Tag: privilege escalation
127 articles
Researchers Expose OpenBSD Root Exploit Chaining Decades-Old Flaws
Researchers have uncovered a major vulnerability in OpenBSD 7.9, cleverly chaining two decades-old flaws to create a local root exploit that can give hackers unrestricted access. By combining an integer overflow with a separate kernel flaw, attackers can gain root control in a surprisingly simple yet effective hack.
Microsoft Disrupts 1,413 Vulnerabilities, Fixes Exploited Windows Shell Bug
Microsoft just dropped a record-breaking Patch Tuesday update, tackling a whopping 1,413 vulnerabilities - and yes, that includes a critical Windows Shell bug that's already being exploited. This massive release underscores a new normal in cybersecurity: hundreds of fixes are no longer an exception, but the baseline.
Ivanti Zero-Days Exploited for Root Access
Hackers are on the loose, exploiting three Ivanti zero-day vulnerabilities to gain root access to sensitive systems - and they don't even need a login to do it. This alarming exploit chain allows attackers to run commands with full system privileges, putting organizations at serious risk.
Microsoft Exchange Flaw Exposes Mailboxes to Authenticated Attackers
A newly discovered flaw in Microsoft Exchange Server could put your mailboxes at risk, allowing authenticated attackers to elevate their privileges and gain unauthorized access across your network. Microsoft has urgently released a security update to patch this high-severity vulnerability, rated 8.8 on the CVSS scale.
Zero-Days Exploited in Agentic AI Attack on Dutch Vulnerability Disclosure Institute
In a shocking cyberattack, hackers exploited zero-day vulnerabilities to hijack sessions, run code remotely, and escalate privileges in mere seconds, targeting the Dutch Vulnerability Disclosure Institute, a volunteer-run nonprofit dedicated to ethical vulnerability disclosure. The Institute's own expertise and swift incident response actions ultimately thwarted the attack.
Zero-days in Zammad ticketing system enable AI-driven network breach
In a shocking breach, two zero-day vulnerabilities in the Zammad ticketing system were exploited in tandem to hijack sessions, run code remotely, and escalate privileges to root in mere seconds. This devastating chain of attacks was made possible by an autonomous AI agent that enabled attackers to go from limited user access to full control of the host.
Kubernetes Flaw Exposes GCP Organizations to Privilege Escalation
Google downplays a Kubernetes flaw dubbed ConfigConfusion, which researchers say could allow privilege escalation in GCP organizations, as simply "working as designed" despite concerns from the security community. The issue arises from a handoff in authority between GitOps and Google Kubernetes Config Connector.
cPanel Flaw Lets Hosting Accounts Run Code as Root
A critical cPanel flaw gives any hosting account user unrestricted power over the server, allowing them to run code as root and take full control. This urgent vulnerability was disclosed by cPanel on September 22, along with two other significant security issues.
Microsoft Fixes Critical Azure AI Foundry Flaw Enabling Privilege Escalation
Microsoft just patched a critical flaw in Azure AI Foundry that allowed unauthorized attackers to escalate privileges over a network - a vulnerability that earned a perfect 10.0 CVSS score for its severity. Thankfully, there's no evidence it's been exploited in the wild... yet.
Google Patches Zero-Day Flaw Exploited in Pixel Phone Attacks
Google just patched a high-severity zero-day flaw that allowed hackers to exploit Pixel phones with zero clicks - and federal authorities are urging you to update your phone ASAP. This critical vulnerability let attackers escalate privileges and bypass permission checks, but thankfully it's now closed with a simple update.
Attackers Exploit JFrog Artifactory Bugs Despite Patches
Despite available patches, hackers have exploited three JFrog Artifactory vulnerabilities, highlighting the risks of slow patching and leaving internet-exposed instances open to attack. This exploitation has allowed attackers to gain administrative control, putting organizations at risk.
Chinese Espionage Groups Exploit Zero-Day Chain in Browser, Windows Attacks
Meet the BlueMoon exploit chain, a powerful attack tool that links three zero-day vulnerabilities to give hackers full access to your computer - and it happened before patches were even available to the public. This sneaky chain targets popular browsers like Chrome and Windows, allowing attackers to run code, escape browser safeguards, and take control.
cPanel Flaw Enables Code Execution as Root via Mail Privileges
A critical cPanel security flaw, known as CVE-2026-67401, allows hackers with mail-related privileges to create files on a server and execute code as the root user, putting your entire system at risk. This vulnerability affects every supported version of cPanel and WHM, making it crucial to take immediate action.
Microsoft Patches 974 Flaws, Including Two Actively Exploited Windows Zero-Days
Microsoft just dropped a massive Patch Tuesday update, fixing a record-breaking 974 vulnerabilities - including two Windows zero-days that have already been exploited by hackers. This critical update covers a wide range of products, from Windows and Office to SQL Server and Developer Tools.
Microsoft patches 974 vulnerabilities, including two actively exploited zero-days
Microsoft just dropped a massive Patch Tuesday update, fixing a whopping 974 vulnerabilities across its product lineup - including two zero-day flaws that hackers were actively exploiting before the fixes were even released. The update tackles critical issues, including privilege escalation bugs that could let attackers gain a foothold in your system.
Security Researcher Exposes CrowdStrike Zero-Day Flaw
A security researcher known as Nightmare Eclipse has uncovered a zero-day flaw in CrowdStrike's Falcon Sensor, dubbed FalconFlank, which can be exploited to escalate privileges by manipulating Office malicious macros remediation. The researcher has even shared a public proof-of-concept on GitHub, highlighting the vulnerability's potential impact.
CrowdStrike Zero-Day Exploit Grants SYSTEM Privileges on Windows Systems
A new zero-day exploit, dubbed FalconFlank, can grant attackers SYSTEM-level access to fully patched Windows machines protected by CrowdStrike Falcon, allowing them to spawn a command prompt with elevated privileges. This alarming vulnerability leverages CrowdStrike's own Office malicious macros remediation feature to perform a devastating privilege escalation.
Researcher Exposes Privilege Escalation Flaw in CrowdStrike Falcon
A security researcher, known as Chaotic Eclipse, has uncovered a zero-day privilege escalation flaw in CrowdStrike Falcon, dubbed FalconFlank, which exploits the office malicious macros remediation feature. This vulnerability allows for a potentially devastating escalation of privileges, and a public proof-of-concept has been released.
Unpatched Microsoft Exchange Servers Exposed to Hijack Attacks
Thousands of Microsoft Exchange servers remain vulnerable to a high-severity flaw, leaving 21,899 internet-facing systems open to hijack attacks that could give attackers control of every mailbox. This unpatched authentication-bypass vulnerability, CVE-2026-62911, was fixed by Microsoft in August, but many servers still haven't been updated.
CISA Red Team Exposes Defense Gap Between Water, Government Sectors
In a recent test, CISA's red team uncovered a shocking vulnerability in a government organization, breaching its defenses with ease by sending phishing emails from an internal address, then moving undetected to sensitive systems and cloud resources. The team was able to gain elevated privileges and spread laterally, exposing a significant gap in the organization's security.
Windows Named Pipes Expose Security Risks
Don't assume that just because a Windows Named Pipe is local, it's private - in reality, it can be a security risk if not properly defended, exposing your system to privilege escalation and other threats. A cybersecurity expert warns that architects must redesign pipes to prioritize identity and access control.
Ransomware gangs exploit Windows Task Host flaw
Ransomware gangs are exploiting a high-severity flaw in Windows Task Host, a core component that could allow them to escalate privileges and wreak havoc on your system. This vulnerability, already patched by Microsoft, poses significant risks to users, especially those with basic user permissions.
Certighost Exposes Hidden Privilege Risks in Certificate Authorities
A single misstep in a Certificate Authority can have devastating consequences, as seen in CVE-2026-54121, aka Certighost, which allows a low-privileged domain user to escalate to full domain compromise. This shocking vulnerability exploits a little-known "chase" functionality in Active Directory Certificate Services.
Windows Plug and Play Feature Exploited for SYSTEM Access via Fake USB Devices
Imagine a scenario where hackers can gain SYSTEM access to a Windows computer without needing a single click or logged-in user - and even exploit it remotely over RDP with no hardware involved. Researchers have just revealed a chilling new class of attacks, dubbed "Plug and Pwn", that takes advantage of Windows' Plug and Play feature to execute malicious software with alarming ease.