Pluto Security — Cyber Attacks, Breaches & Threat Activity

Related Threat Clusters

• Critical NGINX UI Vulnerability CVE-2026-33032 Under Active Exploitation

  A critical vulnerability in the nginx-ui web server management tool, tracked as CVE-2026-33032, has been actively exploited since March 2026. This flaw allows attackers to bypass authentication on the /mcp_message…

  22 articles · Updated April 15, 2026
• Critical RCE Vulnerability in Hugging Face Transformers Library Disclosed

  A critical remote code execution (RCE) vulnerability has been identified in the Hugging Face Transformers library, tracked as CVE-2026-4372. This flaw allows attackers to execute arbitrary code during model loading by…

  6 articles · Updated June 4, 2026

Recent Intelligence Reports

• Hugging Face Transformers RCE flaw enables stealthy compromise via AI model configs — Csoonline · June 4, 2026
• Critical nginx UI tool vulnerability opens web servers to full compromise — Csoonline · April 15, 2026

Related Entities