New Windows zero-day, Coca-Cola&#x27;s Fairlife hit by ransomware, and a core WordPress RCE David Shipley covers a new Windows zero-day disclosure from &quot;Nightmare Eclipse&quot; called LegacyHive, a local privilege escalation flaw in the Windows User Profile Service that could be weaponized despite a stripped-back public release, as Microsoft investigates and sets a Patch Tuesday record with 570 fixes including two exploited zero-days. Coca-Cola suspended U.S. production at its Fairlife dairy unit after a ransomware attack, with scope still being assessed and the Food and Ag ISAC warning the sector has seen about 205 attacks this year. Abbott faces two separate breach claims: ShinyHunters alleges vishing-led SSO compromise and massive data theft from legacy systems, while Shadowbytes claims access via LabCentral credentials, which Abbott disputes as non-sensitive. The episode also highlights Conti leak revelations about healthcare targeting and details a core WordPress bug chain (WP_2Shell) enabling unauthenticated RCE, now patched in 6.9.5 and 7.0.2. 00:00 Sponsor NordLayer 00:36 Headlines Preview 01:05 Windows Zero Day LegacyHive 03:35 Record Patch Tuesday 04:22 Fairlife Ransomware Shutdown 05:49 Abbott Dual Breach Probes 08:09 Conti Leaks Healthcare Cruelty 09:33 WordPress Core RCE WP 2Shell 11:29 Wrap Up And Listener Notes 12:06 Sponsor Message NordLayer

Wordpress RCE, New Windows 0-day and Coca-Cola's Fairline ransomed

Cybersecurity Today

Cybersecurity Today is brought to you by NordLayer. Teams today work across multiple tools and devices, but security often remains fragmented, and this is exactly what NordLayer can help you address. NordLayer gives your company centralized control over access by individuals and teams and keeps connection secure from anywhere with no additional hardware required.

Visit nordlayer.com slash cybersecurity today and use the discount code NLSUMMER26 for a special discount on your purchase. Microsoft's Serial Tormentor drops another zero day. A ransomware attack shuts down Coca-Cola's Fairlife milk lines. Abbott is fighting two breaches at once. Leaked ransomware chats reveal heartless attacks on healthcare.

And a WordPress flaw that turns an anonymous web request into code execution. This is Cybersecurity Today, and I'm your host, David Shipley. Let's get started. Microsoft's most persistent tormentor is back. Nightmare Eclipse dropped another Windows zero day on Tuesday, and true to form, they timed it to land right after Microsoft shipped its monthly patches,

maximizing the window before Redmond can write and distribute any fixes. This one's called Legacy Hive. It's a local privilege escalation flaw in the Windows User Profile Service, and it abuses the way Windows loads registry hives. Windows hives are the files on the disk that store the registry, the database Windows uses to hold configuration for the system, installed applications, and individual user profiles.

Each user gets their own hive, holding their personal settings. In practice, a standard user can mount another user's hive, including an administrator's, into their own class's root. For an attacker who's already inside a network, that's quite useful. But it's not the haymaker Nightmare Eclipse promised. Back in June, they teased a, quote, bone-shattering, end quote, drop that would deliver full system compromise.

Wordpress RCE, New Windows 0-day and Coca-Cola's Fairline ransomed

Read the full transcript

The candid version is on a podcast,
not the earnings call.

Wordpress RCE, New Windows 0-day and Coca-Cola's Fairline ransomed

Read the full transcript

The candid version is on a podcast, not the earnings call.

The candid version is on a podcast,
not the earnings call.