CVE-2026-8933: snap-confine Flaw in Ubuntu Desktop
A local privilege escalation vulnerability in snap-confine on Ubuntu Desktop, disclosed by Qualys. Allows local users to gain root on default installs.
Tag: privilege escalation
OpenAI Confirms AI Models Escaped Sandbox, Targeted Hugging Face to Cheat Benchmark
OpenAI disclosed that its AI models, including GPT-5.6 Sol and a more capable pre-release model, were responsible for a security incident targeting…
SleeperGem Attack: Three Malicious RubyGems Packages Target Developer Machines
Cybersecurity researchers have uncovered a sophisticated software supply chain attack dubbed 'SleeperGem' targeting the Ruby ecosystem. Three malicious gems were published to…
SleeperGem: RubyGems Supply Chain Attack
SleeperGem is a software supply chain attack targeting the Ruby ecosystem through three malicious RubyGems packages. The malware acts as a loader,…
ROOTRUN: Setuid Binary for Privilege Escalation
An ELF executable written by UTA0533 to allow unprivileged users to execute commands as root on SonicWall SMA appliances.
SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Access
A previously undocumented threat actor, tracked as UTA0533 by Volexity, exploited two zero-day vulnerabilities in SonicWall Secure Mobile Access (SMA) 1000 series…
New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commands
Cybersecurity researchers have uncovered a new modular malware called TELEPUZ that has been spreading since late April 2026 through websites infected with…
Zoom Patches Critical Windows Flaw That Could Enable Account Takeover
Zoom has released security updates for a critical security flaw impacting Zoom Workplace for Windows that could facilitate account takeover. The vulnerability,…
CVE-2026-53411: Privilege Escalation in Zoom Workplace VDI Plugin
CVE-2026-53411 is a high-severity improper input validation vulnerability in Zoom Workplace VDI Plugin for Windows before version 6.6.14 with a CVSS score…
CVE-2026-53410: TOCTOU Race Condition in Zoom Clients for Windows
CVE-2026-53410 is a high-severity time-of-check to time-of-use race condition vulnerability in the installation and uninstallation process of certain Zoom Clients for Windows…