PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Intego X9: When your macOS antivirus becomes your enemy

blog.quarkslab.com | research | #vulnerability-research | #privilege-escalation | #macos | #vulnerability | #antivirus | #intego | #cve-2026-26224 | #cve-2026-26225
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

First part of Quarkslab's Intego series: several vulnerabilities compromise all Intego applications on macOS (CVE-2026-26224, CVE-2026-26225), whether installed standalone or as a bundle.
Published
Collected

Related coverage

research · blog.quarkslab.com
Milking the last drop of Intego - Time for Windows to get its LPE
Quarkslab discloses a Windows LPE in Intego 3.0.0.1: the Optimization module deletes files as SYSTEM without validating directory junctions, chaining the Config.msi trick to reach SYSTEM privileges.
research · blog.quarkslab.com
Intego X9: Never trust my updates
Part three of Quarkslab's Intego series: chaining an XPC authentication bypass in the com.intego.netupdated daemon with another flaw to reach root, highlighting weak validation in macOS XPC mechanisms.
research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
High · vulnerability · codeberg.org
cowcups: CUPS cups-fontpath Local Privilege Escalation (LPE) to Root PoC
Demonstrates an effective local root privilege escalation chain in default CUPS environments by abusing printer discovery and Ghostscript font search paths.
vulnerability · volexity.com
[CVE-2026-104935] A Series of Unauthenticated Events: Chained Exploitation of Ivanti Connect Secure Zero-Days
# A Series of Unauthenticated Events: Chained Exploitation of Ivanti Connect Secure Zero-Days October 13, 2026 Charlie Gardner, Sean Koessel, Steven Adair, and Volexity Volcano Team **_Volexity...
research · blog.quarkslab.com
State of Post-Quantum Cryptography implementations
In this blogpost, we first review the landscape of Post-Quantum Cryptography implementations across some of the most popular cryptographic libraries. Following that, we present the results of a differential fuzzing campaign on few of the presented implementations.
Back