Daily Cybersecurity News - May 13, 2026

Linux kernel scores another page-cache LPE in the Dirty Frag family. Unprivileged locals grab root through ESP-in-TCP mishandling.

Fragnesia exploits logic flaws in XFRM ESP-in-TCP during skb coalescing. Attackers splice tainted frags into TCP queues, then AES-GCM decrypts corrupt page cache on setuid binaries like su. No CVE yet, public PoC overwrites su with ELF shellcode.

Hits systems loading esp4, esp6, or rxrpc modules across Ubuntu, RHEL, Fedora, Debian. Needs user namespaces for CAP_NET_ADMIN but no host privileges.

Corruption stays in page cache, leaves on-disk binary untouched.

Avada Builder has two nasty flaws that let low-priv users read sensitive files and unauth attackers run SQLi on a million WordPress sites.

CVE-2026-4782 gives subscribers arbitrary file reads like wp-config.php through a shortcode's custom_svg param lacking validation. CVE-2026-4798 is unauth time-based blind SQLi via product_order on WooCommerce remnants, CVSS 7.5.

Hits Avada Builder up to 3.15.2 across one million active installs. SQLi needs prior WooCommerce deactivation.

Full patches landed in version 3.15.3 yesterday.

LatAm Vibe hackers are using AI agents to build custom attack tools on the fly against Latin American targets.

They start with web shells after vuln scans, then prompt jailbroken AI like Anthropic's Claude for Python backdoors and scripts. These handle scanning, password spraying, and reverse tunnels. Focus hits Mexican government entities and Brazilian financial orgs for data theft.

Novel part is full-chain automation via vibe-hacking with dynamic code that dodges signatures. They mix it with standard open-source tunneling tools like Chisel and Impacket.

Shadow-Aether-040 compromised six Mexican government orgs from Dec 2025 to Jan 2026.

Spam bots flooded RubyGems with over 500 malicious packages, forcing the registry to suspend all new account registrations.

Attackers used bot accounts to push junk spam and packages carrying XSS exploits aimed at the platform itself. RubyGems yanked the packages and called it a DDoS-style hit, with no evidence of user compromises.

This platform-targeted spam is lazy compared to user-focused supply chain hits like the 2020 bitcoin stealers or recent Korean infostealers. No named actor behind it, just opportunistic bots.

Suspension started May 12 and will last another 2-3 days for rate limiting and WAF upgrades.

TeamPCP cloud criminals just unleashed Mini Shai-Hulud, a self-spreading worm that hijacks open-source dev packages.

They chain GitHub Actions flaws with orphaned commits to publish malicious updates carrying legit signatures, like in TanStack React Router with 12M weekly downloads. The payload uses Bun runtime to snag cloud creds, SSH keys, and exfils via Session app traffic.

Novel twist: valid SLSA provenance fools supply chain security since attackers own the CI pipeline. It's refined Shai-Hulud tradecraft, now hitting npm, PyPI, and more.

Campaign published 401 malicious versions across 170 packages in five hours on May 11.