Vulnerability

A new Linux local privilege escalation vulnerability known as Fragnesia has been made public. The flaw is described as similar to Dirty Frag and involves an ESP/XFRM logic bug.

3 Mwezi wa nne, 2026 Imeripotiwa na AI

Developers of the popular AI tool OpenClaw released patches for three high-severity vulnerabilities, including one that allowed attackers with basic pairing privileges to silently gain full administrative control. The flaw, tracked as CVE-2026-33579 and rated up to 9.8 out of 10 in severity, has raised alarms among security experts. Thousands of exposed instances may have been compromised unknowingly.

Chinese hackers have begun exploiting a critical remote code execution vulnerability in React2Shell, known as the React2Shell RCE flaw, just hours after its public disclosure. The bug carries a maximum severity rating of 10/10.

21 Mwezi wa kumi na moja, 2025 Imeripotiwa na AI

Security researchers have discovered a vulnerability in ServiceNow’s Now Assist platform. The flaw involves second-order prompt injection, which can transform AI into a malicious insider. This finding highlights potential risks in AI-assisted enterprise tools.

A major security vulnerability in the King Addons for Elementor WordPress plugin could impact up to 10,000 websites. The flaw allows for full takeover of affected WordPress sites. The issue was reported on November 1, 2025.

1 Mwezi wa kumi na moja, 2025 Imeripotiwa na AI

The US Cybersecurity and Infrastructure Security Agency has issued an urgent warning about CVE-2024-1086, a critical Linux kernel vulnerability actively exploited by hackers to deploy ransomware. This use-after-free flaw allows attackers to escalate privileges to root level on affected systems. Organizations worldwide are urged to patch immediately to mitigate the threat.