Search: “socket”

199 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 339 Vulnerability 199 Exploit / PoC 73 Threat actor 55 Ransomware 51 Data breach 45 Industry 30 Policy & legal 23 Phishing & fraud 20 Research 8 Advisory 7 AI tools & infra 6 AI industry 5 AI safety & security 5

SeverityAll critical 217 high 395 medium 179 low 62 info 21

New ZcopyReaper Linux Kernel Vulnerability Enables Privilege Escalation Attacks

ZcopyReaper (CVE-2026-43502) lets unprivileged local attackers reach root on Linux via an RDS zero-copy cleanup flaw dating to kernel 4.17.

CVE-2026-43502 is a lifetime-management error in rds_message_purge() that mishandles zero-copy sends before socket attachment, corrupting kernel memory and enabling local privilege escalation without capabilities or user namespaces. NebuSec demonstrated the exploit on openSUSE kernel 6.4.0-150600.23.100; vulnerable systems need CONFIG_INET, CONFIG_AIO, CONFIG_RDS, and CONFIG_RDS_TCP. The fix landed in mainline commit 44b550d88b26 (Linux 7.1-rc3) with backports to Ubuntu 7.0.0, 6.8.0, and 5.15.0 kernels and multiple Debian branches. NebuSec also released public exploits for 20 additional Linux kernel vulnerabilities in its CyberMeowfia repository.

Cyber Security NewsSep 14, 13:29 UTC · 1d agoVulnerability CVE-2026-43502

Fuzzing µCOS protocol stacks, Part 2: Handling multiple requests per test case

Cisco TalosAug 28, 16:00 UTC · Aug 28, 2024Vulnerability in the wild

Fuzzing µC/OS protocol stacks, Part 1: HTTP server fuzzing

Cisco TalosAug 28, 16:00 UTC · Aug 28, 2024Vulnerability

Patch Tuesday for August 2022 fixed actively exploited zero

Security AffairsAug 9, 21:25 UTC · Aug 9, 2022Vulnerability in the wildCVE-2022-34713 CVE-2022-30133 CVE-2022-35744+46 CVEs

New Tor Browser 7.0 implements multiprocess mode, content sandbox, and Unix domain sockets

Security AffairsJun 9, 10:33 UTC · Jun 9, 2017Vulnerability

Hands-On Review: Converged Networking and Security with Cato Networks

The Hacker NewsMay 8, 14:25 UTC · May 8, 2017Vulnerability

Uncovering weaknesses in Apple macOS and VMWare vCenter: 12 vulnerabilities in RPC implementation

Cisco TalosJul 13, 16:00 UTC · Jul 13, 2023Vulnerability

Vulnerability Deep Dive: TP-Link TL-R600VPN remote code execution vulnerabilities

Cisco TalosJan 15, 20:02 UTC · Jan 15, 2019Vulnerability

Mini Shai

Infosecurity MagazineMay 12, 14:45 UTC · May 12, 2026Vulnerability

CVE-2016-8655 - A new 5-Year

Security AffairsDec 8, 07:27 UTC · Dec 8, 2016Vulnerability CVE-2016-8655

Dell Secure Connect Gateway Vulnerabilities Allow Hackers to Gain Unauthorized Access

Dell patches three critical flaws (CVSS up to 9.8) in Secure Connect Gateway 5.0 enabling admin token replay, unauthenticated RCE, and root escalation.

Dell disclosed three critical vulnerabilities in Secure Connect Gateway 5.0 appliance and application deployments. CVE-2026-80172 (CVSS 9.8) lets unauthenticated attackers replay captured requests, which lack nonce validation and time limits, to repeatedly mint administrator access and refresh tokens. CVE-2026-61410 (9.4) is a missing-authorization flaw enabling unauthenticated remote command execution, and CVE-2026-80238 (9.3) is an exposed Docker socket allowing local privilege escalation to root and container escape. Fixes ship in appliance 5.36.00.16 and application 5.36.00.00.

Cyber Security NewsSep 8, 15:22 UTC · 7d agoVulnerability CVE-2026-80172 CVE-2026-61410 CVE-2026-80238

North Korea-linked Supply Chain Attack Targets Developers with 35 Malicious npm Packages

The Hacker NewsJun 25, 09:20 UTC · Jun 25, 2025Vulnerability

Malicious PyPI, npm, and Ruby Packages Exposed in Ongoing Open

The Hacker NewsJun 4, 10:11 UTC · Jun 4, 2025Vulnerability1

ToddyCat: Unveiling an unknown APT actor attacking high

Kaspersky SecurelistJun 21, 10:00 UTC · Jun 21, 2022Vulnerability

Vulnerability Spotlight: Microsoft issues security update for Azure Sphere

Cisco TalosJul 31, 16:56 UTC · Jul 31, 2020Vulnerability in the wild

The Mutiny Fuzzing Framework and Decept Proxy

Cisco TalosDec 7, 18:06 UTC · Dec 7, 2017Vulnerability CVE-2014-7815

Hacking the Belkin E Series OmniView 2

Cisco TalosApr 6, 13:30 UTC · Apr 6, 2017Vulnerability

Threat Spotlight: Group 72, Opening the ZxShell

Cisco TalosOct 28, 15:10 UTC · Oct 28, 2014Vulnerability CVE-2011-2462 CVE-2013-3163 CVE-2014-0322

Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential

The Hacker NewsJun 2, 08:55 UTC · Jun 2, 2026Vulnerability

What’s in the container? Analyzing vulnerabilities, risks and protection with Kaspersky Container Security and the KIRA AI assistant

Kaspersky SecurelistMay 29, 07:00 UTC · May 29, 2026Vulnerability CVE-2025-55182 CVE-2023-4911 CVE-2021-4034+3 CVEs

Packagist Supply Chain Attack Infects 8 Packages Using GitHub

The Hacker NewsMay 24, 08:14 UTC · May 24, 2026Vulnerability

New Linux 'Copy Fail' Vulnerability Enables Root Access on Major Distributions

The Hacker NewsMay 3, 06:13 UTC · May 3, 2026Vulnerability CVE-2026-31431 CVE-2022-0847

Researchers Uncover Chrome Extensions Abusing Affiliate Links and Stealing ChatGPT Access

The Hacker NewsJan 31, 07:21 UTC · Jan 31, 2026Vulnerability CVE-2020-28707

React2Shell Vulnerability Actively Exploited to Deploy Linux Backdoors

The Hacker NewsDec 17, 07:26 UTC · Dec 17, 2025Vulnerability in the wildCVE-2025-55182 CVE-2025-29927 CVE-2025-66478

Docker Fixes CVE-2025-9074, Critical Container Escape Vulnerability With CVSS Score 9.3

The Hacker NewsAug 25, 17:53 UTC · Aug 25, 2025Vulnerability CVE-2025-90741

Over 70 Malicious npm and VS Code Packages Found Stealing Data and Crypto

The Hacker NewsMay 26, 15:12 UTC · May 26, 2025Vulnerability

Malicious Go Package Exploits Module Mirror Caching for Persistent Remote Access

The Hacker NewsFeb 6, 03:47 UTC · Feb 6, 2025Vulnerability

Meta's Llama Framework Flaw Exposes AI Systems to Remote Code Execution Risks

The Hacker NewsJan 28, 05:26 UTC · Jan 28, 2025Vulnerability CVE-2024-50050 CVE-2024-36601

A closer look at the Mercedes

Kaspersky SecurelistJan 17, 10:56 UTC · Jan 17, 2025Vulnerability

Cybercriminals Target Ethereum Developers with Fake Hardhat npm Packages

The Hacker NewsJan 6, 11:09 UTC · Jan 6, 2025Vulnerability

LilacSquid APT targeted orgs in the U.S., Europe, and Asia

Security AffairsMay 31, 11:19 UTC · May 31, 2024Vulnerability

Now-fixed Linux kernel vulnerabilities enabled local privilege escalation (CVE-2021-26708)

Help Net SecurityMar 3, 00:00 UTC · Mar 3, 2021Vulnerability CVE-2021-26708

Netdata: Distributed real-time performance and health monitoring

Help Net SecuritySep 18, 00:00 UTC · Sep 18, 2017Vulnerability

CVE-2017-6074 is a new 11-year old Linux Kernel vulnerability discoveredCVE-2017-6074 is a new 11-year old Linux Kernel vulnerability discovered

Security AffairsFeb 22, 21:46 UTC · Feb 22, 2017Vulnerability CVE-2017-6074 CVE-2016-8655

5-Year-Old Linux Kernel Local Privilege Escalation Flaw Discovered

The Hacker NewsDec 7, 16:14 UTC · Dec 7, 2016Vulnerability CVE-2016-8655

Microsoft Patch Tuesday, September 2026 Security Update Review

Microsoft's September 2026 Patch Tuesday fixes 974 vulnerabilities, including 113 critical and two actively exploited Windows privilege escalation flaws.

Microsoft's September 2026 Patch Tuesday fixes 974 vulnerabilities, its largest release ever, including 113 critical and 860 important, covering Windows HTTP.sys, Hyper-V, Entra ID, Exchange Server, Office, DNS, and more. Two zero-days are confirmed exploited in the wild: CVE-2026-81963 (Windows Update Stack EoP) and CVE-2026-85880 (ALPC heap overflow), both letting authenticated attackers gain SYSTEM privileges. Notable criticals include an Entra ID authentication bypass (CVE-2026-62916) and multiple Windows DNS Server and Office remote code execution flaws.

Qualys ThreatPROTECTSep 9, 12:23 UTC · 6d agoVulnerability in the wildCVE-2026-81963 CVE-2026-85880 CVE-2026-58599+27 CVEs

Microsoft’s September 2026 Patch Tuesday addresses 964 CVEs (CVE-2026-81963, CVE-2026-85880)

Microsoft's September 2026 Patch Tuesday fixes a record 964 CVEs, including two zero-days actively exploited in the wild.

Microsoft patched a record 964 CVEs in its September 2026 Patch Tuesday release, with 101 rated critical and 824 rated important, making it the largest Patch Tuesday to date. The release includes fixes for two zero-days that were exploited in the wild, with CVE-2026-81963 and CVE-2026-85880 highlighted in the release. Affected products span Windows core components, Office, Exchange, .NET, Visual Studio, Active Directory services (including AD CS and AD FS) and numerous Azure services. Tenable notes the release surpasses July's as the biggest ever.

Tenable BlogSep 8, 18:07 UTC · 7d agoVulnerability in the wildCVE-2026-81963 CVE-2026-858801