CVE-2026-96512: The Sudo TZ Bypass That Defeats NOTBEFORE/NOTAFTER Time Restrictions, and the One-Line Fix If your sudoers file uses time-based access windows, NOTBEFORE and NOTAFTER rules that grant a user or group elevated access... Sep 25, 2026 4 min read Linux
BadSuccessor After the Patch: What Windows Server 2025 dMSA Privilege Escalation Still Gets You BadSuccessor, the delegated Managed Service Account (dMSA) privilege escalation technique in Windows Server 2025 Active Directory, is often still described... Sep 25, 2026 6 min read Active Directory
CISA Flags Three Actively Exploited Linux Kernel CVEs: Patch Deadline Already Passed CISA added three actively exploited Linux kernel vulnerabilities to its Known Exploited Vulnerabilities catalog on September 18, 2026, with a... Sep 24, 2026 5 min read Linux / Security