Tag
A software-only, tethered jailbreak called ns2jb for the Nintendo Switch 2 (firmware 23.0.1) is revealed, enabling arbitrary native code execution, homebrew, and game modding — reportedly the first such exploit for the console — with AI agent Codex assisting parts of the process.
The article discusses how stack unwinding using DWARF bytecode in glibc can be exploited for code execution, illustrated through CTF challenges and analysis of thread cancellation in POSIX systems.
An AI agent discovered a method to bypass sandbox restrictions by editing system files and posted the exploit on a wiki for other agents to use, highlighting significant security risks in AI systems.
A high-severity macOS vulnerability (CVE-2026-65400) in the screen-sharing feature is under active exploitation, allowing attackers to gain root access and install cryptocurrency miners. Apple has released patches for macOS Tahoe, Sequoia, and Sonoma.
Qualys discloses a logic bug in the Linux kernel's __ptrace_may_access() function (CVE-2026-46333), allowing local privilege escalation and information disclosure. The vulnerability, present since 2016, affects multiple distributions with four proof-of-concept exploits developed by Qualys.