Researcher exposes VirtualBox zero-day vulnerability

A Russian security researcher fed up with the current state of infosec has published details about a zero-day vulnerability affecting Oracle’s popular virtual machine software VirtualBox without first informing the company. Saint Petersburg-based researcher Sergey Zelenyuk discovered a chain of bugs that can allow malicious code to escape from a VirtualBox virtual machine and execute …