#KVMEscape
LightNews LightNews
tszzl-mir-rt2.selfhosted.social
RT @S1r1u5_: gotta give it to @OpenAI and their sane daybreak program

heif heist by harsh
kvmescape by paulos
php2shell by lcfr
gitlab rces by joaxcar
chrome full chain by moyix
wordpress rce by hashkitten

all largely thanks to openai daybreak giving researchers access to gpt 5.6 sol.
October 22, 2026 at 12:18 AM
cyberveille-ch.bsky.social
📢 CVE-2026-99999 : Évasion guest-to-host via une vulnérabilité dans la pile réseau Linux (KVM)

Cet article détaille la découverte de CVE-2026-99999, une vulnérabilité critique dans la pile réseau du noyau Linux permettant une…

🟡 vérification factuelle moyenne
#KVMEscape #LinuxKernel #Cyberveille
CVE-2026-99999 : Évasion guest-to-host via une vulnérabilité dans la pile réseau Linux (KVM)
Cet article détaille la découverte de CVE-2026-99999, une vulnérabilité critique dans la pile réseau du noyau Linux permettant une évasion complète guest-to-host depuis un environnement KVM. La recherche a été initiée dans le cadre du challenge sandbox à 1 million de dollars lancé par Vercel le 18 août 2026.
cyberveille.ch
October 19, 2026 at 8:00 PM
dissent.digital
Source: 404 Media
Author: Jason Koebler
Curated: https://dissent.digital
#AIsecurity #VMeescape #AIsafety #Cybersecurity #Metasecurity #KVMescape #AIvulnerabilities
October 6, 2026 at 12:00 PM
elucidating.extradimensional.space
We can gesture to other actors like Google that are actively working to build more robust sandboxes and paying security research teams to demonstrate capabilities.

In recent memory: pwn.ai/blog/kvmescape

Afaik, OpenAI doesn't do stuff like this.
Inside the Sandbox: How pwn Escaped Google kvmCTF (Before the Watershed)
Before sandbox escapes became one of AI security’s loudest conversations, pwn spent weeks inside nested KVM, built a 14,338-line exploit harness, and made Google’s live kvmCTF host return the flag. Th...
pwn.ai
October 1, 2026 at 11:01 PM
blue-labs.org
pwn.ai/blog/kvmescape
Inside the Sandbox: How pwn Escaped Google kvmCTF (Before the Watershed)
Before sandbox escapes became one of AI security’s loudest conversations, pwn spent weeks inside nested KVM, built a 14,338-line exploit harness, and made Google’s live kvmCTF host return the flag. Th...
pwn.ai
September 29, 2026 at 4:01 AM
securityonline.bsky.social
Researchers disclosed a PoC for the Januscape KVM escape (CVE-2026-53359). This use-after-free KVM bug impacts public clouds, allowing host panics and LPE.

#Januscape #KVMEscape #CVE202653359 #CyberSecurity #0day
Public Exploit Disclosed for Januscape KVM Escape and LPE (CVE-2026-53359)
Security researcher Hyunwoo Kim recently published technical details and a proof-of-concept for the Januscape KVM escape vulnerability. This flaw tracks officially as CVE-2026-53359. Januscape is a severe use-after-free vulnerability affecting the shadow memory management unit within x86 KVM environments. Attackers used this zero-day actively during the Google kvmCTF event. Now, the public release of the Januscape flaw elevates the risk for unpatched systems.
securityonline.info
July 6, 2026 at 5:06 PM