Search: “socket”

76 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 339 Vulnerability 203 Exploit / PoC 73 Threat actor 56 Ransomware 51 Data breach 45 Industry 30 Policy & legal 23 Phishing & fraud 20 Research 8 Advisory 7 AI tools & infra 6 AI safety & security 5 AI industry 5

SeverityAll critical 217 high 399 medium 180 low 62 info 21

New ZcopyReaper Linux Kernel Vulnerability Enables Privilege Escalation Attacks

ZcopyReaper (CVE-2026-43502) lets unprivileged local attackers reach root on Linux via an RDS zero-copy cleanup flaw dating to kernel 4.17.

CVE-2026-43502 is a lifetime-management error in rds_message_purge() that mishandles zero-copy sends before socket attachment, corrupting kernel memory and enabling local privilege escalation without capabilities or user namespaces. NebuSec demonstrated the exploit on openSUSE kernel 6.4.0-150600.23.100; vulnerable systems need CONFIG_INET, CONFIG_AIO, CONFIG_RDS, and CONFIG_RDS_TCP. The fix landed in mainline commit 44b550d88b26 (Linux 7.1-rc3) with backports to Ubuntu 7.0.0, 6.8.0, and 5.15.0 kernels and multiple Debian branches. NebuSec also released public exploits for 20 additional Linux kernel vulnerabilities in its CyberMeowfia repository.

Cyber Security NewsSep 14, 13:29 UTC · 2d agoVulnerability CVE-2026-43502

Fuzzing µCOS protocol stacks, Part 2: Handling multiple requests per test case

Cisco TalosAug 28, 16:00 UTC · Aug 28, 2024Vulnerability in the wild

Vulnerability Deep Dive: TP-Link TL-R600VPN remote code execution vulnerabilities

Cisco TalosJan 15, 20:02 UTC · Jan 15, 2019Vulnerability

Dell Secure Connect Gateway Vulnerabilities Allow Hackers to Gain Unauthorized Access

Dell patches three critical flaws (CVSS up to 9.8) in Secure Connect Gateway 5.0 enabling admin token replay, unauthenticated RCE, and root escalation.

Dell disclosed three critical vulnerabilities in Secure Connect Gateway 5.0 appliance and application deployments. CVE-2026-80172 (CVSS 9.8) lets unauthenticated attackers replay captured requests, which lack nonce validation and time limits, to repeatedly mint administrator access and refresh tokens. CVE-2026-61410 (9.4) is a missing-authorization flaw enabling unauthenticated remote command execution, and CVE-2026-80238 (9.3) is an exposed Docker socket allowing local privilege escalation to root and container escape. Fixes ship in appliance 5.36.00.16 and application 5.36.00.00.

Cyber Security NewsSep 8, 15:22 UTC · 8d agoVulnerability CVE-2026-80172 CVE-2026-61410 CVE-2026-80238

North Korea-linked Supply Chain Attack Targets Developers with 35 Malicious npm Packages

The Hacker NewsJun 25, 09:20 UTC · Jun 25, 2025Vulnerability

Malicious PyPI, npm, and Ruby Packages Exposed in Ongoing Open

The Hacker NewsJun 4, 10:11 UTC · Jun 4, 2025Vulnerability1

ToddyCat: Unveiling an unknown APT actor attacking high

Kaspersky SecurelistJun 21, 10:00 UTC · Jun 21, 2022Vulnerability

Vulnerability Spotlight: Microsoft issues security update for Azure Sphere

Cisco TalosJul 31, 16:56 UTC · Jul 31, 2020Vulnerability in the wild

Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential

The Hacker NewsJun 2, 08:55 UTC · Jun 2, 2026Vulnerability

Packagist Supply Chain Attack Infects 8 Packages Using GitHub

The Hacker NewsMay 24, 08:14 UTC · May 24, 2026Vulnerability

New Linux 'Copy Fail' Vulnerability Enables Root Access on Major Distributions

The Hacker NewsMay 3, 06:13 UTC · May 3, 2026Vulnerability CVE-2026-31431 CVE-2022-0847

Malicious Go Package Exploits Module Mirror Caching for Persistent Remote Access

The Hacker NewsFeb 6, 03:47 UTC · Feb 6, 2025Vulnerability

LilacSquid APT targeted orgs in the U.S., Europe, and Asia

Security AffairsMay 31, 11:19 UTC · May 31, 2024Vulnerability

Now-fixed Linux kernel vulnerabilities enabled local privilege escalation (CVE-2021-26708)

Help Net SecurityMar 3, 00:00 UTC · Mar 3, 2021Vulnerability CVE-2021-26708

Parallels Desktop flaw hands any local user root on a Mac (CVE-2026-90894)

CVE-2026-90894 in Parallels Desktop for Mac lets any local user gain root via argument injection; patched in v27.0.0, PoC withheld.

JFrog researchers disclosed CVE-2026-90894, an argument injection flaw in Parallels Desktop for Mac v26.4.0 on Apple silicon that lets any local user gain root on the host. The chain combines a world-writable Unix socket for prl_disp_service (which runs as root), weak peer-credential authentication, and argument injection via --use-compress-program in the appliance extraction tar path. Alludo fixed the flaw in Parallels Desktop v27.0.0 in early September 2026; JFrog published technical details but withheld its proof-of-concept script.

Help Net Securityupdated 13:14 UTC · 2h agofirst 12:36 UTC · 3h agoVulnerability 4 sources CVE-2026-90894

Microsoft Patch Tuesday, September 2026 Security Update Review

Microsoft's September 2026 Patch Tuesday fixes 974 vulnerabilities, including 113 critical and two actively exploited Windows privilege escalation flaws.

Microsoft's September 2026 Patch Tuesday fixes 974 vulnerabilities, its largest release ever, including 113 critical and 860 important, covering Windows HTTP.sys, Hyper-V, Entra ID, Exchange Server, Office, DNS, and more. Two zero-days are confirmed exploited in the wild: CVE-2026-81963 (Windows Update Stack EoP) and CVE-2026-85880 (ALPC heap overflow), both letting authenticated attackers gain SYSTEM privileges. Notable criticals include an Entra ID authentication bypass (CVE-2026-62916) and multiple Windows DNS Server and Office remote code execution flaws.

Qualys ThreatPROTECTSep 9, 12:23 UTC · 7d agoVulnerability in the wildCVE-2026-81963 CVE-2026-85880 CVE-2026-58599+27 CVEs

Microsoft’s September 2026 Patch Tuesday addresses 964 CVEs (CVE-2026-81963, CVE-2026-85880)

Microsoft's September 2026 Patch Tuesday fixes a record 964 CVEs, including two zero-days actively exploited in the wild.

Microsoft patched a record 964 CVEs in its September 2026 Patch Tuesday release, with 101 rated critical and 824 rated important, making it the largest Patch Tuesday to date. The release includes fixes for two zero-days that were exploited in the wild, with CVE-2026-81963 and CVE-2026-85880 highlighted in the release. Affected products span Windows core components, Office, Exchange, .NET, Visual Studio, Active Directory services (including AD CS and AD FS) and numerous Azure services. Tenable notes the release surpasses July's as the biggest ever.

Tenable BlogSep 8, 18:07 UTC · 7d agoVulnerability in the wildCVE-2026-81963 CVE-2026-858801

Dell Secure Connect Gateway Critical Flaws Allow Unauthenticated Remote Code Execution and Admin Access

Dell patched three critical Secure Connect Gateway flaws (CVE-2026-80172 up to CVSS 9.8) enabling unauthenticated admin access, remote code execution, and host takeover.

Dell Security Advisory DSA-2026-382 fixes three critical vulnerabilities in Secure Connect Gateway (SCG) 5.0, affecting appliances earlier than 5.36.00.16 and applications earlier than 5.36.00.00. CVE-2026-80172 (CVSS 9.8) allows unauthenticated replay of captured requests to obtain ADMIN access due to missing nonce and time validation; CVE-2026-61410 (9.4) enables unauthenticated command execution via missing authorization; CVE-2026-80238 (9.3) involves an exposed Docker socket allowing root access and container escape. Dell urges immediate upgrades and recommends restricting management interfaces to trusted networks and rotating credentials if compromise is suspected.