#gain


New RefluXFS Linux flaw lets attackers gain root privileges

Jul 23, 2026 // 14:56

A nine-year-old race condition vulnerability in the Linux kernel’s XFS filesystem, tracked as CVE-2026-64600, allows local attackers to overwrite protected files and gain root privileges. […]

SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Access

Jul 19, 2026 // 16:25

A previously undocumented threat actor has been attributed to the exploitation of recently disclosed SonicWall Secure Mobile Access (SMA) 1000 series VPN appliances as zero-days […]

Hackers Use Fake Microsoft Entra Passkey Enrollment to Gain Microsoft 365 Access

Jul 10, 2026 // 16:46

A threat actor has been targeting organizations spanning multiple sectors with voice-based fake security requests that prompt Microsoft 365 users to enroll a new Entra […]

New “Bad Epoll” Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android

Jul 3, 2026 // 23:06

A newly disclosed Linux kernel flaw called Bad Epoll (CVE-2026-46242) lets an ordinary user with no special access take full control of a machine as […]

New DirtyClone Linux Kernel Flaw Lets Local Users Gain Root via Cloned Packets

Jun 26, 2026 // 14:58

DirtyClone is a new Linux kernel privilege escalation in the DirtyFrag family. JFrog Security Research published a working exploit walkthrough for the flaw on June 25, the […]

Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited to Gain Root Access

Jun 25, 2026 // 08:52

An unknown threat actor exploited a recently disclosed high-severity security flaw impacting Cisco Catalyst SD-WAN as a zero-day at least two months before it was […]

ServiceNow Flaw Exploited to Gain Unauthorized Access to Customer Instances

Jun 10, 2026 // 10:20

ServiceNow has warned about a security incident in which unknown threat actors exploited a flaw to obtain deeper unauthorized access to susceptible instances. “On June […]

Critical UniFi OS bug lets hackers gain root without authentication

Jun 8, 2026 // 19:57

Attackers can chain three already fixed vulnerabilities in the Ubiquiti UniFi OS server to execute remote code with root privileges and without authentication. The security […]

New Fragnesia Linux flaw lets attackers gain root privileges

May 14, 2026 // 20:58

Linux distros are rolling out patches for a new high-severity kernel privilege escalation vulnerability that allows attackers to run malicious code as root. Known as […]

Compromised Credentials Bypass MFA; Attackers Still Gain Access.

Apr 9, 2026 // 18:37

The data leak at Figure compromised 967,200 email accounts without relying on any software flaws. Understanding the implications of this, and why typical MFA solutions […]