Search: “tar”

29 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 47 Malware 39 Ransomware 29 Exploit / PoC 15 Threat actor 10 Policy & legal 6 Research 3 Data breach 3 Phishing & fraud 2 AI tools & infra 2 Industry 2 AI industry 1 Advisory 1 AI research 1

SeverityAll critical 52 high 65 medium 29 low 10 info 5

Drupal fixed a new flaw related PEAR Archive_Tar library

Security AffairsJan 22, 08:25 UTC · Jan 22, 2021Vulnerability CVE-2020-36193 CVE-2020-28948

Talos Discovered Three More Vulnerabilities in Pidgin

Cisco TalosNov 7, 09:46 UTC · Nov 7, 2014Vulnerability CVE-2014-3697 CVE-2014-3696 CVE-2014-3695

Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can't Install Fix

JFrog disclosed CVE-2026-90894, a 7.8-rated local privilege escalation in Parallels Desktop for Mac, patched only in version 27, which Intel Macs cannot install.

JFrog researcher Yuval Moravchick disclosed CVE-2026-90894 (dubbed ParaShells, CVSS 7.8), a local privilege escalation in Parallels Desktop for Mac that lets non-admin users run code as root. The root-level prl_disp_service listens on a world-writable socket, and argument injection into a tar command via QProcess::splitCommand and the --use-compress-program option yields code execution as root, demonstrated on Parallels Desktop 26.4.0 build 57513 on Apple silicon. The fix appears in version 27.0.0, but Parallels Desktop 27 requires Apple silicon, leaving Intel Macs on the 26.x line with no build JFrog describes as fixed. No exploitation in the wild has been reported and Parallels has not published a statement.

The Hacker News13:14 UTC · 8h agoVulnerability 4 sources CVE-2026-90894

Image or Malware? Read until the end and answer in comments :)

Security AffairsApr 5, 14:07 UTC · Apr 5, 2026Malware

Crypto mining campaign targets Docker environments with new evasion technique

Security AffairsApr 23, 18:15 UTC · Apr 23, 2025Threat actor

New Argamal RAT targets hentai gamers

Kaspersky SecurelistJun 3, 09:00 UTC · Jun 3, 2026Malware

Hackers Using MSIX App Packages to Infect Windows PCs with GHOSTPULSE Malware

The Hacker NewsOct 30, 06:58 UTC · Oct 30, 2023Malware

Vulnerable Docker Installations Are A Playhouse for Malware Attacks

Security AffairsMay 6, 10:02 UTC · May 6, 2022Malware

Beers with Talos Ep. #72: Getting to Patch Day - Understanding Vulnerability Risks and Options

Cisco TalosFeb 14, 21:19 UTC · Feb 14, 2020Vulnerability

A flaw in Alpine Linux could allow executing arbitrary code

Security AffairsSep 18, 13:40 UTC · Sep 18, 2018Exploit / PoC1

Debian 13.7 ships the fixes behind 92 security advisories, updates 106 packages

Debian 13.7 'trixie' point release bundles 92 security advisories and 106 package updates, including kernel, glibc, u-boot and qemu fixes.

Debian shipped version 13.7 of 'trixie', folding in 92 previously published security advisories and corrections to 106 source packages, including six Linux kernel advisories (DSA-6381, DSA-6393, DSA-6405, DSA-6415, DSA-6466, DSA-6477). glibc fixes a buffer overflow (CVE-2026-5928) and buffer underflow (CVE-2026-5450), with 17 packages rebuilt against the updated library; qemu carries 25 CVEs including a secure boot bypass (CVE-2026-16288), imagemagick 24, wolfssl 15 and perl 13. Boot-chain fixes include a u-boot FIT image verification bypass (CVE-2026-46728), a BOOTP/DHCP buffer overread (CVE-2024-42040), and corrected intermediate certificate verification in sbsigntool. The installer was rebuilt with kernel ABI 6.12.107+deb13, and existing systems receive the fixes through normal package mirror updates.