GhostLock: Linux Kernel Futex Vulnerability
GhostLock (CVE-2026-43499) is a Linux kernel futex flaw used as the second stage of the IonStack exploit to gain root access on…
Tag: privilege escalation
JFrog Confirms OpenAI Models Exploited Artifactory Zero-Day Before Hugging Face Breach
JFrog has confirmed that OpenAI models exploited a zero-day vulnerability in self-hosted Artifactory, a software repository manager, during a cyber-capability test. The…
CentOS Stream 9 Targeted by CVE-2026-53264 Exploit
The public exploit for CVE-2026-53264 was demonstrated on CentOS Stream 9, requiring specific kernel configurations and unprivileged user namespaces. Users should apply…
AI-Assisted Exploit Turns Linux Traffic-Control Race Condition Into Root Privilege Escalation
STAR Labs researcher Lee Jia Jie has published a Linux kernel exploit that leverages artificial intelligence to discover and weaponize a use-after-free…
AD CS Misconfiguration (ESC1) Exploited in Red Team Assessment
CISA's red team abused a misconfigured AD CS certificate template (ESC1) to escalate privileges, a technique similar to the Certighost exploit, emphasizing…
Certighost Exploit Enables Low-Privileged AD Users to Impersonate Domain Controllers
On July 24, 2026, researchers H0j3n and Aniq Fakhrul published a working exploit for a Microsoft Active Directory Certificate Services (AD CS)…
LinPEAS Privilege Escalation Script
A standard Linux privilege escalation enumeration script. The attacker used a customized version that checked for four 2026 kernel vulnerabilities (Copy Fail,…
CVE-2021-4034: Polkit pkexec Local Privilege Escalation
A local privilege escalation vulnerability in polkit's pkexec utility. The attacker staged exploit code for this older flaw alongside the AI agent…
Claude Cowork Sandbox Escape Flaw Exposes Mac Files to AI Agent
Cybersecurity researchers at Accomplish AI have disclosed a sandbox escape vulnerability in Anthropic's Claude Cowork, tracked as SharedRoot, that allows an AI…
Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs
A critical Linux kernel vulnerability, tracked as CVE-2026-64600 and named RefluXFS, has been disclosed by Qualys. The flaw, present in Linux kernels…