A newly disclosed Linux kernel flaw dubbed “Dirty Frag” (also known as Copy Fail 2, CVE-2026-43284 and CVE-2026-43500) surfaced before patches were available and may already be leveraged in attacks. The disclosure highlights a high-risk window for Linux fleets, particularly multi-tenant and container-heavy environments. Admins should closely track vendor advisories, restrict untrusted local access where possible, and be ready to deploy kernel fixes and mitigations at short notice.
Source: SecurityWeek
Checkmarx Jenkins AST Plugin Compromised in Supply Chain Attack
A malicious version of Checkmarx’s Jenkins AST plugin was briefly published to the Jenkins Marketplace, potentially poisoning CI/CD pipelines that auto-update or rely on this integration. Organizations should verify plugin integrity and version history, audit build logs for anomalous behaviors, rotate any credentials accessed by affected jobs, and pin trusted plugin versions going forward.
Source: SecurityWeek
Official JDownloader Site Served Backdoored Installers to Windows and Linux Users
Between May 6–7, attackers compromised the official JDownloader website and swapped legitimate installers with malware-laced versions delivering a Python-based RAT. Any systems where these installers were executed should be treated as compromised: reimage if possible, reset credentials, check for persistence, and re-download software from verified, newly issued builds.
Source: Security Affairs
‘Bleeding Llama’: Critical Ollama Flaw Enables Remote Memory Leak
Researchers disclosed CVE-2026-7482, an out-of-bounds read in Ollama that allows unauthenticated remote attackers to leak the process’s memory—potentially exposing secrets across more than 300,000 reachable servers. Until fully patched, restrict network exposure, place Ollama behind authenticated reverse proxies, and monitor for abnormal requests or unexpected data in responses.
Source: The Hacker News
Malicious Hugging Face Repo Impersonates OpenAI Model, Spreads Rust Infostealer
A fake repository mimicking OpenAI’s Privacy Filter model briefly topped Hugging Face’s trending list and amassed 244,000+ downloads before takedown, delivering a Rust-based information stealer to Windows users. Teams should verify publishers, validate checksums, sandbox model artifacts, and enforce allowlists for model sources in ML pipelines.
Source: The Hacker News
Q1 2026 Ransomware: Fewer Groups, Higher Impact
Check Point Research reports ransomware volumes near historic highs in Q1, with 2,122 victims listed on leak sites—the second-highest Q1 on record. After years of fragmentation, activity is consolidating around fewer, more capable groups, increasing the blast radius of individual incidents. Organizations should stress-test incident response for large-scale extortion and intensify third‑party risk and data exfiltration controls.
Source: Check Point Blog
CISA Unveils ‘CI Fortify’ to Strengthen Critical Infrastructure Resilience
Amid escalating international threats, CISA introduced “CI Fortify,” a new roadmap aimed at boosting cybersecurity readiness across state and local critical infrastructure. Public-sector and utility leaders should align upcoming budget cycles with the program’s recommended safeguards and tap available federal services for assessments, incident response planning, and sector-specific guidance.
Source: GovTech
You May Also Be Interested In... - Trend Micro: AI-augmented campaigns target LATAM government and finance - Over 500 organizations hit in years-long phishing campaign - ‘Crimenetwork’ cybercrime marketplace taken down; admin arrested