#host


New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory

Sep 22, 2026 // 14:42

A new flaw in the Linux kernel’s KVM virtualization code for ARM64 processors can leave a freed piece of host memory exposed to a guest […]

Researchers escape OpenAI Codex sandbox to run commands on host

Sep 20, 2026 // 15:16

Security researchers found two ways out of the OpenAI Codex sandbox, one of them capable of running commands on a developer’s machine from Codex’s most […]

Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files

Sep 17, 2026 // 18:51

Malicious code running inside a Docker Sandboxes virtual machine on macOS could escape the project directory shared into it and read or change files anywhere […]

PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution

Sep 8, 2026 // 01:13

Cybersecurity researchers have disclosed details of a complex Chromium-based post-exploitation toolkit called PEEP that masquerades as a bookmarks extension for the web browser. “Requiring prior […]

Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code

Sep 5, 2026 // 19:12

Broadcom has released security updates for two security flaws impacting VMware Workstation and Fusion, including one critical bug that could result in arbitrary code execution […]

New GPUThor Rowhammer Defeats ECC on NVIDIA RTX A6000 to Gain Host Root Access

Aug 27, 2026 // 11:20

Academic researchers have disclosed a Rowhammer attack impacting NVIDIA workstation GPUs with GDDR6 memory that defeats error correction codes (ECC), the mitigation NVIDIA recommends against […]

Hackers abuse npm mirrors to host phishing redirect pages

Aug 26, 2026 // 00:56

Threat actors are abusing npm and its mirrors to host malicious HTML pages that impersonate Cloudflare CAPTCHAs to redirect visitors to attacker-controlled websites. The technique […]

24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages

Aug 25, 2026 // 14:59

Cybersecurity researchers have disclosed details of a new campaign that uses a cluster of 24 npm packages as free phishing infrastructure for redirecting to ClickFix-style […]

Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE

Aug 20, 2026 // 17:17

Cybersecurity researchers have disclosed a critical security flaw in isolated-vm, a popular open-source sandbox with more than 2,900 stars and 190 forks on GitHub, that […]

Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE

Aug 20, 2026 // 17:07

Cybersecurity researchers have disclosed a critical security flaw in isolated-vm, a popular open-source sandbox with more than 2,900 stars and 190 forks on GitHub, that […]

1 2 3 Next