#root privilege escalation
37 related articles
·2 min
Deep Dive: How a Local User Can Escalate to Root via an OpenBSD Kernel UAF Vulnerability
A kernel-level Use-After-Free vulnerability in OpenBSD allows local attackers to escalate privileges to root via dangling pointers. Learn how UAF works, its impact, and mitigation steps.
Read more →
·7 min
In-Depth Analysis of the GitLost Vulnerability: How GitHub AI Agents Were Tricked into Leaking Private Repositories
Security researchers disclose the GitLost attack, which uses prompt injection to trick GitHub AI agents into leaking private repository source code. An in-depth analysis of the attack principle, AI agent security risks, and developer defense recommendations.
Read more →
·7 min
LangSmith Engine: An Intelligent Operations Tool That Automatically Diagnoses and Fixes Agent Failures
LangChain's LangSmith Engine is an intelligent agent tool for tracking Agent failures, prioritizing issues, and auto-drafting fixes. Deep dive into its core capabilities, sandbox isolation, sub-Agent architecture, and continuous evaluation challenges.
Read more →
Launch a Cloud Dev Environment in One …
·4 min
Launch a Cloud Dev Environment in One Prompt: A Deep Dive into the Codex DigitalOcean Plugin
OpenAI Codex's DigitalOcean plugin lets developers launch persistent cloud dev environments with a single natural language prompt. A deep dive into capabilities, use cases, and risks.
Read more →
MSI Center High-Risk Privilege Escalat…
·2 min
MSI Center High-Risk Privilege Escalation Vulnerability: How Standard Users Can Gain SYSTEM Access in Seconds
Security researchers disclose an MSI Center LPE vulnerability allowing standard users to escalate to SYSTEM in seconds. Analysis of root causes, impact, and mitigations for MSI device users.
Read more →
·7 min
AI Agent Development: A Four-Stage Competency Model from 15K to 40K RMB Salary Growth Path
A detailed four-stage competency model for AI Agent development: from Python/RAG basics (15K) to workflow orchestration (20K), inference optimization (30K), and Agent cluster governance (40K RMB).
Read more →
·6 min
Agent Studio: A Unified Platform for Authoring AI Roles and Skills
Agent Studio unifies AI Agent role definition (Subagents) and Skills on one platform, enabling coordinated orchestration through a shared MCP endpoint, progressive disclosure, and moderated community publishing.
Read more →
·3 min
Claude Code Routines Explained: Automation in Practice with Proactive AI Coding Agents
Deep dive into Claude Code Routines: build proactive AI coding agents with time-scheduled and event-driven triggers. Covers automated docs, deploy verification, and on-call investigation.
Read more →
·4 min
Complete Guide to Installing and Configuring Claude Code in China: From Environment Setup to Successful Launch
Step-by-step guide to installing Claude Code in China, covering Node.js setup, Git config, network proxy settings, and API key options to overcome common issues.
Read more →
·2 min
The Right Way to Use Claude Code Sub-Agents: 3-5 Beat 100 Every Time
Deep dive into Claude Code Sub-Agent mechanics: from 5 built-in Agents to custom configs, comparing ECC, Superpowers, and GizTech community solutions.
Read more →
·3 min
Can AI Agents Replace Security Engineers? Insights from Coding Agents Reveal the Industry Truth
In-depth analysis of AI agents' real impact on cybersecurity. From chat tools to coding agents like Crawfish and Hermes, learn how AI is reshaping security engineering and how professionals should adapt.
Read more →
·3 min
Codex Setup Guide: From Environment Configuration to Core Features Explained
Complete guide to installing and configuring OpenAI Codex, covering Git, Node.js prerequisites, sandbox permissions, multi-task parallelism, and context management for developers.
Read more →
Tutorials·1 min
Claude Code Permission Bypass: One-Step Configuration with a Skill Link
Learn how to bypass Claude Code permission restrictions using a Skill link for one-step configuration, eliminating frequent permission popups with safety tips included.
Read more →
Tutorials·3 min
AI Agent Practical Development: A Complete Guide from Concept to Building Production-Grade Intelligent Agents
A deep dive into AI Agent core principles and practical development paths, covering perception-decision-execution capabilities, MCP protocol tool integration, and analysis of Manus and AutoGLM.
Read more →
Tech Frontiers·2 min
Project Glasswing: AI Discovers Over 10,000 High-Severity Software Vulnerabilities in One Month
Project Glasswing is a collaborative AI cybersecurity initiative that discovered over 10,000 high-severity vulnerabilities in its first month, reshaping proactive security auditing at scale.
Read more →
Research·2 min
UK AISI Assessment Report: GPT-5.5 Cybersecurity Capabilities on Par with Claude Mythos
The UK AI Safety Institute (AISI) releases its GPT-5.5 cybersecurity assessment, showing vulnerability discovery capabilities on par with Claude Mythos—but GPT-5.5 is already publicly available, raising greater security implications.
Read more →
Deep Dives·2 min
Computer Agent: An Open-Source Rust AI Desktop Agent That Automatically Controls Mouse, Keyboard, and Browser
Computer Agent is an open-source AI desktop agent built in Rust that controls terminals, browsers, mice, and keyboards via natural language. Explore its features, architecture, and security.
Read more →