Im Sommer wurde bekannt, dass iPhones der russischen Sicherheitsfirma Kaspersky per hoch entwickeltem Exploit übernommen wurden. Auf dem 37C3 gab es Details.

A catastrophic vulnerability that lurked silently within the Linux kernel for nearly 14 years is now actively weaponized in real-world cyberattacks, alongside two other critical errors. The United States Cybersecurity and Infrastructure Security Agency (CISA) officially confirmed the active exploitation of these three flaws, adding them to its infamous Known Exploited Vulnerabilities catalog. CISA has mandated that all federal agencies urgently deploy available updates and mitigation strategies no later than September 22.

A new Linux zero-day called Dirty Frag lets local attackers gain root privileges on major distributions with a single command, by chaining two kernel flaws in the algif_aead interface. Hyunwoo Kim disclosed the issue with a PoC, and no CVE or patch is available yet for affected systems including Ubuntu, Red Hat Enterprise Linux, CentOS Stream, AlmaLinux, openSUSE Tumbleweed, and Fedora. #DirtyFrag #HyunwooKim #Ubuntu #RedHatEnterpriseLinux #CentOSStream #AlmaLinux #openSUSETumbleweed #Fedora

Copy Fail, Copy Fail 2, and DirtyFrag are Linux kernel privilege escalation bugs that abuse page-cache corruption through legitimate kernel interfaces to reach root, with Copy Fail already reported as exploited in the wild and added to CISA's Known Exploited Vulnerabilities catalog. Elastic Security Labs recommends behavior-based detection and mitigation measures such as kernel patching, module blocking, dropping the page cache, and restricting unprivileged user namespaces. #CopyFail #CopyFail2 #DirtyFrag #CISA

A signed comparison error exposes a critical flaw within the Linux kernel. Specifically, this CVE-2026-52933 privilege escalation vulnerability allows malicious system control. Meanwhile, security researchers have publicly disclosed a working proof-of-concept exploit for this bug. Why It Matters This vulnerability carries a high CVSS score of 7.8. Moreover, the io_uring subsystem is a core component in modern Linux environments. A successful Linux kernel io_uring exploit grants attackers complete system control.

TL;DR Researchers published full details and proof-of-concept exploit code for CVE-2026-53361, a use-after-free in the Linux kernel AF_UNIX garbage collector. The flaw allows an unprivileged local user to escape a container and corrupt kernel memory. Multiple stable and enterprise kernels are affected, and patches are now available. Why It Matters This CVE-2026-53361 container escape bug needs no special privileges. Any local user with a shell can trigger it.

Intel processors feature a critical security mechanism designed specifically to prevent the Windows kernel from accessing standard application memory. However, during certain system calls, this vital protection mysteriously deactivates itself. A security specialist recently discovered this alarming behavior while developing a demonstration exploit for the HackSys Extreme Vulnerable Driver. The Expected SMAP Intervention The researcher leveraged an arbitrary write vulnerability to redirect kernel code execution.

Attackers can force Microsoft Defender to delete its own security components using a native Windows driver. This technique affects systems from Windows 7 through Windows 11 25H2. It requires neither a software vulnerability exploit nor a third-party driver payload. An attacker merely needs administrative rights featuring the SeLoadDriverPrivilege. Subsequently, the built-in BTR.sys driver permits arbitrary file and registry operations directly from the Windows kernel.

TL;DR A researcher published a proof-of-concept exploit for a Linux kernel AF_PACKET race condition. The flaw enables local privilege escalation from an ordinary user to root. Upstream fixed it in commit 03390aa, first included in the 7.2-rc7 tag. No CVE identifier has been assigned yet, so this report tracks the bug by its fix commit. Tracking ID: CVE Pending / TBA.

See how a vulnerability in the Arm Mali GPU can be exploited to gain kernel code execution even when Memory Tagging Extension (MTE) is enabled.

DirtyFrag is a Linux local privilege escalation that abuses two page-cache write bugs, CVE-2026-43284 and CVE-2026-43500, affecting major distributions including Ubuntu, RHEL, Fedora, CentOS Stream, AlmaLinux, and openSUSE. A public GitHub PoC spread quickly and drew attention in multiple countries, while no confirmed in-the-wild campaign has been reported yet. #DirtyFrag #CVE-2026-43284 #CVE-2026-43500 #Ubuntu #RHEL #Fedora #CentOSStream #AlmaLinux #openSUSE

Vorgestern gab Microsoft bekannt, dass man mit dem neuen Treiberprogramm von Windows 11 gezielt gegen Hypervisor-Cracks vorgehen will. Der Artikel <a href="https://tarnkappe.info/artikel/denuvo/microsoft-will-mit-windows-11-update-hypervisor-cracks-aushebeln-327814.html">Microsoft will mit Windows 11-Update Hypervisor-Cracks aushebeln</a> erschien zuerst auf <a href="https://tarnkappe.info">TARNKAPPE.INFO</a>

Wie der Jailbreaker TheFlow bei X bekannt gab, hat Sony mit dem Update seinen neuesten Kernel-Exploit für die PS4 und PS5 geschlossen. Der Artikel <a href="https://tarnkappe.info/artikel/jailbreaks/sony-beseitigt-mit-neuer-firmware-version-fuer-ps4-ps5-theflows-kernel-exploit-322488.html">Sony beseitigt mit neuer Firmware-Version für PS4 &#038; PS5 TheFlows Kernel-Exploit</a> erschien zuerst auf <a href="https://tarnkappe.info">TARNKAPPE.INFO</a>

Discover how a new attack technique bypasses Microsoft’s security, enabling OS downgrade attacks on Windows.