Learning about exploits through the safety of Incus (opens in new tab)

Covers 0xdeadbeefnetwork/ssh-keysign-pwn: Steal SSH host private keys and /etc/shadow via the ptrace_may_access mm-NULL bypass + pidfd_getfd. Pre-31e62c2ebbfd kernels.

The last few weeks have been quite busy with vulnerabilities that affect all sort of operating systems. It’s the age of AI, and AI tools help identify yet another class of security vulnerabilities. Several of those vulnerabilities are released while the updates are not ready yet. There exist mitigations though, and it’s important to do […]

Read the original article