Exploit available for new DirtyDecrypt Linux root escalation flaw By Sergiu Gatlan May 18, 2026 03:18 AM A recently patched local privilege escalation vulnerability in the Linux kernel's rxgk module…
…The website offers both macOS [ VirusTotal ] and Windows [ VirusTotal ] downloads that install malware on devices. While it is unclear what payloads are ultimately deployed, earlier campaigns abusing AI platform sharing features have…
…On devices that are not yet encrypted, admins can enable the "Require additional authentication at startup" option via Microsoft Intune or Group Policies, while ensuring that "Configure TPM startup PIN" is set…
…The key new feature in the current variant is the TON-based communication with the operator, which uses .ADNL addresses routed through an embedded local TON proxy running on the infected device…
…The company has since removed the unnamed trojanized extension from the VS Code marketplace and has secured the compromised device. "Yesterday we detected and contained a compromise of an employee device involving…
…Gogs patches critical zero-day enabling remote code execution New Gogs zero-day flaw lets hackers get remote code execution Critical Windows Netlogon RCE flaw now exploited in attacks CISA orders feds…
…compromised devices, which could allow fething additional malware. The researchers have provided a set of indicators of compromise that could help defenders protect against malicious behavior associated with the new SHub Reaper…
…To help mitigate this attack, Microsoft has introduced a new "MaxHeadersCount" registry setting to limit the number of headers in a request, along with a support bulletin on how to use it…
…Disgruntled researcher leaks “BlueHammer” Windows zero-day exploit Recently leaked Windows zero-days now exploited in attacks Exploit available for new DirtyDecrypt Linux root escalation flaw New Windows 'MiniPlasma' zero-day exploit…
OpenAI confirms security breach in TanStack supply chain attack By Lawrence Abrams May 14, 2026 03:07 PM OpenAI says two employees' devices were breached in the recent TanStack supply chain attack…
