New RustScan and Two-Face Exploits Target Cybersecurity Tools

Two recent exploits have emerged involving Rust-based tools. The RustScan exploit, detailed on September 10, 2026, showcases a modern port scanner that can scan all 65,000 ports in just three seconds, raising concerns about its potential misuse. Meanwhile, the Two-Face exploit, reported on September 7, 2026, involves a Rust binary that executes different code based on the target host, posing a significant risk of hidden malicious activity. Both exploits leverage Rust's capabilities, highlighting vulnerabilities in systems that utilize these tools. The RustScan exploit is particularly alarming due to its speed and adaptability, while the Two-Face exploit's dual execution method could lead to severe breaches if deployed in the wild. No specific CVEs have been assigned yet, but the community is urged to monitor developments closely.

Key Points: • RustScan can scan all ports in 3 seconds, raising potential misuse concerns. • Two-Face exploit executes different code based on the target host, creating hidden risks. • Both exploits utilize Rust, highlighting vulnerabilities in Rust-based cybersecurity tools.