XBOW discovered CVE-2026-72018, an out-of-bounds write in the Linux kernel's SMC-D driver, and turned one weak primitive into a working root exploit.

TL;DR This month, Apple issued critical security patches to address a local privilege escalation flaw in macOS. The macOS CoreServices vulnerability allows a malicious application to gain root privileges. Developers have released a public proof-of-concept exploit. Why It Matters Millions of Apple computers rely on CoreServices to manage background system operations. A macOS CoreServices vulnerability poses severe risks to user data.

Distribution: Omarchy 4.04 Package: dell-xps-touchpad-haptics Version: 1.0.0-3 Severity: High Vulnerability: Arbitrary file ownership change via symlink Weaknesses: ...

Between 14:30 and 14:41 UTC on the 18th of September 2026, an automated cPanel attack from 203[.]147[.]133[.]21 targeted web hosting infrastructure, issuing an API command to retrieve alfa-putih.txt...

TL;DR A researcher published RustyTux, a working proof-of-concept for a Linux kernel privilege escalation flaw. It abuses an ESP-in-TCP use-after-free race in the strparser and espintcp code. Both the vulnerability details and the exploit code are now public. No exploitation in the wild has been confirmed. Why This Linux Kernel Privilege Escalation Matters The espintcp module ships in kernels from many major distributions.

TL;DR Security researcher Ilya Andr from PT MAZE recently uncovered a critical flaw in macOS. The macOS DesktopServicesHelper vulnerability allows local attackers to elevate privileges directly to root. Furthermore, technical details of the vulnerability and working proof-of-concept exploit code have been publicly disclosed. Why It Matters Industry estimates suggest that over 100 million Mac devices run modern macOS installations worldwide. Therefore, flaws that grant root access pose a grave threat to desktop environments.

To protect customers from rising electricity prices, public officials are urging data center developers to supply their own power. But this approach risks privatizing the power grid…

À l'université Paris 8, la toute première promotion de licence LPE, le nouveau cursus de premier cycle préparant au métier de professeur des écoles, a fait sa rentrée. Reportage.

A vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation. - suce0155/CVE-2026-32996

This short blog post is about abusing a privilege escalation bug that Microsoft recently fixed in...