CIRCLE WITH A DOT

@quarkslab bravo

Another antivirus ️, another unfulfilled promise . @kaluche_ turns Avira's protection into a privilege escalation playground. This time: not 1, not 2, but 3 LPE vectors via symlink abuse (CVE-2026-27748, CVE-2026-27750) and unsafe deserialization (CVE-2026-27749).Find out more: https://blog.quarkslab.com/avira-deserialize-delete-and-escalate-the-proper-way-to-use-an-av.html

Why macOS AVs shouldn’t trust PIDs - new post by @Coiffeur0x90Intego X9: XPC validation falls back to PID → PID reuse + posix_spawn() shenanigans ⇒ confused deputy / privileged methods abused 🧨Lesson: PID ≠ identity.Check it out https://blog.quarkslab.com/intego_lpe_macos_2.html