Explore

Rapid Read Rapid Read
Fragnesia Vulnerability Exposed as New Linux Local Privilege Escalation Threat

Fragnesia Vulnerability Exposed as New Linux Local Privilege Escalation Threat

A new local privilege escalation vulnerability named Fragnesia has been disclosed for the Linux kernel. This vulnerability, similar to the recently patched Dirty Frag, was announced by V12 Security on an open-source security mailing list. Fragnesia exploits a logic bug within the ESP/XFRM code, allowing arbitrary byte writes into the kernel page cache of read-only files. A proof of concept for this exploit is already available, highlighting the urgency for a fix. Currently, a two-line patch has been proposed to address the issue within the Linux kernel's skbuff.c code, although it has not yet been integrated into any mainline kernel releases.
Rapid Read Rapid Read
VMware Implicated in Dirty Frag Vulnerability Affecting Linux Servers

VMware Implicated in Dirty Frag Vulnerability Affecting Linux Servers

A new security vulnerability known as Dirty Frag has been identified, affecting Linux servers and allowing low-privilege users to gain root control. This vulnerability is particularly concerning in shared environments where multiple parties use a server. The exploit code for Dirty Frag was leaked online and is effective across nearly all Linux distributions. Microsoft has reported observing hackers experimenting with this vulnerability. The vulnerability introduces multiple kernel attack paths, enhancing exploitation reliability. While some Linux distributions have released patches, many remain vulnerable, necessitating swift action from organizations to protect their systems.
Trendline Trendline
Adobe Releases Patches for 52 Vulnerabilities Across 10 Products, Addressing Critical Security Flaws

Adobe Releases Patches for 52 Vulnerabilities Across 10 Products, Addressing Critical Security Flaws

Adobe Releases Patches for 52 Vulnerabilities Across 10 Products, Addressing Critical Security Flaws
Rapid Read Rapid Read
Security Researcher Reveals Vulnerability in Windows BitLocker Allowing Unauthorized Access

Security Researcher Reveals Vulnerability in Windows BitLocker Allowing Unauthorized Access

A security researcher, known by the aliases 'Nightmare-Eclipse' and 'Chaotic Eclipse', has disclosed a vulnerability in Microsoft's BitLocker disk encryption technology. The exploit, named YellowKey, allows unauthorized access to encrypted drives on Windows 11 and Windows Server 2022/2025 using a USB stick with specially crafted files. The vulnerability requires physical access to the target computer and involves using a feature called Transactional NTFS to bypass security measures. The researcher also hinted at another vulnerability, GreenPlasma, which could escalate privileges on Windows systems. The disclosure follows previous exploits by the same researcher, who criticized Microsoft's handling of security issues.
Trendline Trendline
Adobe Releases Patches for 52 Vulnerabilities Across 10 Products to Prevent Code Execution Risks

Adobe Releases Patches for 52 Vulnerabilities Across 10 Products to Prevent Code Execution Risks

Adobe Releases Patches for 52 Vulnerabilities Across 10 Products to Prevent Code Execution Risks
Trendline Trendline
cPanel Vulnerability Poses Significant Risk to Enterprise Hosting Supply Chains

cPanel Vulnerability Poses Significant Risk to Enterprise Hosting Supply Chains

cPanel Vulnerability Poses Significant Risk to Enterprise Hosting Supply Chains
Trendline Trendline
Fake Claude Code Malware Exploits PowerShell to Evade Detection

Fake Claude Code Malware Exploits PowerShell to Evade Detection

Fake Claude Code Malware Exploits PowerShell to Evade Detection
Trendline Trendline
Fortinet and Ivanti Release Patches for Critical Security Vulnerabilities

Fortinet and Ivanti Release Patches for Critical Security Vulnerabilities

Fortinet and Ivanti Release Patches for Critical Security Vulnerabilities
Rapid Read Rapid Read
Linux Kernel Vulnerabilities Prompt Urgent Patches Following Disclosure Breach

Linux Kernel Vulnerabilities Prompt Urgent Patches Following Disclosure Breach

Major Linux distributions are urgently releasing patches to address two newly discovered vulnerabilities in the Linux kernel, collectively known as 'Dirty Frag'. These vulnerabilities, identified by security researcher Hyunwoo Kim, involve a local privilege escalation flaw that could allow attackers to gain root access on affected systems. The vulnerabilities were disclosed prematurely, leading to a rush in patch development. The flaws, tracked as CVE-2026-43284 and CVE-2026-43500, have been present in the kernel for several years, posing significant security risks.
Trendline Trendline
New 'Dirty Frag' Linux Vulnerability Disclosed, Potentially Exploited in Attacks

New 'Dirty Frag' Linux Vulnerability Disclosed, Potentially Exploited in Attacks

New 'Dirty Frag' Linux Vulnerability Disclosed, Potentially Exploited in Attacks
Rapid Read Rapid Read
Linux Systems Face Immediate Threat from 'Dirty Frag' Vulnerability

Linux Systems Face Immediate Threat from 'Dirty Frag' Vulnerability

A new vulnerability known as 'Dirty Frag' has been discovered in Linux systems, allowing low-privilege users to gain root access. This marks the second severe vulnerability in Linux within two weeks. The exploit, which has been leaked online, is deterministic and works across various Linux distributions without causing system crashes, making it difficult to detect. The vulnerability is particularly concerning in shared environments where multiple users access the same server. Security researchers have urged Linux users to apply patches immediately to mitigate the risk. The vulnerability was disclosed by researcher Hyunwoo Kim, and proof-of-concept exploits are already available, increasing the urgency for system administrators to act.
Trendline Trendline
Skoda Discloses Data Breach Affecting Online Shop Customers

Skoda Discloses Data Breach Affecting Online Shop Customers

Skoda Discloses Data Breach Affecting Online Shop Customers