🔑 BitLocker Bypass, 🌐 NGINX Rift RCE, 💰 Gentlemen Ransomware Scale, 🔐 Langflow Exploited, 🐧 Fragnesia Linux LPE, 🤖 AI Cyber Benchmarks Shattered

The NGINX Rift disclosure is the day's defining story. An 18-year-old heap buffer overflow in the rewrite module, present in every release since 2008 through 1.30.0, gives unauthenticated attackers a path to code execution on roughly a third of the web's sites. Found by AI-assisted analysis with a working PoC, the flaw is the strongest recent argument that disclosure-to-weaponization timelines are collapsing. NGINX Rift: 18-year-old heap buffer overflow enables unauthenticated RCE on ~33% of all websites

The Gentlemen's leaked internal database quantifies the initial-access market: roughly 14,700 compromised FortiGate appliances and more than 1,570 compromised corporate environments, far beyond the 330-plus victims publicly listed. Edge devices remain the soft underbelly, and the affiliate model scales that exposure. The Langflow exploitation behind the KeyHunter botnet shows the same pattern in AI infrastructure, with an unauthenticated flow-building endpoint leaking cloud credentials within minutes. The Gentlemen ransomware: leaked internal database reveals 14,700 compromised FortiGate devices

SandboxJS earned a perfect CVSS 10.0 for an escape to full host RCE, a reminder that any sandbox executing user-supplied JavaScript is a privilege boundary. The Linux kernel disclosures continue with Fragnesia, the third deterministic local privilege escalation in the same subsystem class in two weeks; the module blacklist mitigation from Dirty Frag covers it. Apache's HTTP/2 double-free and the WordPress Burst Statistics auth bypass are patch-now items, and the Composer token leak is a credential rotation exercise for CI pipelines.