Skip To Main Content
Saeed Abbasi on Muck Rack

Saeed Abbasi

San Francisco, Toronto
As seen in: MDPI, Journal of Medical Case Reports, Medscape, Geo News English, GovLoop, iTWire, SC Media, Global Security Mag (France), SecurityBrief Australia, SecurityBrief New Zealand and

Get in touch with Saeed

Contact Saeed, search articles and posts on X, monitor coverage, and track replies from one place.

Learn more about Muck Rack

Actions

Share this page

Articles

RefluXFS: A Linux Kernel Local Privilege Escalation to Root in XFS (CVE-2026-64600)

|
By Saeed Abbasi
| qualys.com
Qualys Threat Research Unit (TRU) identified CVE-2026-64600, a race condition in the Linux kernel’s XFS filesystem copy-on-write path. An attacker with an ordinary local account can exploit this race condition to overwrite protected files on disk and gain host root privileges on affected systems, including deployments running SELinux in Enforcing mode.
Open in Who Shared Issue with article?

CVE-2026-8933: Local Privilege Escalation in Set-Capabilities snap-confine

|
By Saeed Abbasi
| qualys.com
The Qualys Threat Research Unit (TRU) has identified a Local Privilege Escalation (LPE) vulnerability in snap-confine (CVE-2026-8933). This flaw allows an unprivileged local user to gain full root access on default installations of Ubuntu Desktop 24.04, 25.10, and 26.04. The issue stems from a security hardening change that inadvertently introduced a race condition during sandbox initialization. snap-confine is the enforcement component that builds the execution environment for snap applications.
Open in Who Shared Issue with article?

When AI-Accelerated Discovery Outruns Patching, Exploitability Proof Decides What Gets Fixed First

|
By Saeed Abbasi
| qualys.com
Qualys is proud to have joined Athena, the industry coalition Chainguard launched to coordinate the defense of open source software. It’s a cause we strongly support, because the problem Athena is working to solve is the same one the Qualys Threat Research Unit (TRU) has been measuring for the past four years. And the piece we bring to the table is the one thing most security teams tell us they are missing. For customers, this is not about another vulnerability feed.
Open in Who Shared Issue with article?
See all 68 articles