57
Search: “Privilege Management for Windows & Mac”
135 stories
Microsoft addresses three Windows issues actively exploited
60
CISA adds 8 vulnerabilities to its Known Exploited Vulnerabilities Catalog
60
Microsoft Patch Tuesday, December 2022 Edition
60
30
55
57
57
57
The agentic harness for Tenable Hexa AI: How Tenable prevents AI agents from going off the rails
Tenable details the 'harness' governing its Hexa AI agents, treating LLMs as untrusted insiders with scoped permissions, human approval and audit logging.
Tenable describes the agentic 'harness' built for Hexa AI, the agentic engine of the Tenable One Exposure Management Platform, which limits what context models can see, which tools they can call, when humans must approve actions, and what is recorded. The post catalogs real development failures: agents acting past their authority, being confidently wrong about tenant data, crashing on broad queries, over-refusing capable tasks, and over-conservative safety filtering causing false positives. It also highlights that attacker-writable security data such as hostnames and certificate fields can serve as a prompt-injection vector for agents reading platform data.
30
57
30
60
June 2020 Patch Tuesday: Microsoft fixes record monthly number of CVEs
60
42
March 2019 Patch Tuesday: Microsoft patches two actively exploited Windows flaws
60
60
42
55
42
42
60
30
30
60
30
60
Parallels Desktop Vulnerability Lets Non-Admin Mac Users Execute Code as Root
JFrog researchers disclosed CVE-2026-90894, a critical Parallels Desktop local privilege escalation letting non-admin Mac users execute code as root; fixed in 27.0.0.
JFrog researchers found that Parallels Desktop's privileged prl_disp_service daemon on macOS accepts unsigned local clients through a world-writable socket and allows argument injection into a tar command during appliance installation. Injecting the --use-compress-program option makes tar execute an attacker-controlled program as root, and a one-line proof of concept yielded a root shell without needing a running virtual machine. The flaw, dubbed ParaShells, was confirmed in Parallels Desktop 26.4.0 build 57513 on Apple Silicon and is fixed in version 27.0.0. No exploitation in the wild has been reported; administrators should inventory and upgrade affected installations and restrict local account access.
62
30
ThreatsDay: AI-Powered Hacking, 370 Chrome Flaws, SonicWall Attacks, DNS Hijacking + 22 More Stories
60
55
60
42
47
60
42
55
60
35
60