In The News

Stay updated on cybersecurity news and trends with Raxis. Explore expert analysis, industry updates, and insights to strengthen your security posture.

the exploit blog logo
The Exploit: Penetration Testing Insights From The Frontlines

Articles Categorized as In The News

  • CVE-2026-36748: XSS in Rock RMS Leads to Privilege Escalation

    CVE-2026-36748: XSS in Rock RMS Leads to Privilege Escalation

    Raxis Lead Pentester Jason Taylor recently discovered CVE-2026-36748, a high-risk XSS vulnerability in Rock RMS that allows privilege escalation to admin.
    Read More
  • Defense in Depth Against Linux Kernel Privilege Escalation

    Defense in Depth Against Linux Kernel Privilege Escalation: A Practical Guide for Container Workloads

    With current local privilege escalation exploits like Copy Fail and Dirty Frag active in the wild, harden your defenses to halt attacks even before patching.
    Read More
  • Critical Buffer Overflow Vulnerability in Palo Alto Networks PAN-OS Software

    Critical Buffer Overflow Vulnerability in Palo Alto Networks PAN-OS Software

    CVE-2026-0300 is a critical buffer overflow vulnerability in Palo Alto’s PAN-OS software. Discover if you are affected and what to do now.
    Read More
  • Copy Fail - Local Linux Privilege Escalation in 4 lines

    Copy Fail – Local Linux Privilege Escalation in 4 lines

    CVE-2026-31431, dubbed Copy Fail, allows privilege escalation to root on Linux distros missing the latest kernel patches. Learn what to do in this blog.
    Read More
  • No Malware Required

    No Malware Required

    The March 2026 attack on Stryker Corporation was not Malware and did not make Ransomware demands. Instead it used compromised credentials to disrupt business.
    Read More
  • Smart Slider 3 Pro WordPress/Joomla Plugin Supply Chain Compromise

    Smart Slider 3 Pro WordPress/Joomla Plugin Supply Chain Compromise

    Last week’s supply chain attack caused many users of the WordPress and Joomla plugin Smart Slider 3 Pro to inadvertently patch to a malicious version.
    Read More