macOS 26 introduces ASIF, a new sparse disk image format for Apple Silicon, dramatically improving VM read/write speeds and storage efficiency

Ever looked at Docker and thought, “Is this a ship? A whale? A fridge that runs code?”

I recently wrapped up Lab 3 of my hands-on cybersecurity learning journey, and let’s just say: it definitely took longer than expected.

A critical integer overflow in VirtualBox (CVE-2025-30712) allows an attacker to escape the VM and execute code on the host, with a public proof-of-concept available.

By Lovelesh Gangil (@loveleshgangil )

A Critical (CVSS 9.4) flaw in Happy DOM allows untrusted JavaScript to escape the Node.js VM context and achieve RCE on the host system via the Function inheritance chain.

SonicWall patched a critical flaw (CVE-2025-40604) in its Email Security appliances. The bug allows persistent RCE by exploiting a lack of integrity checks when loading the root filesystem image from the VM datastore.

In a new report, the Huntress Tactical Response Team details a sophisticated intrusion discovered in December 2025 where threat actors successfully executed a “VM escape”—breaking out …

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Virtual machines are often perceived as impenetrable bastions for risk assessment, operating under the assumption that the host

Urgent: Apache CloudStack patches critical flaws (CVE-2026-25199, CVE-2026-25077) enabling VM hijacking and KVM host RCE. Secure your cloud environment now.

Starting a journey into technology and cybersecurity can feel like stepping into a maze. When I first began I was overwhelmed by terms…