Editor’s Note

In observance of the Independence Day holiday, Defense Daily will not publish July 3 and 4. Your next issue will be dated July 8

July 2, 2025
Read More >>

Abusing Sudo’s chroot: CVE-2025-32463 Explained

CVE-2025-32463 – Local Privilege Escalation via Sudo’s chroot Option
I recently explored a vulnerability in Sudo that allows unprivileged users to escalate to root by abusing the rarely used -R (chroot) feature and manipulating nsswitch.conf. Tested on Parrot OS, this PoC demonstrates how easy it is to gain root shell access when Sudo

The post Abusing Sudo’s chroot: CVE-2025-32463 Explained appeared first on Threatninja.net.

July 2, 2025
Read More >>

How to Secure Your Promo Codes Against Cyber Exploits

Promo codes provide a fantastic opportunity to increase customer traffic and generate sales, yet there is a potential risk with them. Promo codes are one of the objects of interest to cybercriminals because they exploit those codes and use them to their personal advantage, which can cost your company its customers. Among the most popular […]

The post How to Secure Your Promo Codes Against Cyber Exploits appeared first on IT Security Guru.

July 2, 2025
Read More >>

Ubuntu Disables Spectre/Meltdown Protections

A whole class of speculative execution attacks against CPUs were published in 2018. They seemed pretty catastrophic at the time. But the fixes were as well. Speculative execution was a way to speed up CPUs, and removing those enhancements resulted in significant performance drops.

Now, people are rethinking the trade-off. Ubuntu has disabled some protections, resulting in 20% performance boost.

After discussion between Intel and Canonical’s security teams, we are in agreement that Spectre no longer needs to be mitigated for the GPU at the Compute Runtime level. At this point, Spectre has been mitigated in the kernel, and a clear warning from the Compute Runtime build serves as a notification for those running modified kernels without those patches. For these reasons, we feel that Spectre mitigations in Compute Runtime no longer offer enough security impact to justify the current performance tradeoff…

July 2, 2025
Read More >>