Security news aggregator

Latest coverage for Root Access

Root access gives an attacker or administrator complete control of a Unix-like system, allowing changes to data, software, accounts, and security settings.

53 headlines in this view

Refine the feed

Search across headline titles and summaries.

Tag briefing

Background for this topic.

Root access is unrestricted administrative control of a Unix or Linux system. The root account, or an equivalent privilege obtained through mechanisms such as sudo, can read or change nearly any file, alter system configuration, install software, and control running processes. Related uses of “root” may describe equivalent administrator privileges in containers, cloud workloads, network appliances, or mobile devices.

Because root privileges can bypass ordinary access controls, stolen administrative credentials or a vulnerability that enables privilege escalation can let an attacker modify security settings, access protected data, establish persistence, or disrupt the host. Organizations generally reduce exposure by disabling direct root login where practical, using named administrator accounts with least privilege, protecting privileged authentication with strong controls, and recording and reviewing elevation events. Vulnerability management should prioritize flaws that can grant local or remote root-level execution; during an incident, investigators must assess whether root access was obtained and treat the host’s integrity as potentially compromised.

Volume over time

Weekly headline count for the current query.

Showing 20 most recent headlines of 53 Filtered view

Emergency patches out now for those managing the millions of domains assumed to be affected Emergency patches are available for a critical vulnerability in cPanel and WHM that allows attackers to bypass authentication and gain root access to servers managed using it.…

The Register 30 Apr 2026, 10:14 p.m. 0-Day Authentication Bypass Critical Vulnerability Patch Root Access Vulnerability

Google Sites lure leads to bogus root certificate Imagine getting asked to do something by a person in authority. An unknown malware slinger targeting open source software developers via Slack impersonated a real Linux Foundation official and used pages hosted on Google.com to steal developers' credentials and take over their systems.…

The Register 14 Apr 2026, 6:48 a.m. Certificates Credentials Google Impersonation Linux Malware Open Source Root Access Slack Theft

CUPS server shown spilling out remote code execution and root access In the latest chapter on leaky CUPS, a security researcher and his band of bug-hunting agents have found two flaws that can be chained to allow an unauthenticated attacker to remotely execute code and achieve root file overwrite on the network.…

The Register 7 Apr 2026, 11:03 a.m. Artificial Intelligence Flaw Linux Remote Code Execution Root Access Unauthenticated