Privilege Escalation

4 articles

ThreatsTechnology, Cloud & SaaSCritical
CISA Adds Critical Linux Kernel IPv6 Privilege Escalation Flaw to KEV Catalog
CISA added CVE-2026-53362 to its KEV catalog, warning of active privilege escalation exploits targeting the Linux Kernel IPv6 networking subsystem across major enterprise distros.
Daniel Okafor15 Sep 2026, 00:05 IST8 min read
$3D technical illustration of fractured Microsoft Defender security shield and race condition threads exposing NT AUTHORITY SYSTEM core access$
ResearchTechnology, Cloud & SaaSHigh
'ShieldCrash' exploit bypasses Microsoft Defender patch, enabling local SYSTEM file access
A zero-day exploit dubbed ShieldCrash bypasses Microsoft Defender’s latest patches, weaponizing a TOCTOU race condition in the engine to read files as SYSTEM.
Mei-Lin Chen14 Sep 2026, 13:45 IST7 min read
ThreatsTechnology, Cloud & SaaSCritical
Attackers chain dual JFrog Artifactory vulnerabilities to hijack build pipelines and plant backdoors
Wiz Research caught threat actors chaining two JFrog Artifactory flaws (CVE-2026-42018 & CVE-2026-42016) to forge admin tokens and compromise enterprise software repositories.
Aisha Noor11 Sep 2026, 22:00 IST6 min read
ThreatsTechnology, Cloud & SaaSBreaking
Microsoft ships 973 fixes in September Patch Tuesday, two flaws already exploited
Microsoft’s September 2026 rollup addresses 973 CVEs, including two elevation-of-privilege bugs — in the Windows Update Stack and ALPC — confirmed under active attack.
Priya Raman10 Sep 2026, 00:00 IST7 min read

CISA Adds Critical Linux Kernel IPv6 Privilege Escalation Flaw to KEV Catalog

'ShieldCrash' exploit bypasses Microsoft Defender patch, enabling local SYSTEM file access

Attackers chain dual JFrog Artifactory vulnerabilities to hijack build pipelines and plant backdoors

Microsoft ships 973 fixes in September Patch Tuesday, two flaws already exploited