Everything Packet Tribune has reported about privilege escalation: 4 stories, newest first. Part of our Vulnerabilities coverage.
Misconfigured IAM roles allow attackers to move laterally across cloud accounts by exploiting implicit trust relationships and overly permissive policy statements that grant administrative access without explicit authentication.
Screen lockers exploit the separation between the graphical interface and the kernel, allowing attackers to hijack display output without needing root privileges to encrypt files.
A CVSS 9.8 vulnerability in the miniOrange OTP verification plugin allows attackers to escalate privileges on affected WordPress sites.
A high-severity flaw in Apache Camel Karavan allows authenticated users to deploy arbitrary Kubernetes resources, including privileged pods, via unvalidated YAML files.