The Exploit Needed a Foothold. Dirty Frag Turned It Into Root
Dirty Frag turned Linux kernel networking flaws into a reliable path from a low-privilege foothold to root across major distributions.
Infrastructure
Windows, Linux, identity, virtualisation, networks and platforms.
The Firewall’s Authentication Portal Became a Path to Root
Attackers exploited a PAN-OS authentication portal flaw to reach root on exposed firewalls. Patching closes the entry path, but exposed appliances require incident review.
VMware’s Support-Assisted Migration Could Open an RCE Window
CISA says attackers exploited a VMware command-injection flaw that became reachable during support-assisted migration. Two more CVEs share the bulletin.
China-Linked Hackers Hid Inside Dell’s Disaster-Recovery Appliances Since 2024
Suspected China-linked hackers exploited Dell RecoverPoint appliances for root access, covert persistence and a route into protected virtual machines.
BeyondTrust Was Supposed to Provide Remote Support. Attackers Turned It Into a Remote Shell.
Attackers exploited a pre-authentication BeyondTrust flaw and deployed remote-access malware through infrastructure built to support privileged systems.
Reset the SmarterMail Admin Password, Then Take the Server
An anonymous SmarterMail endpoint let attackers reset a system administrator, then use built-in management functions to reach server control.
One FortiCloud Account Could Reach Someone Else’s Fortinet Device
Fortinet says attackers exploited a cloud SSO isolation flaw to enter other customers' devices, download configurations and add local administrators.
Error “Group(s) not found: ui (via –with)” installing PrivateGPT 0.4 on WSL
Note: the below assumes you already have followed any other guide, but you have gotten an error up to that point. The below will pick up directly where you left off in the your original guide. As of a few…
Install Private-GPT 0.2 on Windows Server 2019/2022
Total time is about 30min, depending on your hardware and internet connection. This will install PrivateGPT on a Windows 2019/2022 machine and run everything (including the LLMs) locally. After installation, no further Internet connection required for most operations.
PrivateGPT: ImportError: docx2txt is required to read Microsoft Word files
When trying to interact with Microsoft Word files, PrivateGPT throws out an error and does not want to parse it:ImportError: docx2txt is required to read Microsoft Word files: pip install docx2txt When actually installing docx2txt with pip, the error is…