Attackers are exploiting critical NGINX vulnerability (CVE-2026-42945)

This batch highlights multiple high-impact security developments. A critical NGINX vulnerability (CVE-2026-42945, “NGINX Rift”) is being actively exploited to trigger denial-of-service and potentially unauthenticated remote code execution via specially crafted HTTP requests. Grafana Labs disclosed a GitHub breach where attackers accessed and downloaded the company’s codebase. INTERPOL’s Operation Ramz disrupted regional phishing/fraud networks, resulting in 201 arrests and seizures. New research (Microsoft + Institute of Science Tokyo) describes MetaBackdoor, an LLM backdoor technique that can