Linux
Unpatched Linux Kernel Keyring Flaw Gives Local Root
A public exploit escalates an unprivileged user to root through the kernel's assoc_array keyring code, and the fix has not reached mainline.
Cyber Kendra — Cybersecurity & Tech News
CATEGORY
Latest Posts
Unpatched Linux Kernel Keyring Flaw Gives Local Root
A public exploit escalates an unprivileged user to root through the kernel's assoc_array keyring code, and the fix…
Apple Secure Exclaves Explained: How the Secure OS Works
Formal proofs caught bugs in Apple’s own microkernel before attackers could, and the company says sensor audio cannot…
PowerShell Signed Scripts Fail After November 2026 Update
A script nobody touched can lose its valid signature overnight, and adding a byte order mark alone will…
Uber Data Breach: Driver Licenses Stolen via Fireworks AI
Fireworks AI’s first public bulletin said it had found no evidence that personal information was accessed; three days…
Microsoft blames network capacity upgrade for 24-hour Outlook and Microsoft 365 outage — says it was not a cyberattack or AI
Microsoft says a network capacity upgrade, not a cyberattack or AI, caused the 24-hour Outlook and Microsoft 365…
CVE-2026-123039: Check Point Gateways Rooted, ESXi Wiped
Attackers hit about two dozen unpatched Check Point customers from October 30, starting in Israel, and left the…
7 Vendors That Manage Enterprise PQC Transition Programs
A post-quantum cryptography (PQC) transition is not a single technology upgrade. It is a coordinated change program involving…
How to Audit Browser Extensions for Supply-Chain Risk
Most people install browser extensions the way they install phone apps: quickly, for one small task, and then…
Node.js Security Update Fixes 16 Flaws, 7 High-Severity
Node.js 26.13.1, 24.22.3 and 22.23.5 fix seven High-rated HTTP/2 and TLS flaws that unauthenticated clients can trigger.
SignDrop Windows CLFS Zero-Day Gives SYSTEM Access
An unpatched Windows zero-day, SignDrop, abuses the CLFS authentication feature to escalate a standard user to SYSTEM. No…
CVE-2025-62861: Bitcoin Core Mining Bug and 2 More Flaws
A reorg could corrupt the mempool on Bitcoin Core 28.0 to 29.1 and stop block templates until restart;…
Able2Shell: 33 N-able N-central Zero-Days Under Attack
watchTowr reports exploitation attempts a day after 33 unpatched N-central flaws were published; no hotfix or CVE IDs…
Handy Tech Tools
Quick browser-based utilities. Check IMEI numbers, create Wi-Fi QR codes, decode JWTs, generate hashes, run DNS lookups, and more without installing anything.