Daily CyberSecurity
@DailyCyberSecurity@infosec.exchange
Stay ahead with Daily CyberSecurity. We deliver rapid zero-hour alerts and expert analysis on critical vulnerabilities, CVEs, and emerging cyber threats.
infosec.exchange
Details and proof-of-concept exploit code for CVE-2026-50343 are now public. The Windows privilege escalation flaw hands standard users SYSTEM privileges.
#CVE202650343 #Windows #PrivilegeEscalation #LPE #InfoSec
https://securityonline.info/cve-2026-50343-privilege-escalation/?utm_source=mastodon&utm_medium=jetpack_social
ZEN SecDB
@secdb@infosec.exchange
ZEN #SecDB Portal provides an easy to use web interface to #CVE vulnerability data. You can browse for vendors, products and versions and view CVE entries, vulnerabilities, related to them. You can view statistics about vendors, products and versions of products. ZEN SecDB Portal: https://secdb.nttzen.cloud SecDB Telegram Channel: https://t.me/secdbportal_feed SecDB Telegram Bot: https://t.me/secdbportal_bot
infosec.exchange
🚨 RefluXFS (CVE-2026-64600) has been identified as a notable vulnerability.
In the Linux kernel, the following vulnerability has been resolved:
xfs: resample the data fork mapping after cycling ILOCK
RefluXFS is a local privilege escalation vulnerability in the Linux kernel's XFS filesystem copy-on-write path. It allows local users to overwrite protected files and gain root access.
ℹ️ Additional details on ZEN SecDB https://secdb.nttzen.cloud/updates/1d26eb14-ce27-4846-a8ce-bae087fb1e46/refluxfs-vulnerability
#infosec #refluxfs #linux #kernel #xfs #lpe
#nttdata #zen #secdb
Cloud 🤖
@cloud@infosec.exchange
🤖 Bot de veille cyber/IA — curation automatique: CVE critiques, exploits 0-day, data breaches, reverse engineering, attaques GNSS (jamming/spoofing), crypto post-quantum. FR/EN. Maintenu par un dev anonyme.
infosec.exchange
Cloud 🤖
@cloud@infosec.exchange
🤖 Bot de veille cyber/IA — curation automatique: CVE critiques, exploits 0-day, data breaches, reverse engineering, attaques GNSS (jamming/spoofing), crypto post-quantum. FR/EN. Maintenu par un dev anonyme.
infosec.exchange
🤖 CVE-2026-8933 (CVSS 7.8): LPE in Ubuntu snap-confine gives root on default desktop installs (24.04, 25.10, 26.04). Researchers published details — unprivileged users can escalate to root.
🔗 https://thehackernews.com/2026/07/ubuntu-snap-confine-flaw-could-give.html
#CVE #Ubuntu #LPE #CyberSec
Dirty Clone – kolejny sposób na roota pod Linuksem https://sekurak.pl/dirty-clone-kolejny-sposob-na-roota-pod-linuksem/ #Aktualnoci #Eskalacja #Hacking #Kernel #Linux #Localroot #Lpe #Pagecache
sekurak News
@sekurakbot@mastodon.com.pl
Bot publikujący najnowsze wiadomości sekurak.pl 
https://sekurak.pl Account by @kkrenski
mastodon.com.pl
Dirty Clone – kolejny sposób na roota pod Linuksem
Nie tak dawno pisaliśmy o serii podatności Dirty Frag występujących w większości nowoczesnych dystrybucji Linuksa. I choć mogłoby się wydawać, że deweloperzy naprawili błędy, to najnowsze badania pokazują, że problem nie został jednak wyeliminowany. W jądrze pozostała bowiem niezałatana luka, którą badacze z JFrog ochrzcili mianem Dirty Clone (CVE-2026-43503). Podobnie...
#Aktualności #Eskalacja #Hacking #Kernel #Linux #LocalRoot #Lpe #PageCache
https://sekurak.pl/dirty-clone-kolejny-sposob-na-roota-pod-linuksem/
ZEN SecDB
@secdb@infosec.exchange
ZEN #SecDB Portal provides an easy to use web interface to #CVE vulnerability data. You can browse for vendors, products and versions and view CVE entries, vulnerabilities, related to them. You can view statistics about vendors, products and versions of products. ZEN SecDB Portal: https://secdb.nttzen.cloud SecDB Telegram Channel: https://t.me/secdbportal_feed SecDB Telegram Bot: https://t.me/secdbportal_bot
infosec.exchange
🚨 DirtyClone (CVE-2026-43503)
In the Linux kernel, the following vulnerability has been resolved:
net: skbuff: propagate shared-frag marker through frag-transfer helpers
ℹ️ Additional info on ZEN SecDB https://secdb.nttzen.cloud/updates/9a1828d5-6607-419b-b475-622a6c135aae/dirtyclone-vulnerability
#nttdata #zen #secdb
#infosec #dirtyclone #linux #lpe #cve202643503
Jan Wildeboer 😷
@jwildeboer@social.wildeboer.net
My private account. Posts/Opinions are my own. Focused on #Open and TCP/ID, identity ownership in the real and digital world. 3D printer. Can solder and repair. Antifascist. European. Policy hacker. Rambles around at times. He/Him/His $argon2id$v=19$m=512,t=256,p=1$SWmoDffV/hOu+/Vii5Nxsw$zYZ5n+cXxZLKoLnXZJjll1JWcCFyiRVli7xOPqu63GM Blocks threads.net Works at Red Hat.
social.wildeboer.net
#LPE — Local Privilege Escalation. A class of vulnerabilities that need a local user account on the target machine to reach higher levels of privilege, up to superuser/root
#RCE — Remote Code Execution. A class of vulnerabilities that can be exploited over unprivileged network connections, giving the attacker privileged access to the target machine.
#CopyFail, #DirtyFrag are LPEs that affect Linux systems. LPEs are typically harder to exploit than RCEs.
Hope this helps to avoid Clickbait.
sekurak News
@sekurakbot@mastodon.com.pl
Bot publikujący najnowsze wiadomości sekurak.pl https://sekurak.pl Account by @kkrenski
mastodon.com.pl
Dirty Frag – kolejna metoda na root’a pod Linuxem
Pamiętacie Dirty Pipe? Łataliście ostatnio Copy Fail? Pasy zapięte? Nie? To niedobrze, bo kilka godzin temu pojawiła się nowa podatność określona mianem Dirty Frag. W ramce poniżej znajduje się tymczasowe rozwiązanie mające na celu wyłączenie niebezpiecznych modułów. Jest to luka klasy LPE (local privilege escalation), która pozwala na podniesienie uprawnień...
#Aktualności #EskalacjaUprawnień #Kernel #Linux #LocalRoot #Lpe #Pipe
https://sekurak.pl/dirty-frag-kolejna-metoda-na-roota-pod-linuxem/
Matthew Slowe
@fooflington@infosec.exchange
𝚆𝚊𝚔𝚎𝚄𝚙: 𝚕𝚍𝚛 𝚛𝟶, 𝟶𝚡𝚌𝟶𝚏𝚏𝚎𝚎; 𝚋𝚕 𝚍𝚛𝚒𝚗𝚔; 𝚖𝚘𝚟 𝚙𝚌,𝚕𝚛; /* 𝚅𝚒𝚎𝚠𝚜 𝚊𝚛𝚎 𝚖𝚒𝚗𝚎 𝚗𝚘𝚝 𝚖𝚢 𝚎𝚖𝚙𝚕𝚘𝚢𝚎𝚛'𝚜. */ Working in IT to help HE & FE (and other public sector) organisations work better together. Somewhere in the vicinity of the far South East of #England and occasionally in the farther reaches of #Scotland #photography #kent #highlands #linux #federation #eduroam #shibboleth #saml #itsecurity #highereducation #academia And it pains me to need to say that I do not consent to any third-party Mastodon or other fediverse instance's Terms of Service, as I am not a user of their service. All posts are my own, and permission to propagate them is always revocable.
infosec.exchange
https://copy.fail/
Local Privilege Escalation in every Linux kernel since 2017
Hopefully no one is sitting on a low-privilege RCE...
#linux #security #rce #lpe #cve #CVE202631431
You've seen all posts