VulnHub

A newly discovered vulnerability, identified as CVE-2026-8153, poses a significant risk to Universal Robots' PolyScope 5 software used in industrial robot fleets. This flaw allows attackers to exploit the system through OS command injection, potentially compromising the operation of robotic systems. Organizations using these robots could face unauthorized access and manipulation of their automated processes, leading to operational disruptions or safety hazards. The issue highlights the need for companies to assess their systems and take proactive measures to safeguard their robotic operations. Immediate attention to this vulnerability is crucial for maintaining security in environments that rely on industrial automation.

Recent research from the University of Texas at Arlington and Louisiana State University has revealed that attackers can use publicly available Instagram posts to craft highly personalized phishing emails. By analyzing social media activity, these attackers can create messages that seem credible and tailored to individual recipients, making them more likely to fall for the scams. This development poses a significant challenge for both security teams and users, as the need for stolen databases is diminished. Instead, attackers can exploit readily available information to enhance their phishing tactics. Users need to be more cautious about the personal information they share online, as it can be weaponized against them in increasingly sophisticated ways.

A newly discovered zero-day vulnerability in Microsoft Exchange, tracked as CVE-2026-42897, poses a significant risk as it allows attackers to exploit cross-site scripting (XSS) to compromise Outlook Web Access (OWA) mailboxes. This vulnerability is reportedly under active attack, meaning that malicious actors are currently trying to exploit it in the wild. Organizations using Microsoft Exchange should be particularly vigilant, as the absence of an available patch leaves their systems exposed. Without immediate remediation, users could face unauthorized access to sensitive email communications. Companies are advised to implement security measures, such as input validation and monitoring for suspicious activity, until an official patch is released.

A researcher has released an exploit called MiniPlasma that targets a Windows vulnerability from 2020, identified as CVE-2020-17087, which remains unpatched. This exploit uses the original proof-of-concept code, and it has raised concerns among security experts about its potential use in real-world attacks. The vulnerability affects various versions of Windows, making a significant number of users and organizations vulnerable if they have not applied necessary updates. The release of this exploit could lead to increased risks for those systems still running the affected versions, as attackers may use it for unauthorized access or other malicious activities. Companies and users are urged to check their systems and apply any available patches to protect against potential exploitation.

A security researcher known as Chaotic Eclipse has disclosed a serious zero-day vulnerability in Windows called MiniPlasma, which allows attackers to gain SYSTEM privileges on fully updated Windows 11 systems. This flaw, affecting the 'cldflt.sys' file, was believed to have been patched back in 2020 under the CVE-2020-17103 designation, but it appears that the fix was either incomplete or not properly implemented. The existence of a proof-of-concept exploit for this vulnerability raises significant concerns for users and organizations, as it could allow malicious actors to escalate their privileges and potentially take control of affected systems. This issue affects all patched versions of Windows 11, meaning a wide range of users are at risk. Companies should prioritize reviewing their security protocols and consider additional monitoring to mitigate potential exploitation.

A recently discovered vulnerability in the Linux kernel's rxgk module allows attackers to escalate their privileges and gain root access on certain systems. This flaw has been patched, but a proof-of-concept exploit is now available, which can be used by malicious actors to take control of affected machines. Users of Linux systems, particularly those running versions that include the vulnerable module, are at risk. It's crucial for system administrators to apply the latest patches to protect against potential exploitation. The existence of an exploit in the wild raises significant concerns about the security of Linux environments, especially in sensitive applications.

A cybersecurity researcher has disclosed a serious vulnerability in Windows, known as 'MiniPlasma', which allows attackers to escalate their privileges to SYSTEM level on fully patched systems. This zero-day exploit poses a significant risk because it can enable unauthorized access to sensitive data and system controls. Users of Windows systems, particularly those in corporate environments, should be on high alert as this exploit can potentially be used in cyberattacks. The researcher has also released a proof-of-concept (PoC) for the exploit, which can facilitate its misuse by malicious actors. This situation underscores the need for immediate attention to system security measures and vigilance against potential exploitation.

Attackers are exploiting a vulnerability in Funnel Builder, a tool used by online stores, to inject e-skimmers. These malicious scripts can steal payment information from unsuspecting customers during transactions. This incident affects e-commerce platforms that utilize Funnel Builder, potentially putting sensitive customer data at risk. As the holiday shopping season approaches, the urgency to address this vulnerability increases, as attackers may ramp up their efforts to exploit it. Companies using this tool should prioritize patching the identified bug to protect their customers and maintain trust.

ESET has reported a new campaign by the hacking group known as Ghostwriter, which is targeting the Ukrainian government. The campaign starts with a spear-phishing email that contains a PDF attachment disguised as an official document from Ukrtelecom, a key telecommunications provider in Ukraine. This type of attack aims to trick recipients into opening the attachment, potentially leading to further malicious activity. The focus on Ukrainian government entities indicates a continued effort by cybercriminals to exploit vulnerabilities in the region, particularly amid ongoing geopolitical tensions. Such attacks can undermine trust in government communications and disrupt essential services.