Palo Alto Warns of Active Exploitation of PAN-OS GlobalProtect VPN Flaw Source: The Hacker News Palo Alto Networks has revealed that it has observed “active exploitation” of a recently disclosed PAN-OS vulnerability by an unknown threat actor to obtain unauthorized access to GlobalProtect portals. The vulnerability in question is CVE-2026-0257 (CVSS score: 7.8), an authentication bypass flaw Read original
Palo Alto Warns of Active Exploitation of PAN-OS GlobalProtect VPN Flaw Source: The Hacker News Palo Alto Networks has revealed that it has observed “active exploitation” of a recently disclosed PAN-OS vulnerability by an unknown threat actor to obtain unauthorized access to GlobalProtect portals. The vulnerability in question is CVE-2026-0257 (CVSS score: 7.8), an authentication bypass flaw Read original
China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a Decade Source: The Hacker News Instead of hiding on the laptops and servers defenders watch most closely, a China-nexus group spent close to a decade hidden inside the Linux login system itself. Sygnia, which tracks the group as Velvet Ant, says it backdoored the PAM and OpenSSH components that decide who is allowed to sign in, Read original
China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a Decade Source: The Hacker News Instead of hiding on the laptops and servers defenders watch most closely, a China-nexus group spent close to a decade hidden inside the Linux login system itself. Sygnia, which tracks the group as Velvet Ant, says it backdoored the PAM and OpenSSH components that decide who is allowed to sign in, Read original
China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a Decade Source: The Hacker News Instead of hiding on the laptops and servers defenders watch most closely, a China-nexus group spent close to a decade hidden inside the Linux login system itself. Sygnia, which tracks the group as Velvet Ant, says it backdoored the PAM and OpenSSH components that decide who is allowed to sign in, Read original
China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a Decade Source: The Hacker News Instead of hiding on the laptops and servers defenders watch most closely, a China-nexus group spent close to a decade hidden inside the Linux login system itself. Sygnia, which tracks the group as Velvet Ant, says it backdoored the PAM and OpenSSH components that decide who is allowed to sign in, Read original
Microsoft patches Exchange Server zero-day exploited in attacks Source: BleepingComputer Microsoft has patched an actively exploited Exchange Server vulnerability that allows threat actors to execute arbitrary JavaScript code in cross-site scripting (XSS) attacks targeting Outlook Web Access users. […] Auto-curated by daily feed. Read original.
One-Character Linux Kernel Flaw Enables Local Root Access, Exploits Now Public Source: The Hacker News Security researchers have published a detailed, working exploit for a Linux kernel use-after-free that lets an unprivileged local user escalate to root and break out of a container. The flaw, CVE-2026-23111, sits in the kernel’s nf_tables packet-filtering code and was patched upstream on February 5 Auto-curated by daily feed. Read original.
One-Character Linux Kernel Flaw Enables Local Root Access, Exploits Now Public Source: The Hacker News Security researchers have published a detailed, working exploit for a Linux kernel use-after-free that lets an unprivileged local user escalate to root and break out of a container. The flaw, CVE-2026-23111, sits in the kernel’s nf_tables packet-filtering code and was patched upstream on February 5 Read original
One-Character Linux Kernel Flaw Enables Local Root Access, Exploits Now Public Source: The Hacker News Security researchers have published a detailed, working exploit for a Linux kernel use-after-free that lets an unprivileged local user escalate to root and break out of a container. The flaw, CVE-2026-23111, sits in the kernel’s nf_tables packet-filtering code and was patched upstream on February 5 Read original