⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Tenable Hexa AI is a new agentic engine within the Tenable One platform that automates vulnerability remediation by bridging the gap between exposure identification and endpoint patching. It uses intent-driven routines to scope, deploy, and verify fixes, reducing remediation time from days to minutes.
This article covers the OVSwrap vulnerability (CVE-2026-64531) in the Linux kernel's Open vSwitch component, which enables local users to gain root access. The flaw is in the kernel datapath and can be triggered without special privileges if user namespaces are enabled.
This article describes a memory corruption vulnerability (CVE-2026-64531) in the Linux kernel's Open vSwitch datapath that allows local users to gain root privileges. The flaw, named OVSwrap, can be exploited without existing OVS bridge or host-level CAP_NET_ADMIN if unprivileged user namespaces are enabled.
Kali365 is a phishing kit that exploits Microsoft's device code authentication flow to gain access to corporate accounts. It uses lures impersonating trusted services like SharePoint to trick victims into approving attacker-controlled codes.
Kali365 is a phishing kit that exploits Microsoft's device code authentication flow to gain access to corporate accounts. It uses lures impersonating trusted services like SharePoint to trick victims into approving attacker-controlled codes.
Passkeys are designed to be a more secure alternative to passwords by using cryptographic key pairs that are resistant to phishing. However, researchers have demonstrated that malware can steal passkeys through vulnerabilities in Google Password Manager, highlighting that the surrounding software can still be exploited.