4 results for “privilege escalation”
cPanel shipped EasyApache 4 Passenger package updates for a Watchdog API local privilege-escalation flaw. Default installs are unaffected; servers with the listed EA4 Passenger packages should patch. CloudLinux builds were still pending when the advisory posted.
On 10 August 2026 OpenAI put GPT-5.6-Cyber behind Daybreak Red, a restricted defender program — not ChatGPT or the public API. Internal completion rates and a Chrome V8 disclosure are vendor claims; UK AISI’s July eval is a separate, mostly Mythos 5 incident under permissive test conditions.
Security researcher Nightmare Eclipse released the ShieldBreak zero-day exploit for Microsoft Defender, claiming it bypasses the July patch for CVE-2026-50656. The flaw grants SYSTEM privileges on fully patched Windows 11 and Server 2025 when Defender is enabled.
Modular computer maker Framework has notified every customer in its database that their personal information was compromised in a supply-chain breach. This breach illustrates the cascading risk of supply-chain dependencies for hardware.