Daily Archives: Nov 2, 2026
Proof-of-Concept Released for Windows Winsock Ancillary Privilege Escalation Vulnerability
A public proof-of-concept exploit for CVE-2023-21768 demonstrates how an attacker with local access can escalate to SYSTEM privileges via the Windows Ancillary Function Driver for WinSock.
Security researchers Valentina Palmiotti (chompie) and Ruben Boonen published the exploit code. Their full exploit chain targets vulnerable Windows 11...
Hackers Exploit Previously Patched Synology NAS Flaws to Deploy C3RB3R Ransomware...
Synology NAS devices are being targeted by C3RB3R ransomware in attacks linked to security flaws disclosed in 2024. Synology has urged users to update outdated DiskStation Manager (DSM) versions and installed packages.
The alert follows reports from the 360 Security Team and the Solar Emergency Response...
Scammers Send Fake ChatGPT Billing Notices to Steal Credit Card Details...
Attackers are impersonating OpenAI in fraudulent ChatGPT Plus billing emails that lead recipients to payment pages designed to steal credit card information and one-time passwords (OTPs).
The campaign pairs realistic-looking subscription notices with a live operator who can decide when to prompt for a verification code,...