Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug

The Hacker News · Friday, 16 October 2026 at 17:48 (2h ago) · Original article ↗

A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a separate kernel flaw, bypassing OpenBSD's KARL kernel-address randomization and its SMAP and SMEP hardware protections. Security firm Calif, which found and reported the flaws, published a detailed writeup and full proof-of-concept code after OpenBSD shipped

You're reading a preview. The full article is published by The Hacker News on their website.

Read the full story on The Hacker News

Security

Critical BlockStrap flaw lets hackers run code on Magento servers

Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers. [...]

BleepingComputer just now

Security

Chicago-Area Cops Helped HSI Spy on Minnesota Anti-ICE Activists

Despite Illinois’ sanctuary laws, local police in and around Chicago helped ICE investigative agents track activists engaged in First Amendment–protected activities.

Wired 2h ago

Security

Targeted ads installed Candiru spyware in zero-click attacks

Candiru spyware was delivered to devices at Al Jazeera Media Network via targeted online advertisements in a zero-click attack that required only rendering the malicious ads on the victim's device. [...]

BleepingComputer 3h ago

Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug

More Security & Privacy

Critical BlockStrap flaw lets hackers run code on Magento servers

Chicago-Area Cops Helped HSI Spy on Minnesota Anti-ICE Activists

Targeted ads installed Candiru spyware in zero-click attacks