All articles tagged with #exploitation
Worsening poverty in Iran is pushing more children into labor across sectors such as slaughterhouses, farms, and workshops, including hidden workplaces away from public view. Families rely on their kids’ earnings to survive, exposing them to health risks, malnutrition, violence and exploitation while they miss schooling, underscoring broader welfare weaknesses and rising unemployment.
King County prosecutors say court documents detail a Bellevue Lakemont residence where a 21-year-old allegedly ran a trafficking operation forcing several young women (one 17) to live there and stream content on OnlyFans and Chaturbate for 10–12 hours daily, confiscating earnings, using violence and threats, and even drugging some with Adderall; one victim says she was pressured to drop out of college. The suspect faces four counts of human trafficking, money laundering, and leading organized crime, with bail set at $5 million and charging decisions pending.
Security researchers say CVE-2026-42945, a heap buffer overflow in NGINX Open Source and NGINX Plus, is being actively exploited in the wild. The flaw can crash NGINX worker processes via crafted requests, with remote code execution possible only if ASLR is disabled and a specific rewrite configuration is present; despite ASLR generally enabled, estimates show up to 5.7 million internet-facing servers may be affected. Organizations should patch promptly, ensure ASLR remains enabled, and audit rewrite rules to mitigate risk while threat actors rapidly scan for vulnerable systems.
A critical authentication-bypass vulnerability CVE-2026-41940 in cPanel/WHM and WP Squared is being actively exploited in the wild; recent technical details and a PoC show CRLF injection in login/session handling that can grant control without a password. cPanel issued a patch on April 28, while mitigations include restarting cpsrvd, blocking ports 2083/2087/2095/2096 if patching isn’t immediate, and using provided detection scripts to verify compromise.
Russell Brand said on The Megyn Kelly Show that he had exploitative but consensual sex with a 16-year-old when he was 30, a claim raised as he faces rape and sexual assault charges dating from 1999–2009, with his trial now scheduled for October; he argues the relationships reflected a power imbalance and his past selfish behavior.
Russell Brand told Megyn Kelly that he had an exploitative, consensual sexual encounter with a 16-year-old when he was 30 and described his past behavior as selfish. He is facing a autumn trial at Southwark Crown Court on six accusations from six women—three rape charges, three sexual assaults and one indecent assault—while he denies all charges and remains on bail.
On the Megyn Kelly Show, Russell Brand says he slept with a 16-year-old when he was 30, calling it legal where he is from but exploitative due to power dynamics; he faces ongoing sexual assault and rape charges in London and has pleaded not guilty to multiple counts from 1999–2005, framing his past promiscuity as something to redeem while noting his sobriety and faith.
Russell Brand told Megyn Kelly that he slept with a 16-year-old when he was 30, calling the act exploitative and acknowledging a power imbalance. He noted that in Europe and the UK the age of consent is 16 and described his past behavior as selfish and immature. The piece also references rape and sexual assault charges Brand faced in 2025, for which he has pleaded not guilty.
A critical vulnerability in Nginx UI with MCP support (CVE-2026-33032) leaves the /mcp_message endpoint unauthenticated, allowing attackers to invoke privileged MCP actions, modify or reload nginx configuration, and take over the server. Exploitation is active in the wild; patches were released (2.3.4, followed by 2.3.6 as the latest) and thousands of exposed instances have been identified, so admins should update immediately.
Investigation Discovery's Boy Band Confidential pulls back the curtain on how the 1990s boy-band phenomenon thrived on predatory contracts and revenue skimming, with Lou Pearlman’s empire extracting control and money from groups like NSYNC and the Backstreet Boys. The documentary covers exploitation in contracts (high manager take, hefty recoupables), the industry’s racial and marketing biases, mental-health struggles among members, and disturbing abuse allegations against figures tied to the scene, including Pearlman and manager Joby Harte, along with the lawsuits, fraud charges, and eventual collapse that reshaped the era.
Sinners star Jayme Lawson praised Michael B. Jordan and Delroy Lindo for how they handled a slur at the BAFTAs, but she denounced the event as exploitative rather than inclusive, arguing that inviting people into spaces without real safety and resources isn’t true inclusion. She also criticized the BBC for cutting or censoring moments in their coverage (and referenced censorship of a separate “Free Palestine” moment), saying such edits undermine dignity and protection for Black artists who contributed to the night.
Jayme Lawson criticized the BAFTA incident in which a guest with Tourette’s shouted the N-word at Michael B. Jordan and Delroy Lindo, calling it exploitation and urging true inclusion with safety resources; she praised how the onstage duo handled the moment, condemned the BBC and BAFTA for carelessness in coverage, and tied the event to broader issues of dignity, safety, and representation highlighted at the NAACP Image Awards.
A California lawsuit accuses Crispin Glover of grooming a former model, luring her to Los Angeles, and holding her captive as a live‑in girlfriend for sex and unpaid labor, while allegedly controlling her movements and whereabouts and assaulting her; the plaintiff says she was eventually locked out of his home, leaving her homeless. The suit, filed in Superior Court of California, also alleges battery, fraud and wrongful eviction and seeks unspecified damages. Glover’s representatives deny the allegations, saying he intends to vigorously defend himself and noting that he previously was the victim of an assault by Jane Doe; a restraining order he filed against Jane Doe was later dismissed. The case references a 2024 incident after which LAPD was involved.
CISA added four flaws to the Known Exploited Vulnerabilities catalog due to active exploitation: CVE-2026-2441 (Chrome use-after-free), CVE-2024-7694 (TeamT5 ThreatSonar Anti-Ransomware arbitrary file upload leading to command execution), CVE-2020-7796 (Zimbra Collaboration Server SSRF), and CVE-2008-0015 (Windows Video ActiveX buffer overflow). Google confirms an in-the-wild exploit for CVE-2026-2441; GreyNoise documents about 400 IPs exploiting CVE-2020-7796 across several countries; the CVE-2008-0015 exploit can download additional malware like Dogkild and alter system files/hosts. The TeamT5 exploitation vector remains unclear. Federal agencies are urged to patch by March 10, 2026.
A man in his 60s from northern Sweden is suspected of exploiting his wife by selling sex with her to at least 120 men; in custody since October, he faces aggravated procuring charges, while two men who bought sex from the wife have already been charged and more are likely; Swedish law criminalizes buying sex and procuring it, with sellers treated as exploited; indictment against the husband is set for March 13 and the trial will follow.