploited in "Sorry" ransomware attacks
2026-05-03T07:23:30Z•82c253b4c37e3496de08ea286a44692085add522bce4721fdf9635b3f5af3824
AzureBlackCatBluekitCVE-2026-41940ConsentFix v3FBIInstructureKB5083631KB5083769OAuth abuseSorry ransomwareWindows 11cPanelcargo-theftdata-breachlegal-sentencingmass exploitationphishing-kitransomware
What happened
Multiple security developments: a critical cPanel vulnerability (CVE-2026-41940) is being mass-exploited in "Sorry" ransomware campaigns to breach websites and encrypt data. A new automated OAuth abuse technique, dubbed ConsentFix v3, is targeting Azure tenants at scale. Other notable items include an Instructure cyber incident (with a related retraction), a new Bluekit phishing kit with AI-assisted features and 40+ templates, an FBI warning on a sharp rise in cyber-enabled cargo theft, Windows 11 updates and fixes (KB5083631; April KB5083769 causing third‑party backup failures), and several司法
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 82c253b4c37e3496de08ea286a44692085add522bce4721fdf9635b3f5af3824
- Enrichment time
- 2026-05-03T07:23:30Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.