GoKawiil - Tech News

1.

Google says some Pixel phone owners were hacked in zero-day attacks (techcrunch.com)

2026-09-16 | by Zack Whittaker | get Google Pixel 9 Pro unlocked smartphone → | tags: pixel phones, zero-day attack, cve-2026-58704

2.

Google fixes actively exploited Android zero-day on Pixel devices (bleepingcomputer.com)

2026-09-16 | get Google Pixel 9 Pro smartphone → | tags: google pixel, cve-2026-58704, android zero-day

3.

Acronis warns of actively exploited flaw in its cPanel backup plugin (bleepingcomputer.com)

2026-09-15 | tags: acronis, cpanel, cve-2026-87886

4.

New CrowdStrike 'FalconFlank' zero-day grants SYSTEM privileges (bleepingcomputer.com)

2026-09-04 | get Yubico YubiKey 5 NFC → | tags: crowdstrike, falconflank, windows 11

5.

ServiceNow warns of three max severity security vulnerabilities (bleepingcomputer.com)

2026-08-28 | get Web Application Hacker's Handbook → | tags: servicenow, ai platform, cve-2026-18885

6.

New Microsoft Defender 'ShieldBreak' zero-day grants SYSTEM privileges (bleepingcomputer.com)

2026-08-12 | tags: microsoft defender, shieldbreak, rogueplanet

7.

'Certighost' Flaw Haunts Microsoft Active Directory Certificates (darkreading.com)

2026-07-28 | tags: microsoft, active directory, certighost

8.

In Less Than 24 Hours, Attackers Weaponize Cisco CUCM Flaw (darkreading.com)

2026-06-25 | get Cisco Unified Communications Phone → | tags: cisco cucm, server-side request forgery, ssrf

9.

Critical Fortinet FortiSandbox flaws now exploited in attacks (bleepingcomputer.com)

2026-06-16 | get Fortinet FortiSandbox Security Appliance → | tags: fortinet, fortisandbox, cve-2026-39813

10.

MFA verifies who logged in. It has no idea what they do next. (venturebeat.com)

2026-05-21 | get Yubico YubiKey 5 NFC → | tags: mfa, active directory, session tokens

11.

FatGid: FreeBSD 14.x kernel local privilege escalation (news.ycombinator.com)

2026-05-21 | tags: freebsd, kernel, privilege escalation

12.

Exploit released for new PinTheft Arch Linux root escalation flaw (bleepingcomputer.com)

2026-05-20 | get Linux Kernel Security Book → | tags: arch linux, rds, io_uring

13.

CopyFail: From Pod to Host (news.ycombinator.com)

2026-05-19 | get USB Microphone for Podcasting → | tags: linux kernel, copy fail, privilege escalation

14.

Copy Fail, Dirty Frag, and Fragnesia kernel vulnerabilities (news.ycombinator.com)

2026-05-19 | tags: linux kernel, privilege escalation, gentoo linux

15.

Gentoo News: Copy Fail, Dirty Frag, and Fragnesia Kernel Vulnerabilities (news.ycombinator.com)

2026-05-19 | get Linux Kernel Security Book → | tags: gentoo, linux kernel, privilege escalation

16.

'Claw Chain' Vulnerabilities Threaten OpenClaw Deployments (darkreading.com)

2026-05-18 | get Cybersecurity Hardware Lock → | tags: openclaw, vulnerabilities, ai agent

17.

New Windows 'MiniPlasma' zero-day exploit gives SYSTEM access, PoC released (bleepingcomputer.com)

2026-05-17 | get Windows Security Patch Kit → | tags: windows, miniplasma, microsoft

18.

A 0-click exploit chain for the Pixel 10 (news.ycombinator.com)

2026-05-15 | by Seth Jenkins | tags: pixel 10, android, dolby

19.

New macOS vulnerabilities were exposed by Anthropic’s Mythos: report (9to5mac.com)

2026-05-14 | by Ryan Christoffel | get MacBook Air M2 Case → | tags: macos, anthropic, mythos

20.

'Dirty Frag' Exploit Poised to Blow Up on Enterprise Linux Distros (darkreading.com)

2026-05-11 | get Linux Security Patch Kit → | tags: linux, privilege escalation, dirty pipe

21.

Local privilege escalation via execve() (news.ycombinator.com)

2026-05-09 | get Linux Privilege Escalation Toolkit → | tags: privilege escalation, execve, local exploit

22.

Dirtyfrag: Universal Linux LPE (news.ycombinator.com)

2026-05-07 | tags: linux kernel, root privilege escalation, dirtyfrag

23.

Dangerous New Linux Exploit Gives Attackers Root Access to Countless Computers (wired.com)

2026-05-01 | by Dan Goodin | get Linux Exploit Detection Tool → | tags: linux kernel, cve-2026-31431, theori

24.

"Copy Fail" is a rare Linux bug that can turn an unprivileged user into a root admin in seconds (techspot.com)

2026-05-01 | get Linux Privilege Escalation Kit → | tags: linux kernel, cve-2026-31431, theori

25.

For Linux kernel vulnerabilities, there is no heads-up to distributions (news.ycombinator.com)

2026-04-30 | get Linux Kernel Security Book → | tags: linux kernel, cve-2026-31431, gentoo

26.

CopyFail was not disclosed to distro developers? (news.ycombinator.com)

2026-04-30 | tags: copyfail, linux kernel, privilege escalation

27.

CopyFail Was Not Disclosed to Distros (news.ycombinator.com)

2026-04-30 | get Linux Kernel Security Book → | tags: linux, kernel, cve-2026-31431

28.

Unpatched 'PhantomRPC' Flaw in Windows Enables Privilege Escalation (darkreading.com)

2026-04-27 | get Windows Security Patch Kit → | tags: phantomrpc, windows, remote procedure call

29.

How Hard Is It to Open a File? (news.ycombinator.com)

2026-04-24 | by Sebastian Wick | get File Opening Toolkit → | tags: file system security, path normalization, symlink vulnerabilities

30.

New Microsoft Defender “RedSun” zero-day PoC grants SYSTEM privileges (bleepingcomputer.com)

2026-04-16 | get Microsoft Defender Security Book → | tags: microsoft defender, redsun, windows 11