7 casos · pág. 1/1
CERT-FR advisory CERTFR-2026-AVI-1334, published 16 October 2026, reports multiple vulnerabilities in the Linux kernel shipped with Red Hat Enterprise Linux. Some of them allow a remote attacker to execute arbitrary code, escalate privileges and cause a remote denial of service. Other listed impacts are data integrity and confidentiality …
A command injection vulnerability, CVE-2026-4802, was disclosed in Cockpit, the web-based Linux administration tool from Red Hat. It was found by Hakai's Research team. Any authenticated user, including low-privilege accounts such as viewer, can inject OS commands through the system logs filter feature and obtain remote code execution on …
Certes received Frost & Sullivan's 2026 Global Enabling Technology Leadership Recognition in post-quantum cryptography (PQC) after an independent vendor evaluation. This is vendor and industry recognition news, not a security incident. The article frames the underlying risk as "harvest now, decrypt later" attacks, where data intercepted t…
Eight intermediate CA certificates of the Indian certificate authority eMudhra (emSign brand), generated on 30 April 2025, were found to have P-384 private keys so weak (integers below 256) that anyone can recover them from the public certificates and forge browser-trusted certificates for any domain. A researcher credited as Wayne report…
Nvidia introduced the OpenShell Reference Architecture at GTC Berlin. It is a blueprint for building, running, observing and policing AI agents on the OpenShell secure runtime, and it extends sandboxing to gateway-brokered credentials, identity and policy boundaries, and eventually routing and workflows (theregister.com). The design calls…
A critical Linux kernel networking flaw, CVE-2026-99999 (nicknamed PwnEscape, CVSS 9.3), lets code inside a guest VM read host memory, crash the host and, in lab conditions, run code on it. Researcher Paulos Yibelo of pwn.ai demonstrated the memory leak against Vercel's production sandboxes, which Vercel confirmed. The flaw was found in a…
The PHP security team released emergency fixes on October 21, 2026 for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials and API keys (…
