exploit news
5 stories
Week in review: Researcher breaks into Microsoft analytics service, NetScaler RCE 0-day exploited
A 16-year-old security researcher has identified a vulnerability in Microsoft's internal analytics service, Titan, which could have exposed employee records and Bing search analytics. The flaw reportedly provided access to 17 trillion rows of data. Microsoft has not yet issued a public statement confirming the details of the vulnerability or its remediation.
Public Exploits Released for Linux Kernel Root Privilege Flaws
Working exploit code has been publicly released for four distinct vulnerabilities within the Linux kernel. These flaws reportedly allow a local user to escalate their privileges to administrative root access on affected systems. The availability of public exploits significantly lowers the bar for malicious actors to leverage these vulnerabilities, increasing the urgency for system…
Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was Vulnerable
A significant vulnerability within the Cosmos EVM module was reportedly exploited, leading to the draining of funds from six distinct blockchains. The attacks occurred between August 20 and August 25, 2026, targeting a flaw that Cosmos Labs was aware of prior to the incidents. The issue was specifically linked to the handling of balances within vesting accounts, a critical component for…
July 2026 CVE Landscape
Cybersecurity researchers identified 85 high-impact vulnerabilities in July 2026 that require urgent remediation, marking a 44% increase from the previous month. Of these, 36 were assigned a "Very Critical" risk score by Insikt Group. The vulnerabilities affected products from 61 vendors, with Microsoft accounting for approximately 12% of the total.
Weekly Metasploit Update: Modules for SMB-to-Meterpreter, Peyara Remote Mouse RCE exploit, and more
Metasploit Framework has received an update, version 6.4.142, introducing new modules and enhancements. Among the additions is a module that allows for the upgrade of existing SMB sessions to Meterpreter sessions, a capability that can be initiated via the command `sessions -u session_id` or by loading the `windows/manage/smb_to_meterpreter` module. This feature, developed by Dean Welch,…