Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say Source: The Hacker News Redis shipped seven security releases on July 23 after researchers published authenticated RCE PoCs for stock Redis 6.2.22, 7.4.9, 8.6.4, and 8.8.0. All four chains require RESTORE. The Streams chains also need EVAL and XGROUP; the 8.8.0 chain needs EVAL and the bundled RedisBloom module. Redis say Read original
Russian hackers exploit Zimbra zero-click flaw for email theft Source: BleepingComputer CISA is warning that the Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is targeting organizations using Zimbra Collaboration email servers by combining phishing attacks with the exploitation of a now-patched Zimbra vulnerability. […] Read original
Russian hackers exploit Zimbra zero-click flaw for email theft Source: BleepingComputer CISA is warning that the Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is targeting organizations using Zimbra Collaboration email servers by combining phishing attacks with the exploitation of a now-patched Zimbra vulnerability. […] Read original
Check Point warns of SmartConsole zero-day exploited in attacks Source: BleepingComputer Israeli cybersecurity firm Check Point Software has addressed an actively exploited zero-day flaw in the company’s SmartConsole graphical user interface (GUI) admin panel. […] Read original
Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs Source: The Hacker News Cybersecurity researchers have disclosed details of a new local privilege escalation (LPE) vulnerability in snap-confine that an unprivileged user can trigger to obtain root access and gain complete control of a target environment. The high-severity flaw, tracked as CVE-2026-8933 (CVSS score: 7.8), Read original
Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs Source: The Hacker News Cybersecurity researchers have disclosed details of a new local privilege escalation (LPE) vulnerability in snap-confine that an unprivileged user can trigger to obtain root access and gain complete control of a target environment. The high-severity flaw, tracked as CVE-2026-8933 (CVSS score: 7.8), Read original
Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs Source: The Hacker News Cybersecurity researchers have disclosed details of a new local privilege escalation (LPE) vulnerability in snap-confine that an unprivileged user can trigger to obtain root access and gain complete control of a target environment. The high-severity flaw, tracked as CVE-2026-8933 (CVSS score: 7.8), Read original
Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs Source: The Hacker News Cybersecurity researchers have disclosed details of a new local privilege escalation (LPE) vulnerability in snap-confine that an unprivileged user can trigger to obtain root access and gain complete control of a target environment. The high-severity flaw, tracked as CVE-2026-8933 (CVSS score: 7.8), Read original
Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs Source: The Hacker News Cybersecurity researchers have disclosed details of a new local privilege escalation (LPE) vulnerability in snap-confine that an unprivileged user can trigger to obtain root access and gain complete control of a target environment. The high-severity flaw, tracked as CVE-2026-8933 (CVSS score: 7.8), Read original
Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs Source: The Hacker News Cybersecurity researchers have disclosed details of a new local privilege escalation (LPE) vulnerability in snap-confine that an unprivileged user can trigger to obtain root access and gain complete control of a target environment. The high-severity flaw, tracked as CVE-2026-8933 (CVSS score: 7.8), Read original