Do Son Black Basta ransomware now embeds a vulnerable NsecSoft driver (BYOVD) to silently kill antivirus processes like Sophos & CrowdStrike.
kernel-exploitation
PoC exploit for CVE-2025-38352 reveals a critical race condition in Linux POSIX timers, leaving 32-bit Android devices vulnerable to kernel corruption.
CVE-2025-21756 exploited a tiny Linux vsock bug to achieve root access via UAF and ROP chains. Michael Hoefler reveals the full exploitation path.