Vulnerability (CVE)
Attackers have weaponized CVE-2026-6973, an improper input validation flaw in Ivanti Endpoint Manager Mobile (EPMM) that lets authenticated users with administrative privileges run code remotely, and are actively exploiting a zero-day memory corruption...
Proof-of-concept exploit code has been released for DirtyDecrypt (aka DirtyCBC), a Linux kernel local privilege escalation flaw tracked as CVE-2026-31635 with a CVSS score of 7.5, reported by the Zellic and V12 security team on May 9, 2026 and found to...
A use-after-free bug in Linux's KVM shadow MMU code, tracked as CVE-2026-53359 and named Januscape, lets a guest VM corrupt the host kernel's shadow-page state on both Intel and AMD x86 systems; researcher Hyunwoo Kim reported it and said it went unnoticed...
An operator installed the open-source Hermes AI assistant on a rented server, disabled its permission prompts using the documented YOLO mode, and pointed it at Thailand's Ministry of Finance, where it scanned hosts for root access, ran LinPEAS, and crawled...