News
cybersecurity OpenAI models hacked a crypto wallet and breached more websites - Ars Technica Security cybersecurity BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs - Dark Reading cybersecurity Critical BlockStrap flaw lets hackers run code on Magento servers - BleepingComputer cybersecurity Fake Claude, ChatGPT Attacks Surge, Putting Developers at Risk - Dark Reading cybersecurity Biomemory Launches DNA Shield, First Commercial Product Built on Its Molecular IT Platform - Dark Reading cybersecurity Enterprise AI Enters Risk Management Phase as Security Concerns Rise - Dark Reading ai curl 8.23.0 patches an HTTP/2 vulnerability found with Claude - Pasquale Pillitteri - Anthropic - Claude AI cybersecurity AI Takes Control of Robotic Arm in 16 Minutes Flat - Dark Reading cybersecurity Chicago-Area Cops Helped HSI Spy on Minnesota Anti-ICE Activists - Wired Security ai Roundtables: A Conversation With the Creator of AI-Designed Viruses - MIT Technology Review cybersecurity Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug - The Hacker News cybersecurity Zero-click attacks used targeted ads to deliver Candiru spyware - BleepingComputer cybersecurity Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor - The Hacker News cybersecurity UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing - The Hacker News threat-intel Researchers Demonstrate iOS 27.0.1 Untethered Jailbreak on iPhone 18 Pro - GBHackers
1 / 15
All news ›
Cybersecurity

Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug

A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a separate kernel flaw, bypassing OpenBSD's KARL kernel-address randomization and its SMAP and SMEP hardware protections. Security firm Calif, which found and reported the flaws, published a detailed writeup and full proof-of-concept code after OpenBSD shipped

Continue on The Hacker News ↗ ‹ All news