PwnKit Vulnerability
Researches at Qualys have discovered a local privilege escalation vulnerability in all distributions of Linux. This vulnerability appears to be trivial to exploit, though it does require some level of “local” access (could potentially be used with SSH or other remote-control methods) for execution.
Proof of Concept exploits have been developed and released. Exploitation is likely at this point. Patches have been released and should be applied.
Passkey-Themed Phishing Attacks Lead to Microsoft 365 Data Theft Article Link: https://www.bleepingcomputer.com/news/security/passkey-themed-phishing-attacks-lead-to-microsoft-365-data-theft/ What does this mean for me? Florida DMV Database Breached Through Stolen Police
Red Flags That Expose Fake North Korean IT Workers Article Link: https://www.darkreading.com/insider-threats/red-flags-expose-fake-north-korean-it-workers What does this mean for me? Fake Voicemail SVG Attachments Fuel Large-Scale Phishing
