NewsBleepingComputer
New TONTOU CPU attack bypasses Spectre v2 fixes, leaks Linux password hashes
Teaser from the source
Researchers found a way to bypass recent mitigations for Spectre v2 speculative execution side-channel attacks and developed an exploit to leak secrets from Linux machines. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on bypasses
Other advisories
- Highpwn_watch:frankenphp-1-13-5-caddy-2-11-9-security-releases-nov-2026FrankenPHP 1.13.5 fixes 17 vulnerabilities, including uploaded files run as PHP; Caddy 2.11.9 fixes FastCGI bypasses
- Mediumghsa:GHSA-j656-3hf2-fvjcDBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validation
- MediumCVE-2026-61789DBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validation
- Not ratedosv:CVE-2026-63121Kubewarden trusted-repos-policy: uppercase registry host bypasses registry/image deny rules
- Not ratedosv:CVE-2026-119337RAGFlow: OpenAI-compatible agent completion bypasses private canvas authorization
- Not ratedosv:CVE-2026-61789DBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validation
- Not ratedosv:CVE-2026-118759Kubeflow Pipelines: Run log streaming endpoint bypasses namespace authorization, exposing pod execution logs cross-tenant
- MediumCVE-2026-115918vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargs
Other news entries
- Google Calendar phishing campaign hijacks sessions, bypasses MFANewsBleepingComputer
- Adobe, Veeam, Juniper Networks Patch Critical VulnerabilitiesNewsSecurityWeek
- BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing RevocationsNewsThe Hacker News
- PHP2Shell exploit bypasses protections designed to stop remote code executionNewsThe Register — Security
- PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN SessionsNewsThe Hacker News
- Zero-Days Lurk in Microsoft's Overgrown October Patch TuesdayNewsDark Reading
- Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578)NewswatchTowr Labs
- OpenAI Pauses Tool Use After Agent Bypasses Internet Controls to Reach External ChatbotNewsThe Hacker News
ID