⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
At 06:34am on 2 June 2026, an attacker logged on to a customer’s network. In a single automated burst, they switched on remote desktop and created a rogue administrator account.
At 06:34am on 2 June 2026, an attacker logged on to a customer's network.
At 06:34am on 2 June 2026, an attacker logged on to a customer’s network. In a single automated burst, they switched on remote desktop and created a rogue administrator account.
At 06:34am on 2 June 2026, an attacker logged on to a customer’s network. In a single automated burst, they switched on remote desktop and created a rogue administrator account.
F5 addressed a critical NGINX vulnerability (CVE-2026-42530) in the HTTP/3 module that can cause worker-process restarts and denial of service. In environments with weakened ASLR, the flaw may also lead to arbitrary code execution, making patching urgent for internet-facing deployments.
F5 has issued urgent security updates to address CVE-2026-42530, a critical use-after-free vulnerability in NGINX’s ngx_http_v3_module. This flaw allows remote, unauthenticated attackers to trigger worker-process restarts and denial of service (DoS) by exploiting a specially crafted HTTP/3 session.