#exploit — Public Fediverse posts

When configuration becomes a vulnerability: Exploitable misconfigurations in AI apps | Microsoft Security Blog

https://www.microsoft.com/en-us/security/blog/2026/05/14/configuration-becomes-vulnerability-exploitable-misconfigurations-ai-apps/

Read on HackerWorkspace: https://hackerworkspace.com/article/when-configuration-becomes-a-vulnerability-exploitable-misconfigurations-in-ai-apps-microsoft-security-blog

#aisecurity #vulnerability #exploit

🚨 OH NO! A new "exploit" is out! 🙀 Quick, everyone #panic and rush to #GitHub where you'll be greeted with a labyrinth of #buzzwords, AI tools, and #security features that promise to solve all your coding woes with a sprinkle of ✨ magical #tech pixie dust ✨. Meanwhile, the actual #exploit is probably chilling somewhere, laughing at this chaotic digital circus. 🤡🔐
https://github.com/DepthFirstDisclosures/Nginx-Rift #chaos #HackerNews #ngated

New Nginx Exploit

https://github.com/DepthFirstDisclosures/Nginx-Rift

#HackerNews #Nginx #Exploit #Cybersecurity #Vulnerability #Hacking #OpenSource

⚠️ Alerta de #seguretat! S'ha descobert un nou exploit #ZeroDay anomenat #YellowKey que posa en risc la integritat dels sistemes. 🛡️

És molt important estar al corrent d'aquesta amenaça i extremar les precaucions fins que es publiqui un pegat oficial. 🚨

Llegeix-ne tots els detalls aquí:
https://blog.elhacker.net/2026/05/un-exploit-zero-day-llamado-yellowkey.html

#Ciberseguretat #YellowKey #Exploit #Hacking #InfoSec #Tech #Alerta

⚠️ Alerta de #seguretat! S'ha descobert un nou exploit #ZeroDay anomenat #YellowKey que posa en risc la integritat dels sistemes. 🛡️

És molt important estar al corrent d'aquesta amenaça i extremar les precaucions fins que es publiqui un pegat oficial. 🚨

Llegeix-ne tots els detalls aquí:
https://blog.elhacker.net/2026/05/un-exploit-zero-day-llamado-yellowkey.html

#Ciberseguretat #YellowKey #Exploit #Hacking #InfoSec #Tech #Alerta

⚠️ Alerta de #seguretat! S'ha descobert un nou exploit #ZeroDay anomenat #YellowKey que posa en risc la integritat dels sistemes. 🛡️

És molt important estar al corrent d'aquesta amenaça i extremar les precaucions fins que es publiqui un pegat oficial. 🚨

Llegeix-ne tots els detalls aquí:
https://blog.elhacker.net/2026/05/un-exploit-zero-day-llamado-yellowkey.html

#Ciberseguretat #YellowKey #Exploit #Hacking #InfoSec #Tech #Alerta

⚠️ Alerta de #seguretat! S'ha descobert un nou exploit #ZeroDay anomenat #YellowKey que posa en risc la integritat dels sistemes. 🛡️

És molt important estar al corrent d'aquesta amenaça i extremar les precaucions fins que es publiqui un pegat oficial. 🚨

Llegeix-ne tots els detalls aquí:
https://blog.elhacker.net/2026/05/un-exploit-zero-day-llamado-yellowkey.html

#Ciberseguretat #YellowKey #Exploit #Hacking #InfoSec #Tech #Alerta

⚠️ Alerta de #seguretat! S'ha descobert un nou exploit #ZeroDay anomenat #YellowKey que posa en risc la integritat dels sistemes. 🛡️

És molt important estar al corrent d'aquesta amenaça i extremar les precaucions fins que es publiqui un pegat oficial. 🚨

Llegeix-ne tots els detalls aquí:
https://blog.elhacker.net/2026/05/un-exploit-zero-day-llamado-yellowkey.html

#Ciberseguretat #YellowKey #Exploit #Hacking #InfoSec #Tech #Alerta

SANS Stormcast Thursday, May 14th, 2026: Flexbile Windows Proxy; News from Nightmare Eclipse; A…

https://www.youtube.com/watch?v=-T1x8rCIblA

#vulnerability #exploit #securitypatch

SANS Stormcast Thursday, May 14th, 2026: Flexbile Windows Proxy; News from Nightmare Eclipse; A…

https://www.youtube.com/watch?v=-T1x8rCIblA

#vulnerability #exploit #securitypatch

SANS Stormcast Thursday, May 14th, 2026: Flexbile Windows Proxy; News from Nightmare Eclipse; A…

https://www.youtube.com/watch?v=-T1x8rCIblA

#vulnerability #exploit #securitypatch

SANS Stormcast Thursday, May 14th, 2026: Flexbile Windows Proxy; News from Nightmare Eclipse; A…

https://www.youtube.com/watch?v=-T1x8rCIblA

#vulnerability #exploit #securitypatch

SANS Stormcast Thursday, May 14th, 2026: Flexbile Windows Proxy; News from Nightmare Eclipse; Adobe Patches

https://isc.sans.edu/podcastdetail/9932

Read on HackerWorkspace: https://hackerworkspace.com/article/sans-stormcast-thursday-may-14th-2026-flexbile-windows-proxy-news-from-nightmare-eclipse-adobe-patches

#encryption #vulnerability #exploit

Microsoft BitLocker-protected drives can now be opened with just some files on a USB stick — YellowKey zero-day exploit demonstrates an apparent backdoor | Tom's Hardware

#microsoft #bitlocker #encryption #exploit #zeroday

https://www.tomshardware.com/tech-industry/cyber-security/microsoft-bitlocker-protected-drives-can-now-be-opened-with-just-some-files-on-a-usb-stick-yellowkey-zero-day-exploit-demonstrates-an-apparent-backdoor

EntryPoint Hijacking

https://ipurple.team/2026/05/13/entrypoint-hijacking/

Read on HackerWorkspace: https://hackerworkspace.com/article/entrypoint-hijacking

#malware #cybersecurity #exploit

Mystery Microsoft bug leaker keeps the zero-days coming

https://www.theregister.com/security/2026/05/13/disgruntled-researcher-releases-two-more-microsoft-zero-days/5239758

Read on HackerWorkspace: https://hackerworkspace.com/article/mystery-microsoft-bug-leaker-keeps-the-zero-days-coming

#databreach #vulnerability #exploit

Windows BitLocker zero-day gives access to protected drives, PoC released

https://www.bleepingcomputer.com/news/security/windows-bitlocker-zero-day-gives-access-to-protected-drives-poc-released/

Read on HackerWorkspace: https://hackerworkspace.com/article/windows-bitlocker-zero-day-gives-access-to-protected-drives-poc-released

#encryption #vulnerability #exploit

If you're attending #PWN2OWN, be sure to watch Doyensec's Leonardo Giovannini demonstrate his #OpenAI Codex 0day exploit live Thursday, May 14 at 15:30.

If you can't make it in person, keep an eye on https://blog.doyensec.com/ for more great #ai security research like this - coming very soon!

See the PWN2OWN schedule here: https://www.zerodayinitiative.com/blog/2026/5/13/pwn2own-berlin-2026-the-full-schedule

#appsec #doyensec #ai #0day #exploit

If you're attending #PWN2OWN, be sure to watch Doyensec's Leonardo Giovannini demonstrate his #OpenAI Codex 0day exploit live Thursday, May 14 at 15:30.

If you can't make it in person, keep an eye on https://blog.doyensec.com/ for more great #ai security research like this - coming very soon!

See the PWN2OWN schedule here: https://www.zerodayinitiative.com/blog/2026/5/13/pwn2own-berlin-2026-the-full-schedule

#appsec #doyensec #ai #0day #exploit

If you're attending #PWN2OWN, be sure to watch Doyensec's Leonardo Giovannini demonstrate his #OpenAI Codex 0day exploit live Thursday, May 14 at 15:30.

If you can't make it in person, keep an eye on https://blog.doyensec.com/ for more great #ai security research like this - coming very soon!

See the PWN2OWN schedule here: https://www.zerodayinitiative.com/blog/2026/5/13/pwn2own-berlin-2026-the-full-schedule

#appsec #doyensec #ai #0day #exploit

If you're attending #PWN2OWN, be sure to watch Doyensec's Leonardo Giovannini demonstrate his #OpenAI Codex 0day exploit live Thursday, May 14 at 15:30.

If you can't make it in person, keep an eye on https://blog.doyensec.com/ for more great #ai security research like this - coming very soon!

See the PWN2OWN schedule here: https://www.zerodayinitiative.com/blog/2026/5/13/pwn2own-berlin-2026-the-full-schedule

#appsec #doyensec #ai #0day #exploit

If you're attending #PWN2OWN, be sure to watch Doyensec's Leonardo Giovannini demonstrate his #OpenAI Codex 0day exploit live Thursday, May 14 at 15:30.

If you can't make it in person, keep an eye on https://blog.doyensec.com/ for more great #ai security research like this - coming very soon!

See the PWN2OWN schedule here: https://www.zerodayinitiative.com/blog/2026/5/13/pwn2own-berlin-2026-the-full-schedule

#appsec #doyensec #ai #0day #exploit

How I Got RCE by Bypassing a JavaScript Sandbox

https://www.youtube.com/watch?v=P7naqW180rE

#vulnerability #exploit #penetrationtesting

Fortinet warns of critical RCE flaws in FortiSandbox and FortiAuthenticator

https://www.bleepingcomputer.com/news/security/fortinet-warns-of-critical-rce-flaws-in-fortisandbox-and-fortiauthenticator/

Read on HackerWorkspace: https://hackerworkspace.com/article/fortinet-warns-of-critical-rce-flaws-in-fortisandbox-and-fortiauthenticator

#vulnerability #exploit #securitypatch

Fortinet warns of critical RCE flaws in FortiSandbox and FortiAuthenticator

https://www.bleepingcomputer.com/news/security/fortinet-warns-of-critical-rce-flaws-in-fortisandbox-and-fortiauthenticator/

Read on HackerWorkspace: https://hackerworkspace.com/article/fortinet-warns-of-critical-rce-flaws-in-fortisandbox-and-fortiauthenticator

#vulnerability #exploit #securitypatch

Fortinet warns of critical RCE flaws in FortiSandbox and FortiAuthenticator

https://www.bleepingcomputer.com/news/security/fortinet-warns-of-critical-rce-flaws-in-fortisandbox-and-fortiauthenticator/

Read on HackerWorkspace: https://hackerworkspace.com/article/fortinet-warns-of-critical-rce-flaws-in-fortisandbox-and-fortiauthenticator

#vulnerability #exploit #securitypatch

Fortinet warns of critical RCE flaws in FortiSandbox and FortiAuthenticator

https://www.bleepingcomputer.com/news/security/fortinet-warns-of-critical-rce-flaws-in-fortisandbox-and-fortiauthenticator/

Read on HackerWorkspace: https://hackerworkspace.com/article/fortinet-warns-of-critical-rce-flaws-in-fortisandbox-and-fortiauthenticator

#vulnerability #exploit #securitypatch

SAP fixes critical vulnerabilities in Commerce Cloud and S/4HANA

https://www.bleepingcomputer.com/news/security/sap-fixes-critical-vulnerabilities-in-commerce-cloud-and-s-4hana/

Read on HackerWorkspace: https://hackerworkspace.com/article/sap-fixes-critical-vulnerabilities-in-commerce-cloud-and-s-4hana

#vulnerability #exploit #securitypatch

SAP fixes critical vulnerabilities in Commerce Cloud and S/4HANA

https://www.bleepingcomputer.com/news/security/sap-fixes-critical-vulnerabilities-in-commerce-cloud-and-s-4hana/

Read on HackerWorkspace: https://hackerworkspace.com/article/sap-fixes-critical-vulnerabilities-in-commerce-cloud-and-s-4hana

#vulnerability #exploit #securitypatch

SAP fixes critical vulnerabilities in Commerce Cloud and S/4HANA

https://www.bleepingcomputer.com/news/security/sap-fixes-critical-vulnerabilities-in-commerce-cloud-and-s-4hana/

Read on HackerWorkspace: https://hackerworkspace.com/article/sap-fixes-critical-vulnerabilities-in-commerce-cloud-and-s-4hana

#vulnerability #exploit #securitypatch

SAP fixes critical vulnerabilities in Commerce Cloud and S/4HANA

https://www.bleepingcomputer.com/news/security/sap-fixes-critical-vulnerabilities-in-commerce-cloud-and-s-4hana/

Read on HackerWorkspace: https://hackerworkspace.com/article/sap-fixes-critical-vulnerabilities-in-commerce-cloud-and-s-4hana

#vulnerability #exploit #securitypatch

Google deteta primeiro exploit criado por inteligência artificial em ataques reais
🔗 https://tugatech.com.pt/t83237-google-deteta-primeiro-exploit-criado-por-inteligencia-artificial-em-ataques-reais

#artificial #exploit #google 

Firefox update on Linux Mint is now available in Update Manager.

#firefox #exploit #LinuxMint #hack

Girondins : Bordeaux peut-il encore créer l’exploit à Avranches ?

© Iconsport Talk des Girondins chaque lundi : l’actu des Girondins commentée Cette émission est placée sous le…
#Bordeaux #FR #France #Actu #News #Europe #EU #abordent #actu #Actualités #avant #avec #Avranches #créer #déplacement #derniere #encore #espoir #europe #exploit #Girondins #infime #journee #montee #national #NouvelleAquitaine #peut #Républiquefrançaise
https://www.europesays.com/fr/926569/

https://www.europesays.com/fr/926569/ Girondins : Bordeaux peut-il encore créer l’exploit à Avranches ? #abordent #actu #Actualités #avant #avec #Avranches #Bordeaux #créer #déplacement #derniere #encore #espoir #EU #europe #exploit #FR #France #Girondins #infime #journee #montee #national #News #NouvelleAquitaine #peut #RépubliqueFrançaise

Investigadores da Google detetam primeiro exploit zero-day criado por inteligência artificial
🔗 https://tugatech.com.pt/t83155-investigadores-da-google-detetam-primeiro-exploit-zero-day-criado-por-inteligencia-artificial

#artificial #exploit #google 

SANS Stormcast Monday, May 11th, 2026: New Linux Priv Escalation; PAM Backdoors; CPanel Updates; Let’s Encrypt

https://isc.sans.edu/podcastdetail/9926

Read on HackerWorkspace: https://hackerworkspace.com/article/sans-stormcast-monday-may-11th-2026-new-linux-priv-escalation-pam-backdoors-cpanel-updates-lets-encrypt

#authentication #vulnerability #exploit

I Built an AI That Builds Zero Day Exploits

https://www.youtube.com/watch?v=BLqRiL_GY3A

#aisecurity #exploit #zeroday

cPanel, WHM Release Fixes for Three New Vulnerabilities — Patch Now

https://thehackernews.com/2026/05/cpanel-whm-patch-3-new-vulnerabilities.html

Read on HackerWorkspace: https://hackerworkspace.com/article/cpanel-whm-release-fixes-for-three-new-vulnerabilities-patch-now

#vulnerability #exploit #securitypatch

cPanel, WHM Release Fixes for Three New Vulnerabilities — Patch Now

https://thehackernews.com/2026/05/cpanel-whm-patch-3-new-vulnerabilities.html

Read on HackerWorkspace: https://hackerworkspace.com/article/cpanel-whm-release-fixes-for-three-new-vulnerabilities-patch-now

#vulnerability #exploit #securitypatch

cPanel, WHM Release Fixes for Three New Vulnerabilities — Patch Now

https://thehackernews.com/2026/05/cpanel-whm-patch-3-new-vulnerabilities.html

Read on HackerWorkspace: https://hackerworkspace.com/article/cpanel-whm-release-fixes-for-three-new-vulnerabilities-patch-now

#vulnerability #exploit #securitypatch

cPanel, WHM Release Fixes for Three New Vulnerabilities — Patch Now

https://thehackernews.com/2026/05/cpanel-whm-patch-3-new-vulnerabilities.html

Read on HackerWorkspace: https://hackerworkspace.com/article/cpanel-whm-release-fixes-for-three-new-vulnerabilities-patch-now

#vulnerability #exploit #securitypatch

"Dirty Frag" (CVE-2026-43284): The Second Linux Root Exploit in Eight Days

https://www.copahost.com/blog/dirty-frag-cve-2026-43284/

#HackerNews #DirtyFrag #CVE2026 #Linux #Exploit #Cybersecurity #Vulnerability #RootAccess

#Korben: #Dirty #Frag - L' #exploit #kernel #Linux qui donne un #accès #root sur toutes les #distros

https://korben.info/dirtyfrag.html

El lado del mal - El impacto de Mythos en concreto y la IA en general en el trabajo de los CISOs https://elladodelmal.com/2026/05/el-impacto-de-mythos-en-concreto-y-la.html #Mythos #IA #AI #Mythos #InteligenciaArtificial #Bugs #Bug #Exploit #Exploiting #Hacking #CISO #pentesting

Oh, look! Another day, another Linux kernel exploit—because who doesn't love a side of root access with their stack overflow? 🤦‍♂️💻 Apparently, all it takes is a measly u32, and voilà, you're the admin now! 🚀 I guess security's just a suggestion. 🙃
https://ze3tar.github.io/post-zcrx.html #LinuxKernel #Exploit #RootAccess #CyberSecurity #StackOverflow #AdminAccess #HackerNews #ngated

You gave me a u32. I gave you root. (io_uring ZCRX freelist LPE)

https://ze3tar.github.io/post-zcrx.html

#HackerNews #io_uring #ZCRX #LPE #root #exploit #security #research #hacking