Week in review: cPanel vulnerability actively exploited, DigiCert breach, LinkedIn job scams
2026-05-10T08:51:51Z•39ed86abf9cf7541c23d575939e29a10d1c7b7dda11c41239614e1dd50ffa116
DigiCertLinkedIn-scamsandroid-studioanthropic/claudecPanelcloud-securitycopy-faildirty-fragivanti-epmmlinuxlocal-privilege-escalationopenai-gpt-5.5-cyberplay-policy-insightsremote-code-executionrxrpcsapsnykthreat-researchxfrmzero-day
What happened
This week’s roundup covers multiple active threats and security product moves: a cPanel vulnerability is being actively exploited alongside a DigiCert breach and LinkedIn job-scam activity. Notable vulnerabilities include the Linux “Dirty Frag” local privilege escalation (CVE-2026-43284 — patched; CVE-2026-43500 — unpatched/reserved) with public PoC, and an Ivanti EPMM zero-day (CVE-2026-6973) allowing remote code execution and observed in limited exploitation. Industry updates include Google adding Play Policy Insights to Android Studio, Snyk integrating Anthropic Claude for AI-native app sec
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- helpnetsecurity
- Record identifier
- 39ed86abf9cf7541c23d575939e29a10d1c7b7dda11c41239614e1dd50ffa116
- Enrichment time
- 2026-05-10T08:51:51Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.