Privilege Escalation

Linux Kernel Privilege Escalation Vulnerability (Dirty Frag) Alert

Linux Kernel Privilege Escalation Vulnerability (Dirty Frag) Alert

| | Blog, Dirty Frag, Emergency Response, Linux kernel, Privilege Escalation
Overview Recently, NSFOCUS CERT has detected a Linux kernel privilege escalation vulnerability (Dirty Frag) disclosed online. Attackers use the logical defects of splice system calls in conjunction with xfrm-ESP or RxRPC protocol ...
NSFOCUS
Final blog pic (1)

Agent ID Administrator scope overreach: Service Principal takeover in Entra ID

| | AI agents, Blog, Microsoft, Privilege Escalation, Silverfort Labs Research
TL;DR The Microsoft Agent Identity Platform (Preview) gives AI agents their own identities in Entra ID (blueprints, agent identities, agent users) so you can govern and secure them like any other principal. To manage that ...
Blog – Silverfort
Shadow Admins in Active Directory: Hidden Privilege Paths Attackers Exploit

Shadow Admins in Active Directory: Hidden Privilege Paths Attackers Exploit

| | Active Directory, attack path mapping, corporate security, identity and access management, identity security, Offensive Security, Privilege Escalation
What Are Shadow Admins in AD? A common problem we encounter within many customer AD environments are accounts that, at first glance, may appear innocuous, but that actually have hidden administrative privileges ...
Offensive Security Blog: Latest Trends in Hacking | Praetorian
PwC review board CISCO Board Onboard with Security

Attackers Have Been Exploiting Cisco SD-WAN Zero-Day Flaw Since 2023

| | CISA Advisory, Cisco Systems, Cisco Talos, Five Eyes Intelligence Alliance, Network Security, Privilege Escalation, root access, SD-WAN, zero day exploit attack
Cisco and Five Eyes agencies are alerting organizations to a highly sophisticated attack, where threat actors compromise a Cisco SD-WAN controller via a zero-day flaw, downgrade the device to an earlier software ...
Security Boulevard

Critical SLUBStick Exploitation Technique Threatens Linux Security

| | Automated kernel patching, heap vulnerability, how SLUBStick exploit works, KernelCare Enterprise, Linux & Open Source News, Linux kernel, Linux kernel exploit, linux kernel patching, Linux Kernel Security, linux live patching, linux security, live patching, Privilege Escalation, SLUBStick, slubstick cve, slubstick linux
A new and highly-effective cross-cache attack named SLUBStick has emerged, targeting the Linux kernel with a remarkable 99% success rate in transforming a limited heap vulnerability into an arbitrary memory read-and-write capability ...
TuxCare

Google Vulnerability: ConfusedFunctions Leads To Data Access

| | , Cloud Functions vulnerability, ConfusedFunction exploit, Cybersecurity News, cybersecurity research, Privilege Escalation
Cybersecurity researchers, as of recent, have discovered a Google vulnerability impacting the Cloud Functions service. The Google vulnerability being categorized as one pertaining to privilege escalation, has been named ConfusedFunctions. In this ...
TuxCare
Hunting CVE-2024-30051

Hunting CVE-2024-30051

| | detection-engineering, Privilege Escalation, Threat Hunting
Hunting CVE-2024-30051 Desktop Window Manager Privilege EscalationOverviewCVE-2024-30051 is an out of bound write that has been identified in Desktop Window Manager that can be exploited to achieve privilege escalation to SYSTEM. The ...
SnapAttack - Medium

5M WordPress Websites At Risk Amid LiteSpeed Plugin Flaw

| | Cross-Site Scripting (XSS), Cyber Threats, Cybersecurity News, Cybersecurity Vulnerabilities, LiteSpeed Plugin, patch management, Privilege Escalation, Website Acceleration, Website Optimization, Website Security, wordpress security, Wordpress updates
A highly sensitive flaw has been identified in the LiteSpeed plugin of WordPress, which has put as many as 5 million websites at risk. Uncovered by the cybersecurity experts at Patchstack, the ...
TuxCare

Lazarus Hacker Group Actively Exploiting Windows Kernel Flaw

| | CVE-2024-21338, Cyber Attack Mitigation, Cyber Espionage, cybersecurity awareness, Cybersecurity News, cybersecurity posture, Cybersecurity Vulnerabilities, Kernel-Level Access, Lazarus Hacker Group, patch management, Privilege Escalation, Threat Intelligence, Windows Kernel Flaw, Zero-day Exploit
The cybersecurity world is abuzz with the revelation of Lazarus Group’s exploitation of a critical vulnerability in Windows Kernel. The Windows Kernel flaw, targeting CVE-2024-21338, has raised concerns due to its potential ...
TuxCare
ADCS ESC13 Abuse Technique

ADCS ESC13 Abuse Technique

| | Active Directory, ADC, Cybersecurity, Privilege Escalation, research
It is possible to configure an Active Directory Certificate Services (ADCS) certificate template with an issuance policy having an OID group link to a given AD group. This configuration makes AD treat ...
Posts By SpecterOps Team Members - Medium
Load more