GoKawiil - Tech News

1.

'Certighost' Flaw Haunts Microsoft Active Directory Certificates (darkreading.com)

2026-07-28 | tags: microsoft, active directory, certighost

2.

In Less Than 24 Hours, Attackers Weaponize Cisco CUCM Flaw (darkreading.com)

2026-06-25 | get Cisco Unified Communications Phone → | tags: cisco cucm, server-side request forgery, ssrf

3.

Critical Fortinet FortiSandbox flaws now exploited in attacks (bleepingcomputer.com)

2026-06-16 | get Fortinet FortiSandbox Security Appliance → | tags: fortinet, fortisandbox, cve-2026-39813

4.

MFA verifies who logged in. It has no idea what they do next. (venturebeat.com)

2026-05-21 | get Yubico YubiKey 5 NFC → | tags: mfa, active directory, session tokens

5.

FatGid: FreeBSD 14.x kernel local privilege escalation (news.ycombinator.com)

2026-05-21 | tags: freebsd, kernel, privilege escalation

6.

Exploit released for new PinTheft Arch Linux root escalation flaw (bleepingcomputer.com)

2026-05-20 | get Linux Kernel Security Book → | tags: arch linux, rds, io_uring

7.

CopyFail: From Pod to Host (news.ycombinator.com)

2026-05-19 | get USB Microphone for Podcasting → | tags: linux kernel, copy fail, privilege escalation

8.

Copy Fail, Dirty Frag, and Fragnesia kernel vulnerabilities (news.ycombinator.com)

2026-05-19 | tags: linux kernel, privilege escalation, gentoo linux

9.

Gentoo News: Copy Fail, Dirty Frag, and Fragnesia Kernel Vulnerabilities (news.ycombinator.com)

2026-05-19 | get Linux Kernel Security Book → | tags: gentoo, linux kernel, privilege escalation

10.

'Claw Chain' Vulnerabilities Threaten OpenClaw Deployments (darkreading.com)

2026-05-18 | get Cybersecurity Hardware Lock → | tags: openclaw, vulnerabilities, ai agent

11.

New Windows 'MiniPlasma' zero-day exploit gives SYSTEM access, PoC released (bleepingcomputer.com)

2026-05-17 | get Windows Security Patch Kit → | tags: windows, miniplasma, microsoft

12.

A 0-click exploit chain for the Pixel 10 (news.ycombinator.com)

2026-05-15 | by Seth Jenkins | tags: pixel 10, android, dolby

13.

New macOS vulnerabilities were exposed by Anthropic’s Mythos: report (9to5mac.com)

2026-05-14 | by Ryan Christoffel | get MacBook Air M2 Case → | tags: macos, anthropic, mythos

14.

'Dirty Frag' Exploit Poised to Blow Up on Enterprise Linux Distros (darkreading.com)

2026-05-11 | get Linux Security Patch Kit → | tags: linux, privilege escalation, dirty pipe

15.

Local privilege escalation via execve() (news.ycombinator.com)

2026-05-09 | get Linux Privilege Escalation Toolkit → | tags: privilege escalation, execve, local exploit

16.

Dirtyfrag: Universal Linux LPE (news.ycombinator.com)

2026-05-07 | tags: linux kernel, root privilege escalation, dirtyfrag

17.

Dangerous New Linux Exploit Gives Attackers Root Access to Countless Computers (wired.com)

2026-05-01 | by Dan Goodin | get Linux Exploit Detection Tool → | tags: linux kernel, cve-2026-31431, theori

18.

"Copy Fail" is a rare Linux bug that can turn an unprivileged user into a root admin in seconds (techspot.com)

2026-05-01 | get Linux Privilege Escalation Kit → | tags: linux kernel, cve-2026-31431, theori

19.

For Linux kernel vulnerabilities, there is no heads-up to distributions (news.ycombinator.com)

2026-04-30 | get Linux Kernel Security Book → | tags: linux kernel, cve-2026-31431, gentoo

20.

CopyFail was not disclosed to distro developers? (news.ycombinator.com)

2026-04-30 | tags: copyfail, linux kernel, privilege escalation

21.

CopyFail Was Not Disclosed to Distros (news.ycombinator.com)

2026-04-30 | get Linux Kernel Security Book → | tags: linux, kernel, cve-2026-31431

22.

Unpatched 'PhantomRPC' Flaw in Windows Enables Privilege Escalation (darkreading.com)

2026-04-27 | get Windows Security Patch Kit → | tags: phantomrpc, windows, remote procedure call

23.

How Hard Is It to Open a File? (news.ycombinator.com)

2026-04-24 | by Sebastian Wick | get File Opening Toolkit → | tags: file system security, path normalization, symlink vulnerabilities

24.

New Microsoft Defender “RedSun” zero-day PoC grants SYSTEM privileges (bleepingcomputer.com)

2026-04-16 | get Microsoft Defender Security Book → | tags: microsoft defender, redsun, windows 11

25.

CISA flags Windows Task Host vulnerability as exploited in attacks (bleepingcomputer.com)

2026-04-15 | get Windows Task Host Security Patch → | tags: cisa, windows task host, cve-2025-60710

26.

Privilege Elevation Dominates Massive Microsoft Patch Update (darkreading.com)

2026-04-14 | get Microsoft Security Patch Kit → | tags: microsoft, privilege escalation, zero-days

27.

BlueHammer abuses Windows Defender's update process to gain SYSTEM access (news.ycombinator.com)

2026-04-11 | get Windows Defender Security Tool → | tags: windows defender, bluehammer, github

28.

Disgruntled researcher leaks “BlueHammer” Windows zero-day exploit (bleepingcomputer.com)

2026-04-06 | get Windows Zero-Day Exploit Kit → | tags: windows, bluehammer, microsoft

29.

OpenClaw privilege escalation vulnerability (news.ycombinator.com)

2026-04-03 | tags: privilege escalation, openclaw, cve-2026-33579

30.

OpenClaw privilege-escalation bug (news.ycombinator.com)

2026-04-03 | tags: openclaw, privilege escalation, bug