ECC Was the Mitigation. GPUThor Still Reached Root.
GPUThor defeats ECC on four NVIDIA Ampere workstation GPUs, causes resets and escalates an unprivileged CUDA program to host root. NVIDIA now recommends ECC plus verified IOMMU isolation.
Privilege Escalation
One Hosting Customer Could Read the Server’s Secrets. Another Plesk Flaw Gave Them Root.
Two vulnerabilities disclosed within minutes of each other turned an ordinary Plesk hosting subscription into a route towards control of the entire server. One could expose Plesk administrator and database credentials through the DNS-management interface. The other could execute arbitrary…
LegacyHive Was Public for a Month Before Microsoft Gave It a Patch and a CVE.
A public LegacyHive proof of concept exposed a Windows privilege-escalation path after July's updates. Microsoft patched it in August, showing how public research can compress the defender's window.
The Security Tool Became the Primitive: Defender Reached SYSTEM and Lost Availability
Two actively exploited Microsoft Defender flaws let local attackers reach SYSTEM or disrupt endpoint protection before automatic fixes arrived.
The Exploit Needed a Foothold. Dirty Frag Turned It Into Root
Dirty Frag turned Linux kernel networking flaws into a reliable path from a low-privilege foothold to root across major distributions.