CVE-2026-62878: Windows DNS Server Remote Code Execution
CVE-2026-62878 is a stack-based buffer overflow in Windows DNS Server, remotely exploitable without authentication. ZDI describes it as wormable, though Microsoft rates…
Tag: DNS
Windows DNS Server: Critical RCE Vulnerability
Windows DNS Server is affected by CVE-2026-62878, a wormable remote code execution flaw requiring no authentication.
Sierra Wireless SwiService.exe Abuse in PnP Attack
Sierra Wireless's SwiService.exe, a SYSTEM service, is abused in the PnP attack chain to redirect DNS and facilitate privilege escalation.
HollowGraph Malware Uses Microsoft 365 Calendar Events Dated 2050 for C2 and Data Exfiltration
Group-IB has discovered a new espionage implant named HollowGraph that hijacks Microsoft 365 calendars for command-and-control (C2) and data exfiltration. The malware,…
CVE-2026-4890: Vulnerability in dnsmasq
One of six vulnerabilities discovered in dnsmasq as part of OpenAI's Daybreak initiative.
CVE-2026-4891: Vulnerability in dnsmasq
One of six vulnerabilities discovered in dnsmasq as part of OpenAI's Daybreak initiative.
CVE-2026-4892: Vulnerability in dnsmasq
One of six vulnerabilities discovered in dnsmasq as part of OpenAI's Daybreak initiative.
CVE-2026-5172: Vulnerability in dnsmasq
One of six vulnerabilities discovered in dnsmasq as part of OpenAI's Daybreak initiative.