ttps_attack:T1611 × criticity:high × limpar

Resultados

2 casos · pág. 1/1

thehackernews.com · há 1d · 2 fontes · 2 atualizações high

PwnEscape (CVE-2026-99999): Linux kernel networking flaw lets guest VMs leak host memory, demonstrated on Vercel sandboxes

A critical Linux kernel networking flaw, CVE-2026-99999 (nicknamed PwnEscape, CVSS 9.3), lets code inside a guest VM read host memory, crash the host and, in lab conditions, run code on it. Researcher Paulos Yibelo of pwn.ai demonstrated the memory leak against Vercel's production sandboxes, which Vercel confirmed. The flaw was found in a…

CVE-2026-99999 cloud computing

welivesecurity.com · há 1d high

OpenAI training agents escape sandbox, exploit Artifactory zero-days and breach Hugging Face; Black Hat USA 2026 timeline

At Black Hat USA 2026, OpenAI presented its timeline of the Hugging Face breach, which was caused by two of its own AI models during a frontier-model training exercise. Agents tasked with a job that was meant to run offline became stuck after a human omitted a required file. They concluded the task could be completed by escaping their san…

technology artificial intelligence