Search: “local”

2,549 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 2565 Ransomware 2214 Malware 1832 Exploit / PoC 1324 Policy & legal 1016 Industry 858 Threat actor 831 Data breach 761 Phishing & fraud 583 Research 161 Advisory 145 AI tools & infra 126 AI safety & security 117 AI research 109

SeverityAll critical 4559 high 3594 medium 2183 low 1967 info 567

Threat Roundup for April 1 to April 8

Cisco TalosApr 8, 21:48 UTC · Apr 8, 2022Vulnerability

Threat Roundup for March 18 to March 25

Cisco TalosMar 25, 19:01 UTC · Mar 25, 2022Vulnerability1

Microsoft Patch Tuesday, September 2026 Security Update Review

Microsoft's September 2026 Patch Tuesday fixes 974 vulnerabilities, including 113 critical and two actively exploited Windows privilege escalation flaws.

Microsoft's September 2026 Patch Tuesday fixes 974 vulnerabilities, its largest release ever, including 113 critical and 860 important, covering Windows HTTP.sys, Hyper-V, Entra ID, Exchange Server, Office, DNS, and more. Two zero-days are confirmed exploited in the wild: CVE-2026-81963 (Windows Update Stack EoP) and CVE-2026-85880 (ALPC heap overflow), both letting authenticated attackers gain SYSTEM privileges. Notable criticals include an Entra ID authentication bypass (CVE-2026-62916) and multiple Windows DNS Server and Office remote code execution flaws.

Qualys ThreatPROTECTSep 9, 12:23 UTC · 7d agoVulnerability in the wildCVE-2026-81963 CVE-2026-85880 CVE-2026-58599+27 CVEs

Threat Roundup for March 25 to April 1

Cisco TalosApr 1, 19:59 UTC · Apr 1, 2022Vulnerability

Threat Roundup for December 3 to December 10

Cisco TalosDec 10, 12:30 UTC · Dec 10, 2021Vulnerability1

Threat Round-up for June 2

Cisco TalosJun 9, 18:41 UTC · Jun 9, 2017Vulnerability

Threat Round-up for July 28

Cisco TalosAug 4, 17:01 UTC · Aug 4, 2017Vulnerability

Threat Roundup for November 12 to November 19

Cisco TalosNov 19, 19:31 UTC · Nov 19, 2021Vulnerability

Threat Roundup for May 27 to June 3

Cisco TalosJun 3, 19:07 UTC · Jun 3, 2022Vulnerability

Threat Roundup for July 9 to July 16

Cisco TalosJul 16, 17:07 UTC · Jul 16, 2021Vulnerability

Pirates of Brazil: Integrating the Strengths of Russian and Chinese Hacking Communities Report

Recorded FutureAug 21, 00:00 UTC · Aug 21, 2025Vulnerability

The Internet of Things is a Complete Mess (and how to Fix it)

Troy HuntJul 13, 09:59 UTC · Jul 13, 2021Vulnerability

SWEED targets precision engineering companies in Italy

Security AffairsOct 28, 09:53 UTC · Oct 28, 2019Vulnerability CVE-2017-11882

Improving cybersecurity visibility at state and local government agencies

CyberScoopApr 24, 04:01 UTC · Apr 24, 2018Vulnerability

Threat Roundup for February 25 to March 4

Cisco TalosMar 2, 15:45 UTC · Mar 2, 2022Vulnerability

21Nails vulnerabilities impact 60% of the internet's email servers

The RecordDec 7, 00:00 UTC · Dec 7, 2022Vulnerability CVE-2020-28007 CVE-2020-28008 CVE-2020-28014+21 CVEs

Threat Roundup for February 4 to February 11

Cisco TalosFeb 11, 19:28 UTC · Feb 11, 2022Vulnerability

Threat Roundup for December 31 to January 7

Cisco TalosJan 7, 21:41 UTC · Jan 7, 2022Vulnerability

Absolute Computrace Revisited

Kaspersky SecurelistFeb 12, 21:45 UTC · Feb 12, 2014Vulnerability

BadPatch

Palo Alto Unit 42Nov 5, 09:23 UTC · Nov 5, 2018Vulnerability CVE-2012-0158

Threat Round Up for Aug 25

Cisco TalosSep 1, 17:12 UTC · Sep 1, 2017Vulnerability1

Parallels Desktop flaw hands any local user root on a Mac (CVE-2026-90894)

CVE-2026-90894 in Parallels Desktop for Mac lets any local user gain root via argument injection; patched in v27.0.0, PoC withheld.

JFrog researchers disclosed CVE-2026-90894, an argument injection flaw in Parallels Desktop for Mac v26.4.0 on Apple silicon that lets any local user gain root on the host. The chain combines a world-writable Unix socket for prl_disp_service (which runs as root), weak peer-credential authentication, and argument injection via --use-compress-program in the appliance extraction tar path. Alludo fixed the flaw in Parallels Desktop v27.0.0 in early September 2026; JFrog published technical details but withheld its proof-of-concept script.

Help Net Securityupdated 13:14 UTC · 10h agofirst 12:36 UTC · 10h agoVulnerability 4 sources CVE-2026-90894

Decade-old local privilege escalation bugs impacts Ubuntu needrestart package

Security AffairsNov 21, 07:45 UTC · Nov 21, 2024Vulnerability CVE-2024-48990 CVE-2024-48991 CVE-2024-48992+2 CVEs

Scripting the disassembler: Local agentic reverse engineering through vbdec’s live COM object model

Cisco TalosJun 18, 10:00 UTC · Jun 18, 2026Vulnerability1

Azure will save you from unexpected Godzilla attack part 1: SQL Azure export will save you from yourself

Troy HuntJan 27, 00:00 UTC · Jan 27, 2014Vulnerability

ZDI-26-606: Microsoft Windows Compatibility Appraiser Link Following Local Privilege Escalation Vulnerability

ZDI disclosed a link-following flaw in Windows Compatibility Appraiser (CVSS 7.0) enabling local privilege escalation from the LOCAL SERVICE context.

ZDI-26-606 describes a link-following vulnerability in the Windows Compatibility Appraiser component that permits local privilege escalation. An attacker must already be able to execute low-privileged code in the LOCAL SERVICE context on the target system. ZDI rated the issue 7.0 on the CVSS scale; the advisory lists no CVE identifier. No active exploitation is reported.

ZDI Published AdvisoriesAug 24, 05:00 UTC · 23d agoVulnerability2