Prepper Journals

🚨 BREAKING: A dangerous new security flaw has been discovered in Google Chrome, potentially allowing hackers to execute malicious code simply by getting you to visit a compromised webpage. And it targets the engine powering Chrome itself. CVE-2026-118320 is a high-severity memory corruption vulnerability in V8, Google’s JavaScript engine. Here’s what you need to know: → Attackers can potentially execute arbitrary code through specially crafted HTML pages. → No malicious downloads or browser extensions are required. → The vulnerability affects Chrome versions prior to 156.0.8078.73. → Successful exploitation could allow attackers to execute code inside Chrome’s security sandbox. → Google has released a security update addressing the vulnerability. ⚠️ IMPORTANT: There is currently no confirmed evidence of active exploitation. However, the potential for remote code execution makes this a serious security issue. What should you do? Update Chrome immediately and restart your browser to apply the patch. Another critical reminder that even the world’s most widely used browsers are vulnerable to serious security flaws. 🔒 Need to know whether your systems are exposed to emerging threats? Get a free security assessment at lucidsecurity.si Source: cve.now/CVE-2026-118320

🚨 BREAKING: A serious security flaw has been exposed in phpMyAdmin, potentially allowing attackers to BYPASS two-factor authentication and gain access to entire databases. Security researcher Abraxas Labs has published a proof of concept demonstrating a HIGH-severity vulnerability in phpMyAdmin 5.2.3, rated 8.1/10 by the researcher. The problem? The affected WebAuthn authentication system checks almost everything EXCEPT the cryptographic signature proving the user actually possesses their security key. Here’s what’s happening: → An attacker obtains a valid MySQL username and password. → phpMyAdmin requests a second authentication factor, normally a hardware security key or passkey. → The vulnerable code accepts a specially constructed authentication response without verifying its cryptographic signature. → The attacker bypasses 2FA and gains database access with the compromised user’s privileges. → Sensitive records could be stolen, altered, or deleted. ⚠️ The worst part? This defeats the exact protection two-factor authentication is supposed to provide when passwords are compromised. The vulnerability affects installations using phpMyAdmin’s fallback WebAuthn implementation, including the configuration identified in the default 5.2.3 distribution. As of October 27, no CVE or corresponding vendor security advisory was found. Website owners and administrators should review their phpMyAdmin installations, restrict public access, and ensure WebAuthn signatures are properly verified. 🔒 Not sure whether your infrastructure is vulnerable? We’re offering FREE security reviews at lucidsecurity.si 🔗 Research and proof of concept: github.com/abraxas/PMA-5.2.3…

🚨 BREAKING: CRITICAL 9.5/10 VULNERABILITY THREATENS SERVERS WORLDWIDE. HACKERS COULD EXECUTE CODE BEFORE THE OPERATING SYSTEM EVEN LOADS. Security researchers have uncovered a 16-year-old firmware vulnerability in technology used across the global server and data center ecosystem. CVE-2026-97631 affects TianoCore EDK II, a foundational component used by major UEFI firmware vendors. And the implications are serious. 🔴 Here's what we know: ➜ Pre-boot code execution: Attackers could execute malicious code at Ring 0, the CPU's highest privilege level, before operating system security controls are active. ➜ Widespread exposure: EDK II code is used extensively by firmware vendors including AMI, Insyde, and Phoenix, potentially exposing numerous enterprise servers. ➜ Security bypass potential: Successful exploitation could undermine the boot chain of trust and potentially enable persistent malware or compromise sensitive information. ➜ 16 YEARS UNDISCOVERED: The underlying buffer overflow has existed for approximately 16 years. ➜ Disclosure went wrong: Researchers from Anthropic and Google discovered the vulnerability, but a publicly released code fix exposed the issue months before its planned coordinated disclosure. ⚠️ THE BIG PROBLEM: A source-code fix has been merged, but affected servers still require firmware updates from their manufacturers. Distributing those updates across enterprise infrastructure could take considerable time. Important: Exploitation requires vulnerable firmware, PXE network boot, network access during the boot process, and target-specific knowledge. This is not an unrestricted remote exploit against every server. Organizations should immediately review their firmware exposure, disable unnecessary network boot functionality, and check for vendor updates. 🔐 Lucid Security is offering FREE initial security reviews to help businesses identify potential vulnerabilities and reduce their attack surface. 🌐 lucidsecurity.si CVE-2026-97631 | CVSS 9.5 CRITICAL Source: Ars Technica / TianoCore Security Advisory