New Linux 'Dirty Frag' zero-day gives root on all major distros

A new Linux zero-day vulnerability, named Dirty Frag, allows local attackers to gain root privileges on most major Linux ...
The Hacker News

Linux Kernel Dirty Frag LPE Exploit Enables Root Access Across Major Distributions

Dirty Frag exposes Linux systems to root escalation through chained kernel flaws, impacting Ubuntu, RHEL, Fedora, and others.
Morning Overview on MSN

Apple’s ‘Coruna’ and ‘DarkSword’ exploit kits are actively targeting iPhones running iOS 13 through 18.7

If you own an iPhone and have been putting off software updates, the window for complacency just closed. A government ...
Morning Overview on MSN

Apple’s leaked ‘Coruna’ and ‘DarkSword’ exploit kits are indiscriminately targeting iPhones running anything below iOS 26.2

Two leaked iPhone exploit kits are now circulating beyond the hands of the surveillance vendors that originally built them, ...

The most severe Linux threat to surface in years catches the world flat-footed

Publicly released exploit code for an effectively unpatched vulnerability that gives root access to virtually all releases of ...

CISA says ‘Copy Fail’ flaw now exploited to root Linux systems

CISA has warned that threat actors have started exploiting the "Copy Fail" Linux security vulnerability in the wild, one day ...
Blockonomi

ZetaChain’s $334K Gateway Exploit: How a Chained Vulnerability Drained Team Wallets Across 4 Chains

ZetaChain lost $334K in a targeted GatewayEVM exploit on April 26. No user funds were affected. A patch is now being deployed ...
Decrypt

DeFi Platform TrustedVolumes Hit by $6.7M Exploit

The liquidity resolver used by multiple DeFi protocols was hit, with DEX aggregator 1inch claiming no impact on its systems.
TechSpot

GPT-4 can exploit zero-day security vulnerabilities all by itself, a new study finds

A hot potato: GPT-4 stands as the newest multimodal large language model (LLM) crafted by OpenAI. This foundational model, currently accessible to customers as part of the paid ChatGPT Plus line, ...
Decrypt

Arbitrum DAO Votes to Unlock $70 Million for Kelp DAO Exploit Relief

Arbitrum DAO voted to release the Kelp exploit funds, but a U.S. Court restraining notice has put the approved transfer in ...
AppleInsider

Exploit that delivered Pegasus spyware patched in iOS 16.6.1 update

Apple's operating system updates on Thursday patched an exploit chain capable of compromising iOS 16.6 devices with the Pegasus spyware without any interaction from the victim. The exploit was ...
Ars Technica

Exploit released for 9.8-severity PaperCut flaw already under attack

Exploit code for a critical printer software vulnerability became publicly available on Monday in a release that may exacerbate the threat of malware attacks that have already been underway for the ...