Wpis użytkownika konik_polanowy w Hydepark

Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2026.09.17.md

Exploiting AD ResetNightmare (CVE-2026-27912) and KerberLoss (CVE-2026-25177) from Linux - https://cravaterouge.com/articles/resetnightmare/

Exploit brokers pay $500,000 for a WordPress RCE. I found one with GPT5.6 Sol Ultra and $25 - https://www.slcyber.io/research/exploit-brokers-pay-500000-for-a-wordpress-rce-i-found-one-with-gpt5-6

Microcode in Intel's 8087 floating-point chip: the scale instruction - https://www.righto.com/2026/09/8087-microcode-reverse-engineering-fscale.html

$15k - CSPT to full account takeover, then 2FA bypass via the prototype chain - https://whoareme.com/blog/cspt-account-takeover-2fa-bypass/

Read the Bits, Not the Integer: msPKI-Certificate-Name-Flag and the ESC4⤍ESC1 Chain - https://secretmyth.blog/adcs/demystifying-mspki-certificate-name-flag/