Search
Results for "Privileges".
Security researcher Abdelhamid Naceri has released a new Windows zero-day exploit named SignDrop, which can give attackers SYSTEM privileges by abusing Microsoft's CLFS driver mitigation.
A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay and paru.
Dell warned customers to patch a critical vulnerability in the System Update (DSU) command-line interface (CLI) deployment tool as soon as possible.
Check Point Software has released security updates to address a critical vulnerability that can let attackers execute code with root privileges on management systems.
An anonymous security researcher who uses the "Nightmare Eclipse" handle released a CrowdStrike Falcon zero-day exploit named "FalconFlank" that lets attackers escalate privileges on up-to-date Windows systems.
Nightmare Eclipse has released a new Microsoft Defender zero-day exploit named "ShieldBreak" after Microsoft released the August 2026 Patch Tuesday security updates.
A nine-year-old race condition vulnerability in the Linux kernel's XFS filesystem, tracked as CVE-2026-64600, allows local attackers to overwrite protected files and gain root privileges.
A security researcher using the "Nightmare Eclipse" handle has released a Windows zero-day exploit dubbed LegacyHive that allows attackers to escalate privileges on up-to-date Windows systems.
Resumo da fonte BleepingComputer sobre Microsoft, Security: Microsoft Defender 'RoguePlanet' zero-day grants SYSTEM privileges.
Hackers are actively exploiting newly disclosed N-able N-central zero-day vulnerabilities, including 4EverAble2Shell, to compromise servers and deploy cryptocurrency miners.
Apache HTTP Server has patched a critical vulnerability in the HTTP/2 module that could allow attackers to execute arbitrary code with server privileges, affecting versions 2.4.55 through 2.4.70 and standalone mod_h2 versions 2.0.8 through 2.0.42.
Hackers are increasingly using GSocket, a legitimate remote access tool, to maintain persistent access to Linux servers, even after initial vulnerabilities are patched.
A critical authentication bypass vulnerability in Xen Orchestra is being actively exploited in attacks that could grant administrator privileges and allow takeover of XCP-ng virtualization hosts. [.
Cybersecurity company Barracuda Networks warned that attackers have begun exploiting two recently patched Email Security Gateway (ESG) vulnerabilities that let them run commands with root privileges. [.
Cybersecurity company Barracuda Networks warned customers to patch two vulnerabilities that can let attackers run commands with root privileges. [.
Tailscale, a software-defined mesh VPN, has warned of security vulnerabilities in its SSH server that could allow attackers to escalate privileges, crash servers, and steal credentials.
HPE has released security updates to patch eight maximum severity authentication bypass and code execution issues in ArubaOS, which powers Aruba Networking enterprise wireless infrastructure.
Arista Networks has released security updates to patch a critical zero-day vulnerability in VeloCloud Orchestrator (VCO) deployments. This guide provides key recommendations and best practices for securing VCO and preventing exploitation.
Amazon's Threat Intelligence revealed that PHP2Shell vulnerabilities were being exploited four days before security patches were released. This guide provides actionable tips and recommendations for securing your PHP applications.
Plex Media Server is a popular media suite that can be exploited by hackers through vulnerabilities in its Plex2Shell attacks. This guide provides comprehensive information on how to protect your systems and mitigate these security risks.
CISA reports that SafePay ransomware has breached over 600 critical infrastructure organizations worldwide. This guide offers actionable tips and recommendations to protect against and respond to SafePay attacks.
CJIS v6.1 Compliance requires strong MFA and effective account management. Learn how to prioritize these areas with practical advice and tools to ensure compliance.
Hackers are exploiting an OS command injection vulnerability in SiteGuard WAF, which can allow them to execute commands with admin privileges. Learn how to secure your SiteGuard WAF and prevent such attacks.
Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely. Learn about the security issues, recommended updates, and best practices for securing your Drupal sites.
Cisco patches several critical zero-day vulnerabilities in its Secure Email Gateway, including a new exploit that allows attackers to execute commands with root privileges.
Cisco released security advisories for five critical vulnerabilities in its NX-OS data center network operating system that could be exploited to run arbitrary code with root privileges on Nexus switches.
FBI and CISA issue warnings about ongoing FortiBleed attacks and other cyber threats, including ransomware, phishing, and AI-assisted attacks.
SonicWall has released hotfixes for a critical SSRF vulnerability affecting SMA1000 appliances, highlighting the importance of timely security updates.
Dell has patched two maximum severity vulnerabilities in the Container Storage Modules (CSM) that connect Dell enterprise storage arrays to Kubernetes environments.
Cisco released security updates to address a critical zero-day in the Catalyst SD-WAN Manager (tracked as CVE-2026-76504) that attackers are actively exploiting to escalate to admin privileges. [.
