A public PoC named VsockDrop turns CVE-2026-53365 into unprivileged local privilege escalation to root on Linux. Details and exploit code are disclosed.

Related Posts:

• Public PoC for CVE-2026-52923 Allows Attackers to Escalate to Root Privilege
• CVE-2026-77136: TYPO3 Powermail RCE Flaw Exploited in the Wild
• Weidmueller Router Flaw CVE-2026-63586 With CVSS 9.8 Allows Attackers To Execute Arbitrary Commands With Root Privileges

The post CVE-2026-53365: VsockDrop PoC Enables Unprivileged Local Privilege Escalation appeared first on Daily CyberSecurity.

A zero-click flaw in Xiaomi ShareMe (MiDrop) lets nearby attackers write files silently. Full details and PoC code are now public.

Related Posts:

• CVE-2026-65640: WordPress 7.0.4 Fixes Remote Code Execution
• MariaDB Low-Privilege Remote Code Execution Chain: Full Details and PoC Exploit Code Publicly Disclosed
• GitLab Patch Release Fixes 13 Flaws, Including High-Severity XSS Bugs

The post Zero-Click File Drop Hits Xiaomi ShareMe: PoC Public appeared first on Daily CyberSecurity.

ChainDrop npm worm infected 400+ packages, stealing cloud keys and CI secrets via blockchain C2. Unit 42 details the full attack chain and fixes.

Related Posts:

• Fake Zoom Installer Drops Overlord RAT on macOS
• macOS ClickFix Campaign Hides Its Lure Behind a Fingerprinting Gate
• Fake AI Tools Malware Targets Developers Through GitHub

The post ChainDrop npm Worm Hits 400+ Packages via Blockchain C2 appeared first on Daily CyberSecurity.