SoheilSec

Even blizzard is trolling Microsoft 🤣 https://x.com/Warcraft/status/2121030122723590199?a=_hdvjqYYAmqW5bvBbUI&s=19

CISA Confirms Active Exploitation of Outlook User Interaction 0-Day Vulnerability The U.S. Cybersecurity and Infrastructure Security Agency has confirmed active exploitation of a Microsoft Outlook zero-day vulnerability, CVE-2026-124194, that can expose user authentication data. According to Microsoft’s security advisory, an attacker can send a specially crafted message file and persuade a victim to open it in Outlook 😃 https://cybersecuritynews.com/active-exploitation-of-outlook-0-day-vulnerability/

CVE-2026-85844 is patched: a Windows Kerberos authentication bypass (CVSS 9.8). An unauth attacker could send specially crafted Kerberos authn traffic and relay the resulting authn to an affected DC. Successful exploit could allow the attacker to gain SYSTEM privs on the DC. No user interaction is required🙄 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85844

While all supported Windows Server versions are capable of NTLM signing; The new changes/update help ensure that signing is negotiated and eventually required by default. Phase 1 (November 10, 2026): Windows client devices begin offering NTLM signing on all connections by default. Servers accept both signed and unsigned clients. Auditing events identify clients not using signing. Phase 2 (May 2027): Windows servers begin requiring NTLM signing by default. Clients that do not offer signing will be rejected by secure servers. https://support.microsoft.com/en-us/servicing/os/windows/docs/2026/11/kb5135557-ntlm-signing-security-improvements

Microsoft SQL Server Remote Code Execution Vulnerability 😎 https://cve.now/CVE-2026-116945

ingress-nginx admission controller RCE escalation https://cve.now/CVE-2025-1974

Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen https://ift.tt/4XdewYU

There are many modified versions of ARTEX out there. Threat actors change the admin panels, rename elements, and swap logos to evade basic detection. All three admin panels shown here are ARTEX: the original and two modified versions. Tracking ARTEX a Chinese-built, LLM-driven autonomous penetration testing framework. A single FOFA favicon query surfaces 300+ live control panels: icon_hash="-576220750" https://www.nextron-systems.com/2026/10/29/beyond-framework-signatures-understanding-ai-driven-intrusions/

GitLab: remote code execution via crafted regex in CI/CD config (CVE-2026-97229) Exploited in the wild (CISA KEV) · EPSS 0.18 Patch → 19.2.8, 19.3.5 and more https://cve.now/CVE-2026-97229

Infinity Core: Linux Kernel Core LPEs The vulns (CVE-2026-98260, CVE-2026-98256, CVE-2026-89754, CVE-2026-80775, CVE-2026-98385, CVE-2026-97941) covered here affect Kernel Core subsystems that have historically seen relatively few security issues. They enable LPE and container escape on Linux distributions, and some also allow an attacker to gain full root privileges from the Android untrusted_app domain. cyberpocket.org https://github.com/V4bel/InfinityCore

HTTP2Shell (CVE-2026-111497) is exploitable outside Node. Unauth RCE against a pinned vulnerable Docker Official Image for WordPress via /xmlrpc.php. One inbound pingback.ping, ASLR on, no leak or cross-request grooming. https://github.com/caveeroo/cve-2026-111497-wordpress-poc

Http2shell https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111497

https://www.php2shell.com/ https://gist.github.com/Blevene/472692937d05145d29d17dc3c6edc2a0

Introduction to Linux Kernel Exploitation: Vulnerability and Environment – Part 1 https://allelesecurity.com/intro-linux-kernel-exploitation-part-1/ Introduction to Linux Kernel Exploitation: Triggering the Vulnerability – Part 2 https://allelesecurity.com/intro-linux-kernel-exploitation-part-2/ Introduction to Linux Kernel Exploitation: Exploitation – Part 3 https://allelesecurity.com/intro-linux-kernel-exploitation-part-3/ Introduction to Linux Kernel Exploitation: Mitigation Bypass (KASLR and SMEP) – Part 4 https://allelesecurity.com/intro-linux-kernel-exploitation-part-4/