OS Blog News- 2026 2025 2024 2023 2021 2020 2019 2018
AI blog APT blog Attack blog BigBrother blog BotNet blog CyberCrime blog Cyber blog Cryptocurrency blog Exploit blog Hacking blog ICS blog Incident blog IoT blog Malware blog OS Blog Phishing blog Ransom blog Safety blog Security blog Social blog Spam blog Vulnerebility blog
DATE | NAME | Info | CATEG. | WEB |
|
3.10.26 |
How I Found a $113,337 AF_ALG Linux Local Privilege Escalation Before Copy Fail | In 2025, I found an AF_ALG vulnerability in the Linux kernel that allowed an ordinary user to escalate privileges to root. This is a retrospective on how I found CVE-2025-39964 and how we developed the exploit, before Copy Fail drew wider attention to AF_ALG in 2026. | OS Blog | IDNSEC |
|
30.9.26 |
Linux endpoint management without MDM via Elastic Workflows | Elastic InfoSec runs Linux endpoint management through Elastic Defend with a scheduled workflow that gets Cursor and Codex config onto new laptops without piling up duplicate actions on offline hosts, and it works for other config too. | OS Blog | Elastic Security Labs |
|
26.9.26 |
Apple Internals: Endpoint Security ships in iOS 27.2 beta | While doing my usual ipsw diffing for the community, I compared iOS 27.0 (24A437) against the 27.2 beta (24B5084k) and found a new KEXT (kernel extension): com.apple.iokit.EndpointSecuritySE. That is Endpoint Security (ES), the framework endpoint-detection-and-response (EDR) vendors build on for macOS. Apple documents the public API here. Does this mean antivirus is coming to iOS? | OS Blog | Calif |
|
18.9.26 |
Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities | Microsoft has released its monthly security update for September 2026, which includes 973 vulnerabilities affecting a range of products, including 113 that Microsoft marked as "critical." | OS Blog | CISCO TALOS |
|
12.9.26 |
Microsoft Security Bulletin Coverage for September 2026 | Microsoft’s September 2026 Patch Tuesday is the largest on record, addressing 971 vulnerabilities, including 438 Elevation of Privilege vulnerabilities. The SonicWall Capture Labs Threat Research team analyzed Microsoft’s security advisories for September 2026 and developed coverage for 42 of the reported vulnerabilities. | OS Blog | SonicWall |
|
5.9.26 |
Microsoft Teams Notifications Are Now Available in Socket | Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel. | OS Blog | SOCKET.DEV |
|
3.9.26 |
Linux Detection Engineering - Fileless Execution | We reproduced five Linux fileless execution patterns with FENIX, including memfd_create staging, interpreter one-liners, deleted binaries, and in-memory kernel module loads, then mapped each to the Elastic Defend rules that catch it. | OS Blog | ELASTIC |
|
29.8.26 |
When Monitored Content Strikes Back: Account Takeover in Microsoft Purview |
Microsoft Purview is built to catch dangerous messages. But what happens when the message fights back? Cymulate Research Labs found that a single external Teams message, email or Copilot prompt could carry stored malicious code into a Purview reviewer’s authenticated browser - turning a routine compliance check into a path to token theft and account takeover. |
||
|
29.8.26 |
Video Call Exploit Chain Exposes Android Devices to Kernel-Level Access |
In a story recently reported by Dark Reading, researchers demonstrated how two vulnerabilities in Unisoc T612 modem firmware can be chained to gain privileged access to the Android kernel. The attack involves delivering a malicious payload to the modem and placing a video call that, if answered, triggers the exploit, highlighting how cellular modems can provide a remotely reachable attack surface for mobile devices. |
||
|
22.8.26 |
Linux Bridge STP Timer Use-After-Free | Summary A use-after-free vulnerability in the Linux kernel bridge (net/bridge) Spanning Tree Protocol (STP) implementation. A bridge that is administratively down while kernel STP is enabled, together with a port driven into the LEARNING state, | OS Blog | SSD-DISCLOSURE |
|
15.8.26 |
August 2026 Patch Tuesday: One Exploited Zero-Day and 62 Critical Vulnerabilities Among 415 CVEs | Microsoft has addressed 415 vulnerabilities in its August 2026 security update release. This month's patches include fixes for one exploited zero-day vulnerability, three disclosed zero-day vulnerabilities, and 62 Critical vulnerabilities, along with 349 additional vulnerabilities of varying severity levels. | OS Blog | CROWDSTRIKE |
|
15.8.26 |
Microsoft Security Bulletin Coverage for August 2026 | Microsoft’s August 2026 Patch Tuesday has 422 vulnerabilities, of which 177 are Elevation of Privilege. SonicWall Capture Labs threat research team has analyzed and addressed Microsoft’s security advisories for the month of August 2026 and has produced coverage for 24 of the reported vulnerabilities. | OS Blog | SonicWall |
|
15.8.26 |
Microsoft Patch Tuesday for August 2026 — Snort rules and prominent vulnerabilities | Microsoft has released its monthly security update for August 2026, which includes 421 vulnerabilities affecting a range of products, including 62 that Microsoft marked as "critical." | OS Blog | CISCO TALOS |
|
18.6.26 |
Microsoft Security Bulletin Coverage for July 2026 | Microsoft’s July 2026 Patch Tuesday has 576 vulnerabilities, of which 255 are Elevation of Privilege. Microsoft had said last week in this blog that “As AI helps defenders discover more issues, customers will see a higher volume of security updates included in each security release”. | OS Blog | SonicWall |
|
18.6.26 |
Forgotten UEFI shims undermining Secure Boot | ESET researchers discovered 11 vulnerable UEFI shim bootloaders signed by Microsoft that allow attackers to bypass UEFI Secure Boot by exploiting decade-old vulnerabilities | OS Blog | Eset |
| 16.5.26 | May’s Patch Tuesday hauls out 132 CVEs | With advisories, this month’s count approaches 300 – though many are already in place | OS Blog | SOPHOS |
| 9.5.26 | Fake call logs, real payments: How CallPhantom tricks Android users | ESET researchers uncovered fraudulent apps on Google Play that claim to provide the call history “for any number” and had been downloaded more than seven million times before being taken down | OS Blog | Eset |
| 25.4.26 | Bad Apples: Weaponizing native macOS primitives for movement and execution | Cisco Talos documents several macOS living-off-the-land (LOTL) techniques, demonstrating that native pathways for movement and execution remain accessible to those who understand the underlying architecture. | OS Blog | CISCO TALOS |
| 18.4.26 | Microsoft Patch Tuesday for April 2026 - Snort Rule and Prominent Vulnerabilities | Overview of patch tuesday release from Microsoft for April 2026. | OS Blog | CISCO TALOS |
| 21.3.26 | Google Threat Intelligence Group (GTIG) has identified a new iOS full-chain exploit that leveraged multiple zero-day vulnerabilities to fully compromise devices. Based on toolmarks in recovered payloads, we believe the exploit chain to be called DarkSword. | OS Blog | GTI | |
| 14.2.26 | Microsoft Patch Tuesday for February 2026 — Snort rules and prominent vulnerabilities | Microsoft has released its monthly security update for February 2026, which includes 55 vulnerabilities affecting a range of products, including one (CVE-2025-59498) that Microsoft marked as “Critical”. | OS Blog | CISCO TALOS |