Adobe patched a remote code execution vulnerability, a reminder that widely deployed creative and document tools remain attractive targets for attackers looking to gain a foothold.

In a separate campaign, attackers are abusing DNS records to steal cryptocurrency wallets, redirecting victims through infrastructure they can quietly control. Researchers also detailed an NVIDIA container escape, where an attacker who lands inside a container can break out to the underlying host.

One of the more unusual findings is a self-healing backdoor that automatically restores itself after removal. An attacker can persist on a system even after defenders believe they have cleaned it out.

Beyond these highlights, there are more than twenty other stories covered in the full writeup, touching on:

• Old vulnerabilities finding new victims
• Trusted logins being used to hide the wrong person
• Familiar tools being repurposed for malicious ends

The common thread is that small permissions and trusted components continue to be the most reliable path to a significant breach.

Source: The Hacker News

Which of these techniques, from the self-healing backdoor to the container escape, is most concerning for your environment, and how are you detecting them?