High-severity vulnerability in Linux caused by a single faulty character
… Security firm FuzzingLabs demonstrated a proof of concept exploit in April. …
Search
Hackers duped Meta AI support chatbot to steal celebrity Instagram accounts
… The wide security hole The CyberSec Guru also described the exploit as representing the classic “confused deputy” problem from computer security, in which a program with elevated permissions is tricked into misusing those permissions on behalf of a less privileged third party. …
Linux bitten by second severe vulnerability in as many weeks
… Once the exploits run, attackers can use SSH access, web-shell execution, or container escapes, or compromise low-privilege accounts. “Dirty Frag is notable because it introduces multiple kernel attack paths involving rxrpc and esp/xfrm networking components to improve exploitation reliability,” Mi… …
Zero-day exploit completely defeats default Windows 11 BitLocker protections
… Dan Goodin is Senior Security Editor at Ars Technica, where he oversees coverage of malware, computer espionage, botnets, hardware hacking, encryption, and passwords. …
Google publishes exploit code threatening millions of Chromium users
… Exploits are particularly hard to detect when run on Edge. …
Apple patches eavesdropping vulnerability in Beats Studio Buds
… Security firm Sentinel One has a deeper dive into CVE-2025-20701 here . …
PeopleSoft 0-day affecting hundreds of organizations steals gigabytes of data
… Dan Goodin is Senior Security Editor at Ars Technica, where he oversees coverage of malware, computer espionage, botnets, hardware hacking, encryption, and passwords. …
Critical Copilot vulnerability allowed hackers to seal 2FA code from users
… Security firm Varonis devised an exploit chain that was able to catapult over these guardrails. …
Millions of AI agents imperiled by critical vulnerability in open source package
… X41 D-Sec, the security firm that discovered it, described it as having “critical severity.” X41 D-Sec partnered with fellow security firm Nemesis to create an online scanner that can check if a given server is vulnerable. …
Locked in heated rivalry with researcher, Microsoft fixes 0-day they disclosed
… Dan Goodin is Senior Security Editor at Ars Technica, where he oversees coverage of malware, computer espionage, botnets, hardware hacking, encryption, and passwords. …