CVE-2026-40372 2

Vulnerability (CVE)

Microsoft Patches Critical ASP.NET Core CVE-2026-40372 Privilege Escalation Bug

Microsoft released out-of-band updates for an ASP.NET Core vulnerability tracked as CVE-2026-40372, which carries a CVSS score of 9.1 out of 10.0 and is rated Important, crediting an anonymous researcher for the discovery. Microsoft said a regression in...

Vulnerabilities & Patching

⚡ Weekly Recap: Fast16 Malware, XChat Launch, Federal Backdoor, AI Employee Tracking & More

Cyber Risks The Hacker News

A new Lua-based malware framework called fast16, dating back to 2005, was built to target high-precision calculation software and subtly alter results, and analysis suggests it was active at least five years before Stuxnet. It is not known whether fast16...

Zero-Days & Exploits