❌

Vue lecture

Il y a de nouveaux articles disponibles, cliquez pour rafraîchir la page.

PHP2Shell roots 25 servers and breaches a government-affiliated network

PHP2Shell roots 25 servers and breaches a government-affiliated network
After millions of PHP2Shell exploit attempts drew attention while no successful compromises had been confirmed, researchers now report 25 rooted servers, including three in a U.S. government-affiliated environment. The suspected China-linked attackers chained PHP2Shell with Fragnesia, a Linux kernel privilege-escalation flaw, and used a custom exploit tailored to firewall software.

Source

Tailworm report warns Tailscale SSH could turn one foothold into root access

Tailworm report warns Tailscale SSH could turn one foothold into root access
Tailscale SSH lets approved devices connect across a Tailscale network without relying on conventional SSH passwords or keys. A new report says that, with port forwarding enabled, an attacker who already controls an approved device could exploit the feature to gain root access on reachable servers. The findings come from lab tests, and Tailscale has not confirmed the specific claims.

Source

Trend Micro’s Zero Day Initiative (ZDI) accidentally sent six Linux vulnerability reports to a public mailing list

Trend Micro’s Zero Day Initiative (ZDI) accidentally sent six Linux vulnerability reports to a public mailing list
Trend Micro’s Zero Day Initiative (ZDI) accidentally sent six unpatched vulnerability reports to the public Linux kernel mailing list instead of its private security list. Two critical KSMBD flaws, including remote-code-execution issues already disclosed, are part of the batch; four other reports affect different kernel components and ConnMan. Maintainer Greg Kroah-Hartman challenged the submissions, asking why they were posted publicly without patches.

Source

Red Hat and Nvidia push OpenShell agent security below the host OS

Red Hat and Nvidia push OpenShell agent security below the host OS
Nvidia OpenShell is a sandbox runtime that limits what autonomous AI agents can do. Red Hat plans to integrate Nvidia’s OpenShell Reference Architecture into its AI platforms, pairing agent controls with inference tools and support for Nvidia’s upcoming Vera Rubin systems. The broader design runs on Linux and Kubernetes—including Red Hat’s platforms—and can also use Windows execution containers.

Source

❌