The Exploit Post

Sign in Subscribe

Red Dog Security

Cryptography Organization Annuls Election After Losing Decryption Key

Cryptography Organization Annuls Election After Losing Decryption Key

The International Association for Cryptologic Research (IACR), one of the world's premier cryptography organizations, has annulled its annual leadership elections after losing the key needed to decrypt voting results—an ironic mishap for experts in secure communications. About IACR IACR is a non-profit scientific organization conducting research in

SquareX and Perplexity Dispute Alleged Comet Browser Vulnerability

SquareX and Perplexity Dispute Alleged Comet Browser Vulnerability

Security researchers from SquareX and AI company Perplexity are engaged in a public dispute over a reported critical vulnerability in Perplexity's Comet AI browser. While SquareX claims the flaw could enable remote code execution without user consent, Perplexity has dismissed the research as "fake" while quietly

Nvidia: October Windows Updates Cause Gaming Performance Issues

Nvidia: October Windows Updates Cause Gaming Performance Issues

Nvidia has confirmed that October security updates for Windows 11 are causing performance degradation in games on systems running Windows 11 versions 24H2 and 25H2. In response, the company has released a beta hotfix driver (GeForce Display Driver version 581.94) to address the issue. "A performance drop may

Chinese-Linked Group PlushDaemon Exploits Software Updates in Supply Chain Attacks

Chinese-Linked Group PlushDaemon Exploits Software Updates in Supply Chain Attacks

A China-linked threat actor known as PlushDaemon is conducting cyber-espionage operations by intercepting software update traffic using malware dubbed EdgeStepper, according to researchers at ESET. Campaign Overview ESET reports that PlushDaemon has targeted individuals and organizations in the United States, China, Taiwan, Hong Kong, South Korea, and New Zealand since

Grafana Patches Critical Vulnerability Allowing Administrator Impersonation

Grafana Patches Critical Vulnerability Allowing Administrator Impersonation

Grafana Labs developers have issued a warning about a critical vulnerability, CVE-2025-41115 (rated 10 out of 10 on the CVSS scale), in Grafana Enterprise. The flaw allows attackers to impersonate an administrator or another internal account through the creation of a new user. Exploitation Requirements The vulnerability can only be

Google Uncovers BadAudio Malware in APT24 Espionage Campaigns

Google Uncovers BadAudio Malware in APT24 Espionage Campaigns

Researchers from the Google Threat Intelligence Group (GTIG) have revealed details of a three-year espionage campaign conducted by the Chinese threat group APT24. The hackers deployed previously undocumented malware called BadAudio in their operations. APT24 (also tracked as Pitty Tiger) targets government institutions and organizations across multiple sectors—including healthcare,

CrowdStrike Catches Insider Leaking Data to Hackers

CrowdStrike Catches Insider Leaking Data to Hackers

CrowdStrike confirmed last month that its security team identified and terminated an employee who transmitted screenshots of the company's internal systems to hackers. The screenshots appeared in the Telegram channel operated by Scattered Lapsus$ Hunters, a collective comprised of members from Scattered Spider, LAPSUS$, and ShinyHunters. The leaked