13 Jul 2026
By Mary

Infosec News Nuggets — July 13, 2026

Hackers Exploit Critical Auth Bypass in Gitea Docker Image: Attackers are actively abusing a critical flaw in the official Docker image for the self-hosted Git service Gitea, tracked as CVE-2026-20896, which ships with reverse-proxy authentication trusting an identity header from any source IP. That misconfiguration lets an unauthenticated internet client claim to be any user, including admins, and researchers say exploitation began less than two weeks before the bug was even publicly disclosed. With roughly…
Read More
19 Jun 2026
By Mary

InfoSec News Nuggets – 06/19/2026

F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution F5 released out-of-band security updates for two critical NGINX vulnerabilities — CVE-2026-42530 (CVSS 9.2), a use-after-free flaw in the HTTP/3 QUIC module, and CVE-2026-42055 (CVSS 9.2), a heap-based buffer overflow in the HTTP/2 proxy and gRPC modules — both exploitable by unauthenticated remote attackers under non-default but common configurations. Exploitation can cause NGINX worker process crashes and, on systems where ASLR is disabled…
Read More
12 Dec 2025
By Mary

InfoSec News Nuggets 12/12/2025

NANOREMOTE Malware Uses Google Drive API for Hidden Control on Windows Systems Researchers have disclosed a newly identified Windows backdoor called NANOREMOTE that abuses the Google Drive API for command‑and‑control functions. The malware can execute commands, transfer files, and steal data covertly by leveraging a legitimate cloud service channel, complicating detection and response.   CISA Flags Actively Exploited GeoServer XXE Flaw in Updated KEV Catalog The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a…
Read More