/
vendors:CISA × criticity:high × latest_source_host:thehackernews.com × limpar

Resultados

2 casos · pág. 1/1

thehackernews.com · high

CL-STA-0954 exploits FortiOS CVE-2025-61624 to deploy memory-resident ARM64 implant PEERSTITCH after FortiJump breach

Palo Alto Networks Unit 42 reports that a suspected advanced actor tracked as CL-STA-0954 (aka UNC5820) deployed a previously unreported memory-resident ARM64 implant, PEERSTITCH, on Fortinet FortiGate firewalls. The group exploited the FortiOS path traversal flaw CVE-2025-61624 for the final stage. The intrusion hit a telecommunications …

CVE-2025-61624 CVE-2024-47575 CVE-2024-26009 CL-STA-0954 UNC5820 telecommunications managed service providers
thehackernews.com · · 2 fontes · 2 atualizações high

PwnEscape (CVE-2026-99999): Linux kernel networking flaw lets guest VMs leak host memory, demonstrated on Vercel sandboxes

A critical Linux kernel networking flaw, CVE-2026-99999 (nicknamed PwnEscape, CVSS 9.3), lets code inside a guest VM read host memory, crash the host and, in lab conditions, run code on it. Researcher Paulos Yibelo of pwn.ai demonstrated the memory leak against Vercel's production sandboxes, which Vercel confirmed. The flaw was found in a…

CVE-2026-99999 cloud computing