Data Protection
Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Linux"
Vulnerabilities
Attackers could exploit the flaws to cause denial-of-service conditions, disclose memory, or modify memory.
Vulnerabilities
AI-assisted researchers flooded Vercel with reports, forcing the company to automate vulnerability triage.
Malware & Threats
The stealthy toolkit embeds a backdoor in HAProxy and targets automotive and media organizations in South Korea for long-term surveillance.
Artificial Intelligence
CISA has added the exploited flaw, CVE-2026-53362, to its KEV catalog, alongside a JFrog vulnerability exploited by OpenAI agents.
Vulnerabilities
Affecting every major distribution since 2011, the Linux kernel vulnerability allows attackers to gain root access.
Vulnerabilities
The 16-year-old Januscape flaw affects Linux's KVM hypervisor, allowing attackers to escape virtual machines and potentially execute code on the underlying host.
Vulnerabilities
Organizations are urged to patch after proof-of-concept code makes the Linux root escalation flaw easier to exploit.
Endpoint Security
A variant of DirtyFrag, the flaw allows unprivileged local users to manipulate the Linux page cache and gain root privileges.
Malware & Threats
Arch Linux suspended account registrations in response to the wave of malicious packages being uploaded to AUR.
Vulnerabilities
An improper authentication bug allows attackers to escalate their privileges and escape containers.
Vulnerabilities
Proof-of-concept (PoC) exploit code has been released for the CIFSwitch flaw, which allows low-privileged users to escalate to root on vulnerable Linux systems.
Endpoint Security
The vulnerability, tracked as CVE-2026-46300, is similar to the recently disclosed exploits named Dirty Frag and Copy Fail.
Endpoint Security
Also called Copy Fail 2 and tracked as CVE-2026-43284 and CVE-2026-43500, the exploit was disclosed before a patch was released.
Endpoint Security
CISA has added the bug to its KEV list, and Microsoft has observed limited exploitation, mainly associated with PoC testing.
Endpoint Security
Affecting the kernel’s authencesn cryptographic template, the vulnerability was introduced in 2017 and impacts all distributions.
Endpoint Security
A race condition in PackageKit allows unprivileged users to escalate privileges when installing packages.
Vulnerabilities
The flaws allow threat actors to obtain root privileges or bypass authentication via Telnet and gain shell access as root.
Endpoint Security
A team of researchers from the Graz University of Technology in Austria has revived page Linux page cache attacks.
Cybercrime
The Arch Linux Project has been targeted in a DDoS attack that disrupted its website, repository, and forums.
Malware & Threats
Israeli company Discover-Tech’s ads allow threat actors to fingerprint and track devices at scale and infect selected targets.
Data Protection
Data Breaches
CISO Conversations
Email Security
Artificial Intelligence
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: BofA adds 1,000 patching contractors, KGB RAT pairs data theft with jump scares, and Langflow...
Vulnerabilities
Artificial Intelligence
Vulnerabilities
Vulnerabilities