A novel Linux Kernel cross-cache attack named SLUBStick has a 99% success in converting a limited heap vulnerability into an arbitrary memory read-and-write capability, letting the researchers elevate privileges or escape containers.

The Microsoft consumer signing key stolen by Storm-0558 Chinese hackers provided them with access far beyond the Exchange Online and Outlook.com accounts that Redmond said were compromised, according to Wiz security researchers.

Read more about findings that demonstrated that SARS-CoV-2 induced the expression of the HERV-W envelope proteins

Researchers in the United States have shown that genes from severe acute respiratory syndrome coronavirus 2 (SARS-CoV-2) - the causative agent of coronavirus disease 2019 (COVID-19) - can be integrated into the genome of infected human cells. The team says the viral RNA can be expressed as chimeric transcripts with fused cellular and viral sequences.

A vulnerability in the Python programming language that has been overlooked for 15 years is now back in the spotlight as it likely affects more than 350,000 open-source repositories and can lead to code execution. Disclosed in 2007 and tagged as CVE-2007-4559, the security issue never received a patch, the only mitigation provided being a documentation update warning developers about the risk.

Dr. Anthony Fauci's National Institute of Allergy and Infectious Diseases has reportedly handed yet another large dollar grant to the EcoHealth Alliance. Issued late last month, the grant is once again designed to fund the study of bat viruses.

An NPM supply-chain attack dating back to December 2021 used dozens of malicious NPM modules containing obfuscated Javascript code to compromise hundreds of downstream desktop apps and websites. As researchers at supply chain security firm ReversingLabs discovered, the threat actors behind this campaign (known as IconBurst) used typosquatting to infect developers looking for very popular packages, such as umbrellajs and ionic.io NPM modules.

A hacker has stolen almost $620 million in Ethereum and USDC tokens from Axie Infinity's Ronin network bridge, making it possibly the largest crypto hack in history.