Opsec Cyber privilege escalation Archives

Category Archives: privilege escalation

CISA Identifies Five New Vulnerabilities Currently Being Exploited

March 5 2025 By Bruce Schneier in privilege escalation, Security, vulnerabilities

Of the five, one is a Windows vulnerability, another is a Cisco vulnerability. We don’t have any details about who is exploiting them, or how. News article. Slashdot thread.

Zoom Exploit on MacOS

August 17 2022 By Bruce Schneier in Apple, Exploits, privilege escalation, Security, vulnerabilities

This vulnerability was reported to Zoom last December:

The exploit works by targeting the installer for the Zoom application, which needs to run with special user permissions in order...
Read more

Twelve-Year-Old Linux Vulnerability Discovered and Patched

January 31 2022 By Bruce Schneier in Linux, privilege escalation, Security, vulnerabilities

It’s a privilege escalation vulnerability:

Linux users on Tuesday got a major dose of bad news — a 12-year-old vulnerability in a system tool called Polkit gives attackers unfettered...
Read more

Interesting Privilege Escalation Vulnerability

August 26 2021 By Bruce Schneier in privilege escalation, Security, vulnerabilities, Windows, Zero-day

If you plug a Razer peripheral (mouse or keyboard, I think) into a Windows 10 or 11 machine, you can use a vulnerability in the Razer Synapse software —...