VulnerabilitiesFalconFlank: PoC Released for Privilege Escalation in CrowdStrike Falcon
FalconFlank PoC targets CrowdStrike Falcon Sensor privilege escalation via Office macro remediation on Windows 11 25H2 and Server 2025. No CVE yet.
/// Cyber Security · Threat Intelligence · CVE
Latest news — Page 8
More news
Page 8 / 48 · 432 articlesVulnerabilities
Data BreachesNexus: 153 Million Driver’s Licenses on the Dark Web, Raising Suspicions of a Near–Real-Time Scanning Pipeline
Nexus sells 153M driver's licenses with IR/UV scans appearing hours after scanning, suggesting a live theft pipeline. FBI investigates IDScan.net link.
VulnerabilitiesGit Turned into a Trap: Seven AI Agents Can Execute Code from Repositories
Seven AI coding agents execute attacker code via malicious Git core.fsmonitor config when auto-running git status, bypassing trust and sandbox controls.
MalwareStreamRat, the Android Trojan Spread Through Fake Streaming Ads on Meta
StreamRat is an Android trojan spread via fake streaming ads on Meta targeting Spain, using a dropper APK and Accessibility abuse for remote control.
MalwareU.S. Charges Russian Citizen in Phishing Campaign Using TVRAT and DarkVNC Against 80,000 Freelancers
U.S. charges Russian for phishing 80,000 freelancers via 255 fake accounts and Excel macros delivering TVRAT and DarkVNC for remote access and data theft.
VulnerabilitiesGeoNetwork: Two Flaws Enable Unauthenticated RCE in Public Geoportals
GeoNetwork fixed two flaws (CVE-2026-63219, CVE-2026-58400) allowing unauthenticated RCE via malicious XSLT upload and Saxon. Patched in 4.4.12 and 4.2.17.
MalwareSality, the P2P botnet used to steal cryptocurrency, disrupted after 23 years
CrowdStrike and law enforcement disrupted the 23-year-old Sality P2P botnet, sinkholing bots and blocking payloads used for crypto theft via EggJagger.
AIOpenAI Astra Reaches “Critical” Capability Level: Model Can Find Zero-Days and Complete Attack Chains
OpenAI's Astra hit Critical level for autonomously finding zero-days, escaping browser sandboxes and escalating to root. OpenAI will restrict its release.
VulnerabilitiesSwitchvox Under Attack: Critical SQL Injection Installs Reverse Shell Without Credentials
Hackers actively exploit CVE-2026-9586, a critical unauthenticated SQL injection in Sangoma Switchvox SMB, to deploy reverse shells. Patch to 8.4.0.2 now.