IBM
CompanySecurity timeline
- Vulnerability reported by Cyber Security NewsPublic proof-of-concept released for patched Windows WinSock privilege escalation flaw CVE-2023-21768
Recent news
Public proof-of-concept released for patched Windows WinSock privilege escalation flaw CVE-2023-21768
A public proof-of-concept exploit for CVE-2023-21768 targets the afd.sys Windows kernel driver and lets a local user with low privileges gain SYSTEM rights, with the full chain reported working on Windows 11 22H2. Microsoft patched the flaw in January 2023, and IBM published the researchers' analysis on 21 March 2023. The exploit does not provide a direct remote route in.
2026 rankings of MSSP, incident response, managed SIEM and SOCaaS providers
Four Cyber Security News listicles rank providers of managed security services (MSSP), incident response retainers, managed SIEM and SOC-as-a-Service for 2026. Scores are editorial, weighted on detection quality, transparency, SLA strength and commercial flexibility, and are explicitly not lab results. The articles flag acquisition and roadmap uncertainty at Secureworks (Sophos integration), the Cylance and LogRhythm/Exabeam lineages, and advise checking contract terms before buying.
Guide to five cyber range tools for security teams in 2026
This buyer's guide covers cyber range platforms, which let security operations centres rehearse real attacks in a controlled environment before they reach production systems. It cites IBM's 2026 report, which puts the average data breach cost at $4.99 million, and argues that slow response adds to that cost. The excerpt is truncated and does not name the five tools it reviews.