exploit

Three security researchers bypassed Apple's MIE protection in six days using AI model Claude Mythos, demonstrating a rare exploit that requires no traditional malware and gains root access on macOS. The full paper will be published after Apple releases a patch.

CVE-2026-40369 describes a vulnerability in Windows kernel's NtQuerySystemInformation function that allows arbitrary kernel address increment, enabling privilege escalation from unprivileged processes including Chrome sandbox. The exploit is deterministic on Windows 11 24H2-25H2.

Claude Mythos AI discovered a novel attack vector that bypassed Apple's M5 chip defense system in five days at a cost of $35K, producing a 55-page report delivered to Apple. The exploit poisons data ingested by the chip, evading Apple's MIE system.

Google Project Zero published a zero-click exploit chain for the Pixel 10, leveraging a Dolby vulnerability and a new VPU driver flaw to achieve root access on Android.

A Linux 0-day vulnerability in __ptrace_may_access() allows unprivileged users to read root-owned files like SSH host keys and /etc/shadow. Affects many distros and kernels, with exploits available for ssh-keysign and chage.

This article details how researchers bypassed the firmware downgrade protection in the Tesla Wall Connector's bootloader, allowing installation of older firmware versions despite the security ratchet.

Calif researchers, with help from the AI tool Mythos Preview, built the first public macOS kernel memory corruption exploit on Apple M5 hardware, bypassing MIE. The exploit chain took 5 days and will be fully disclosed after Apple fixes the vulnerabilities.

Researchers from Calif disclosed the first public macOS kernel memory corruption exploit on Apple M5, bypassing the MIE hardware mitigation and achieving local privilege escalation on the latest macOS version.

A critical heap buffer overflow vulnerability in Nginx's rewrite module (CVE-2026-42945) allows unauthenticated remote code execution, with a proof-of-concept exploit released. The bug affects Nginx versions from 0.6.27 to 1.30.0 and various Nginx Plus releases.

A security researcher released a zero-day exploit called YellowKey that bypasses Microsoft BitLocker encryption on Windows 11 and Windows Server 2022/2025, allowing full access to locked drives using a USB stick; the exploit appears to operate as a backdoor, with files disappearing after use.

A new Linux privilege escalation exploit called Fragnesia has been released with proof-of-concept code on GitHub.

A comparison of AI models (GPT-5.5, Mythos, Opus 4.6) for their effectiveness in crafting exploits within the XBOW framework, suggesting that security is an economic decision with fixed costs.

XBOW disclosed CVE-2026-45185, a critical unauthenticated remote code execution vulnerability in Exim mail servers caused by a use-after-free error in TLS handling. The article details the technical exploit development and the role of AI models in the discovery process.

A local privilege escalation exploit in the Linux kernel's io_uring subsystem via a zero-copy receive freelist bug.

The article discusses the Copy Fail exploit, a security vulnerability that affects Podman rootless containers.