oilier+exploits | Breaking Cybersecurity News | The Hacker News

Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug

Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory

ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More

Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads

NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks

Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing

Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation

GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories

Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability

Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts

Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App

U.S. Shuts Down Over 40 Laptop Farms, Charges 14 in North Korean IT Worker Fraud

curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution

Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days

AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host

Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug

OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference Room

Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnets

Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another

SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft

LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network

Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers

GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code

⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More

Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access