Topic
63 articles
GoogleGoogle fixes critical flaw CVE-2026-69210 in Cloud IAM Workload Identity Federation where improper validation of OIDC audience claims allowed cross-tenant service account hijacking.
OT / SCADAAVEVA Security Bulletins and CISA disclose a local privilege escalation flaw in System Platform InTouch enabling low-privileged users to achieve SYSTEM execution.
LinuxOracle Security alerts document a local privilege escalation flaw in the OCI Compute Instance Agent service allowing standard guest tenants to gain unconstrained host execution.
LinuxAttackers are weaponizing an exploit chain in Zammad helpdesk combining session fixation (CVE-2026-102489) with root privilege escalation (CVE-2026-102490).
OT / SCADACISA advisory ICSA-26-274-03 reveals local SYSTEM privilege escalation and project archive path traversal in ABB Protection and Control IED Manager PCM600.
Threat IntelA privilege escalation vulnerability in Internet2 Grouper before v7.5.1 allows authenticated users with rule editing rights to elevate to full system administrator.
Deep DiveAn architectural analysis of the Lethal Trifecta in autonomous enterprise AI agents: untrusted input, autonomous execution, and access to privileged external tools.
MicrosoftMicrosoft MSRC bulletin details an untrusted search path vulnerability in Azure Monitor Agent Metrics Extension allowing low-privileged users to attain SYSTEM privileges.
MicrosoftA critical vulnerability in Microsoft Entra ID allows authenticated users to manipulate assumed-immutable directory attributes and achieve Global Admin rights.
GoogleGoogle Cloud Bulletin GCP-2026-059 details missing authorization flaw CVE-2026-4644 in Integration Connectors enabling project-level privilege escalation.
AWS CloudAWS Security Bulletin 2026-115-AWS warns of a critical authorization flaw in AmazonConnectSalesforceLambda enabling unprivileged IAM users to execute arbitrary AWS APIs.
AWS CloudAWS resolves a container boundary escape flaw in Amazon ECS Container Agent that allowed unprivileged containers to intercept task metadata and assume host IAM roles.
GoogleGoogle Cloud discloses and mitigates a high-severity container escape flaw in GKE node kernels, preventing unprivileged workloads from compromising host nodes.
GoogleGoogle Cloud resolves a privilege escalation flaw in Compute Engine guest-oslogin that allowed users with compute.osLogin IAM permissions to gain root access.
MicrosoftMicrosoft discloses high-severity flaw CVE-2026-85917 in Azure AI Foundry allowing unauthenticated attackers to execute SSRF and elevate privileges over the network.
MicrosoftMicrosoft addresses CVSS 9.6 vulnerability CVE-2026-87701 in Azure Cosmos DB allowing authenticated attackers to execute downstream injection and elevate privileges.
MicrosoftGoogle Cloud remediates critical GCP-2026-058 flaw in GKE Multi-Cloud APIs where missing project checks enabled unauthorized cluster registration and IAM impersonation.
MicrosoftMicrosoft resolves maximum-severity CVSS 10.0 vulnerability CVE-2026-48567 in Azure HorizonDB allowing network attackers to bypass authentication and seize cluster control.
OT / SCADARockwell Automation and CISA issue advisory ICSA-26-244-02 detailing privilege escalation flaws CVE-2026-9634 in Redundancy Module Configuration Tool.
MicrosoftMicrosoft patches high-severity flaw CVE-2026-47632 in Azure Connected Machine Agent allowing local privilege escalation on Azure Arc hybrid endpoints.
MicrosoftMicrosoft fixes critical CVSS 9.1 flaw CVE-2026-33843 in Azure AD B2C and Microsoft Entra ID allowing unauthenticated network attackers to elevate privileges.
MicrosoftRockwell Automation issues advisory SD1799 for CVE-2026-16675 in FactoryTalk Activation Manager, allowing authenticated operators to seize SYSTEM privileges.
AWS CloudAWS resolves high-severity CVSS 8.8 flaw CVE-2026-81849 in amazon-ssm-agent where crafted S3 object keys allow authenticated IAM actors to overwrite root host files.
AWS CloudAWS resolves high-severity privilege escalation flaw CVE-2026-86830 in Temporary Elevated Access Management (TEAM) for IAM Identity Center.