Critical Nginx UI auth bypass flaw now actively exploited in the wild

This collection highlights multiple high-impact security incidents and active exploits: a critical unauthenticated Nginx UI (MCP) auth-bypass is being actively exploited for full server takeover; CISA flagged a Windows Task Host privilege-escalation vulnerability under active abuse; and Microsoft pushed emergency/extended updates (including fixes for two zero-days) while some updates caused BitLocker recovery prompts. Threat activity includes the new AgingFly credential‑stealing malware targeting Chromium browsers and WhatsApp in attacks against Ukrainian government and hospitals, a large Word