Introduction In Microsoft Azure, the management of access and permissions is critical for maintaining a secure environment. Azure Service Principals serve as non-human identities that allow applicatio...

The Wordfence Threat Intelligence team identified a severe security flaw in the AI Engine plugin, a widely used tool installed.

From analysing a WordPress plugin and exploiting it to get the flag.

TL;DR On September 22, 2026, cPanel published security advisories addressing three security flaws across its hosting platform. These cPanel security vulnerabilities allow authenticated attackers to gain root access and manipulate foreign databases. System administrators must apply the latest updates to secure shared hosting servers. Why It Matters Web hosting providers run cPanel on millions of shared servers worldwide. Consequently, isolation between tenants is vital for web safety.

TL;DR Security researchers recently disclosed a high-severity Sudo security vulnerability tracked as CVE-2026-96512. This flaw allows local users to bypass time-based access restrictions by manipulating timezone environment variables. System administrators must append a trailing 'Z' suffix to all time-restricted sudoers rules to mitigate this issue. Why It Matters Sudo operates as a setuid-root program on nearly all Linux distributions. Sourced industry estimates show that millions of Linux and Unix servers run sudo for privileged command execution.

TL;DR A researcher published RustyTux, a working proof-of-concept for a Linux kernel privilege escalation flaw. It abuses an ESP-in-TCP use-after-free race in the strparser and espintcp code. Both the vulnerability details and the exploit code are now public. No exploitation in the wild has been confirmed. Why This Linux Kernel Privilege Escalation Matters The espintcp module ships in kernels from many major distributions.

TL;DR Security researcher Ilya Andr from PT MAZE recently uncovered a critical flaw in macOS. The macOS DesktopServicesHelper vulnerability allows local attackers to elevate privileges directly to root. Furthermore, technical details of the vulnerability and working proof-of-concept exploit code have been publicly disclosed. Why It Matters Industry estimates suggest that over 100 million Mac devices run modern macOS installations worldwide. Therefore, flaws that grant root access pose a grave threat to desktop environments.