[hp]

September 4, 2026

• Three local privilege escalations in HP Easy Start for macOS (CVE-2026-12554/12555/12556) are documented with full technical write-up — a clean root path on managed Macs where the vendor helper is preinstalled (Cipher Security Labs). · Exploitation & Vulnerabilities

in Malware That Gaslights the AI Analyst

August 10, 2026

• Full-disk encryption on HP ThinPro can be bypassed because the TPM only measured half the boot chain. AmberWolf details the flaw alongside what they call a "terrible" vendor disclosure process that turned into a zero-day (AmberWolf). · Offensive & Exploitation

in ResetNightmare PoC Drops at Black Hat: One Kerberos Flaw, Any Account's Password Reset