Weekly Threat & Lab Roundup: cPanel Zero-Day, Linux Copy Fail LPE, GitHub RCE, and Momentum Fusion v3
This week’s threat landscape is defined by four words: patch everything, immediately. A cPanel authentication bypass has been exploited in the wild since February. A nine-year-old Linux kernel flaw gives reliable root without winning a race condition. GitHub Enterprise had a command injection bug triggered by a single git push. And the Windows Shell spoofing patch from February? Incomplete — attackers are still stealing NTLM hashes through LNK files. Meanwhile in the lab, Momentum Fusion v3 shipped with swing mode, Max found .env files with group-readable permissions, and the homelab security posture needs tightening. ...