Cybersecurity & Data Protection
0
UPVOTE
thehackernews.com

Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug

A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a separate kernel flaw, bypassing OpenBSD's KARL kernel-address randomization and its SMAP and SMEP hardware protections. Security firm Calif, which found and reported the flaws, published a detailed writeup and full proof-of-concept code after OpenBSD shipped
Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug
TN

The Hacker News

4h ago
0 0

Discussion

Jump in and comment!

Get the ball rolling with your comment!

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

No upvotes yet.

Be the first to show your appreciation for this content.

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

darkreading.com
When Your Ransomware Negotiator Works for the Other Side

The shocking arrest of a well-known ransomware negotiator reveals the critical need for vendor program oversight.
DR

Dark Reading

7h ago
0
bleepingcomputer.com
Burger King Japan data breach exposes 11 million customer recor…

Burger King Japan, the Japanese subsidiary of global fast-food giant Burger King, disclosed a major data breach after attackers accessed a server containing 11…
Noor Bakker

Noor Bakker

9h ago
0
darkreading.com
When AI Agents Commit Breaches, Humans May Not Be Held Liable

As agents escape containment and access external systems, responsibility remains human. Accountability, however, is much less settled.
DR

Dark Reading

9h ago
0
thehackernews.com
China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Ove…

The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remo…
TN

The Hacker News

12h ago
0
darkreading.com
SecTor 2026 Reveals a Rapidly Shifting Cybersecurity Landscape

The event closed in Toronto last week, with experts sharing critical perspectives on emerging risks, drawing record attendance and marking 22% growth.
DR

Dark Reading

13h ago
0
thehackernews.com
Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Re…

A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstra…
Golden Greta

Golden Greta

17h ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Ove…

The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remo…
TN

The Hacker News

12h ago
0
thehackernews.com
Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Re…

A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstra…
Golden Greta

Golden Greta

17h ago
0
thehackernews.com
Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al …

Candiru, an Israeli maker of spyware sold to governments, infected devices at the news network Al Jazeera through ordinary online ads, in attacks that needed n…
Thanakorn Boon

Thanakorn Boon

1d ago
0
thehackernews.com
India Mandates Registered Caller Name Display on 4G and Newer N…

The Indian government has directed telecom service providers (TSPs) in the country to mandatorily display callers' registered names along with their numbers fo…
TN

The Hacker News

1d ago
0
thehackernews.com
GhostAction Compromises About 1,900 GitHub Accounts, Targets Ov…

The credential-theft campaign known as GhostAction has ramped up, targeting more than 30, 000 repositories across 3, 000 users and organizations. The spike, a…
TN

The Hacker News

1d ago
0
thehackernews.com
Cisco Warns of Active Attacks Exploiting New Critical Secure Em…

Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no login write files to the appliance's operating system, Cisco&…
Carlos the great

Carlos the great

2d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest