❌

Visualização normal

Antes de ontemStream principal
  • ✇Cybersecurity News
  • Darwin-VM Enables Apple Silicon Security Research Do Son
    Developer JPRX launched Darwin-VM to emulate Apple Silicon systems. This QEMU-based tool assists security researchers with XNU kernel debugging and analysis. Related Posts: Apple OpenAI Lawsuit Escalates Over AI Trade Secrets Chrome Manifest V2 Removal: Legacy Extensions Are Now Gone Anthropic Bolsters Security After Claude AI Escapes The post Darwin-VM Enables Apple Silicon Security Research appeared first on Daily CyberSecurity.
     
  • ↗️

Darwin-VM Enables Apple Silicon Security Research

✇Cybersecurity News
Por:Do Son
1 de Setembro de 2026, 22:00

Developer JPRX launched Darwin-VM to emulate Apple Silicon systems. This QEMU-based tool assists security researchers with XNU kernel debugging and analysis.

Related Posts:

The post Darwin-VM Enables Apple Silicon Security Research appeared first on Daily CyberSecurity.

  • ✇Cybersecurity News
  • Cosmos EVM Flaw Triggers Multi-Chain Heist Do Son
    A critical balance accounting error in Cosmos EVM enabled attackers to steal millions of dollars across multiple blockchain networks between August 20 and 25. Related Posts: CVE-2026-81934: Redis RCE PoC Exploit Now Public CVE-2026-78319: SAUTER Controller RCE Flaw Disclosed CVE-2026-82329 Exploited: JFrog Artifactory Admin Takeover The post Cosmos EVM Flaw Triggers Multi-Chain Heist appeared first on Daily CyberSecurity.
     
  • ↗️

Cosmos EVM Flaw Triggers Multi-Chain Heist

✇Cybersecurity News
Por:Do Son
1 de Setembro de 2026, 00:38

A critical balance accounting error in Cosmos EVM enabled attackers to steal millions of dollars across multiple blockchain networks between August 20 and 25.

Related Posts:

The post Cosmos EVM Flaw Triggers Multi-Chain Heist appeared first on Daily CyberSecurity.

  • ✇Cybersecurity News
  • CVE-2026-50112: Apache CloudStack Flaw Allows Cross-Tenant Remote Code Execution on KVM Hosts Do Son
    CVE-2026-50112 is a critical Apache CloudStack flaw enabling cross-tenant remote code execution as root on KVM hosts. Upgrade to 4.20.3.1 or 4.22.1.1. Related Posts: EverShop CVE-2026-72843 Flaw Allows Unauthenticated Account Takeover CVE-2026-77806: SPIP Unauthenticated RCE Exploited in the Wild as Public Exploit Lands Spring Data REST and Spring AI Vulnerabilities: Four High-Severity Flaws Patched The post CVE-2026-50112: Apache CloudStack Flaw Allows Cross-Tenant Remote Code Execution on K
     
  • ↗️

CVE-2026-50112: Apache CloudStack Flaw Allows Cross-Tenant Remote Code Execution on KVM Hosts

✇Cybersecurity News
Por:Do Son
21 de Agosto de 2026, 12:56

CVE-2026-50112 is a critical Apache CloudStack flaw enabling cross-tenant remote code execution as root on KVM hosts. Upgrade to 4.20.3.1 or 4.22.1.1.

Related Posts:

The post CVE-2026-50112: Apache CloudStack Flaw Allows Cross-Tenant Remote Code Execution on KVM Hosts appeared first on Daily CyberSecurity.

CVE-2026-64561: Zapscape KVM Escape Runs Commands With Kernel Root Privilege, PoC Exploit Code Publicly Disclosed

✇Cybersecurity News
Por:Do Son
6 de Agosto de 2026, 23:04

PoC exploit code is public for CVE-2026-64561 (Zapscape), a KVM escape that runs commands with kernel root privilege on the host. Details inside.

Related Posts:

The post CVE-2026-64561: Zapscape KVM Escape Runs Commands With Kernel Root Privilege, PoC Exploit Code Publicly Disclosed appeared first on Daily CyberSecurity.

  • ✇Firewall Daily – The Cyber Express
  • Januscape Flaw in Linux KVM’s MMU Code Enables VM Escape on Intel and AMD Ashish Khaitan
    A newly disclosed Linux kernel vulnerability, CVE-2026-53359, dubbed Januscape, has exposed a critical weakness in the Linux Kernel-based Virtual Machine (KVM) hypervisor. The flaw resides in the shadow MMU code and allows attackers to escape a virtual machine (VM), compromise the underlying host, and potentially execute arbitrary code.  Security researchers warn that the issue poses a serious risk to multi-tenant x86 public cloud environments running untrusted guests with nested virtualizati
     
  • ↗️

Januscape Flaw in Linux KVM’s MMU Code Enables VM Escape on Intel and AMD

✇Firewall Daily – The Cyber Express
Por:Ashish Khaitan
8 de Julho de 2026, 03:29

CVE-2026-53359

A newly disclosed Linux kernel vulnerability, CVE-2026-53359, dubbed Januscape, has exposed a critical weakness in the Linux Kernel-based Virtual Machine (KVM) hypervisor. The flaw resides in the shadow MMU code and allows attackers to escape a virtual machine (VM), compromise the underlying host, and potentially execute arbitrary code.  Security researchers warn that the issue poses a serious risk to multi-tenant x86 public cloud environments running untrusted guests with nested virtualization enabled. 

Januscape Flaw Affects KVM Shadow MMU Code 

Discovered by security researcher Hyunwoo Kim (@v4bel), CVE-2026-53359 is described as a use-after-free vulnerability in the KVM/x86 shadow MMU code. According to Kim, the flaw can be triggered entirely from within a guest VM to corrupt the host kernel's shadow page state, ultimately breaking guest-to-host isolation. Kim demonstrated Januscape as a zero-day during Google's KVMCTF bug bounty program, which offers rewards of up to $250,000 for complete VM escape vulnerabilities. The researcher noted that this is the first publicly known KVM guest-to-host exploit research that can be triggered on both Intel and AMD systems, rather than being limited to a single architecture.

CVE-2026-53359 impact and affected systems 

Successful exploitation of Januscape can result in complete compromise of the host. Kim explained, "An attacker who has rented just a single instance on a public cloud could panic the host kernel to take down every other tenant VM on the same physical machine (DoS), or run code with root privilege on the host to take over the host and all the guests on it (RCE)."  In addition to VM escape, CVE-2026-53359 can enable local privilege escalation on certain Linux distributions. On systems such as Red Hat Enterprise Linux (RHEL), where /dev/kvm is world-writable (0666), unprivileged users may escalate privileges to root.  The vulnerability requires root privileges inside the guest VM, which public cloud users typically receive by default. If root access is unavailable, Kim said attackers could chain the flaw with another privilege escalation vulnerability, such as Dirty Frag. 

Patch availability and disclosure timeline 

According to the official GitHub advisory, Januscape remained hidden in the Linux kernel for roughly 16 years. The affected code spans the commit from 2032a93d66fa (August 1, 2010) through 81ccda30b4e8 (June 16, 2026). The issue was patched in the mainline Linux kernel on June 19, 2026, when commit 81ccda30b4e8 was merged.  The advisory states that a proof-of-concept (PoC) executed inside a guest VM can reliably trigger a host's kernel panic within seconds or minutes. While a full VM escape exploit exists in a controlled environment, it has not been publicly released. Following coordinated disclosure through linux-distros@vs.openwall.org and the end of the agreed embargo, the exploit details were published on oss-security along with technical documentation.  The advisory also clarifies that CVE-2026-53359 affects only Intel and AMD-based KVM hosts, not arm64 systems. It further notes that the vulnerability exists within KVM's in-kernel MMU code, making it independent of QEMU's emulation and potentially impacting cloud providers using custom virtualization stacks. Administrators running multi-tenant x86 KVM hosts with nested virtualization are advised to ensure the 81ccda30b4e8 patch has been applied. 
❌
❌