TL;DR A Linux kernel use-after-free in SCTP, tracked as CVE-2026-64564, allows local attackers to gain root. Researchers demonstrated privilege escalation and container-to-host escape on five dist…

The Tails project shipped Tails 7.10.1 as an emergency release on August 5, 2026. This update addresses two critical security flaws – one in the Linux kernel and one in the expat XML library…

TL;DR Security researcher Hyunwoo Kim (@v4bel) disclosed a KVM escape vulnerability named Zapscape. Tracked as CVE-2026-64561, it lets a guest break out to the host. The attacker can then run comm…

TL;DR A Linux kernel eventpoll flaw lets a local user climb to root. Tracked as CVE-2026-43074, it scores 7.3 on CVSS. Researchers confirmed a working root shell on a Pixel 10 Pro. The full detail…

Sunset: Decoy Walkthrough

🚨 HP ThinPro’s “Encrypted” Thin Clients Aren’t as Secure as You Think

Imagine sending a WhatsApp message to someone in another country and receiving a response within seconds.

Difficulty: Easy Category: Web Application Time Required: 40 min

Most “hacker OS” projects on GitHub are a themed terminal emulator running inside your regular desktop. Cool wallpaper, same OS underneath.

TL;DR A Linux kernel CPU timer flaw lets a local user reach root. Tracked as CVE-2026-64560, it scores 7.0 on CVSS. Researchers confirmed a root shell on a Pixel 10 Pro. The full details and proof…