Plex2Shell: Rapid Exploitation of Chained Vulnerabilities in Plex Media Server
Threat actors exploit the Plex2Shell chain of four vulnerabilities in Plex Media Server to deploy crypto miners and reverse proxies within 24 hours of PoC re...
PHP2Shell: Critical RCE Vulnerabilities Demand Immediate Patching Strategy
PHP releases critical patches for two 9.2-rated RCE flaws known as PHP2Shell. No official workaround exists; immediate deployment is required for enterprise ...
Node2Shell: RCE in Node.js 24.22.0 via Brotli Decoder Exploitation
Imperva reveals Node2Shell (CVE-2026-111497), an RCE in Node.js 24.22.0 via crafted Brotli data, bypassing standard sandboxing on Linux arm64.
Amazon MadPot Honeypot Detects PHP2Shell Exploits Pre-Disclosure
Amazon's Threat Intelligence team detected PHP2Shell exploit attempts on MadPot honeypots four days before public disclosure, highlighting the value of activ...
SteamOS 3.9.5 Stabilizes Linux 7.2 and KDE Plasma 6.7 for Gaming Infrastructure
Valve releases SteamOS 3.9.5, the first stable 3.9 build, integrating Linux 7.2 kernel and KDE Plasma 6.7 to enhance gaming OS stability and performance.
Critical RCE Flaws in Linux KSMBD Expose Unauthenticated Attack Surface
Two critical RCE vulnerabilities in the Linux KSMBD module, rated 9.0 by Trend Micro, expose unauthenticated attack vectors with no mainline kernel fixes cur...
CVE-2026-106173: Unauthenticated RCE in Fortinet FortiSIEM via Path Traversal
Analysis of CVE-2026-106173, a critical path traversal flaw in Fortinet FortiSIEM enabling unauthenticated remote code execution with a CVSS score of 9.4.
Linux Kernel Shadow Stack Implementation Targets Hardware-Enforced Control Flow Integrity
Linux kernel development is advancing hardware-enforced shadow stack support to mitigate ROP attacks, leveraging Intel Tigerlake and AMD Zen 3 capabilities.
GitLab Unauthenticated RCE Patch Closes Decade-Old Vulnerability
GitLab releases critical patch for unauthenticated RCE affecting versions 7.0 through 19.2, superseding partial October 12 fixes.
Omarchy 4.5-RC1 Extends Arch Linux to AArch64 Snapdragon X and NVIDIA N1X Hardware
Omarchy 4.5-RC1 introduces initial AArch64 support for Snapdragon X and NVIDIA N1X laptops, expanding the Arch Linux-based distro beyond x86_64.
Linux 7.4 Merges Power Management Updates for AMD Zen 6 and Intel Panther Lake
Linux 7.4 integrates ACPI and thermal control updates, establishing foundational power management support for AMD Ryzen Zen 6 and Intel Rugged Panther Lake a...
Linux 7.4 Scheduler Merges: Short-Slice Latency and NVIDIA Vera SMT Handling
Linux 7.4 merges scheduler updates targeting short-slice task latency and specific SMT preferences for NVIDIA Vera hardware.
Intel Seeks FCC Waiver to Preserve Foreign-Made AGV Fleet
Intel requests an FCC waiver to purchase foreign-made robots, citing critical risks to the maintenance and operation of its internal AGV fleet.
Drupal Critical RCE Patches Address Universal Remote Code Execution Vector
Drupal releases critical patches for two remote code execution vulnerabilities affecting all supported CMS versions, requiring immediate infrastructure updates.
NGINX 1.30.6 and 1.31.7 Patch Five Vulnerabilities Including Long-Standing Memory Flaws
F5 releases NGINX 1.30.6 and 1.31.7 to fix five vulnerabilities, including three memory bugs and a TLS session forgery issue present since 2005.
Drupal Field UI Critical Flaw Enables Unauthenticated RCE via Contributed Modules
Drupal patches critical Field UI flaw in 11.4.10, 11.3.19, and 10.6.19, enabling unauthenticated RCE via specific contributed modules.
Supply Chain Attack on Arch Linux AUR Targets yay and paru Helpers
Threat actors compromised the Arch User Repository by uploading malicious packages impersonating yay and paru, executing malware with root privileges.
AOMEI Backupper Supply Chain Compromise: Update Server Tampering Analysis
Analysis of the May-July 2026 AOMEI Backupper compromise where attackers tampered with update servers to deploy backdoors during short maintenance windows.
Intel and AMD Converge on HDMI 2.1 FRL Support in Mainline Linux Drivers
Intel and AMD have both enabled HDMI 2.1 FRL support in mainline Linux drivers, standardizing high-bandwidth display output for Meteor Lake and AMDGPU archit...
NVIDIA Boro: Rust-Based Local AI CLI for Linux Kernel Development
NVIDIA develops Boro, a Rust-based CLI using local AI to enhance Linux kernel development efficiency through on-device inference.
Linus Torvalds Integrates Claude Code into Linux Kernel Development Workflow
Linus Torvalds confirms using Claude Code for Linux kernel feature development, signaling a shift in core infrastructure engineering practices.
NVIDIA and Red Hat Advance Rust-Based Nova Driver for Linux Kernel
NVIDIA and Red Hat engineers presented the Rust-based Nova driver stack at LPC2026, highlighting upstream integration and memory safety in the Linux kernel.
Kage: Google's In-Kernel Sandbox for Device Driver Isolation
Google engineers are testing Kage, a Linux kernel driver isolation mechanism using LLVM's Lightweight Fault Isolation within in-kernel sandboxes.
Intel Finalizes Xe Kernel Driver Updates for Linux 7.4 Battlemage Support
Intel submits final Xe kernel driver patches for Linux 7.4, delivering critical performance enhancements for Battlemage discrete GPUs.
Linux 7.4 Kernel Integrates AMDGPU IOMMU and SEV-SNP Optimizations
Linux 7.4 kernel introduces AMDGPU IOMMU optimizations for iGPUs and SEV-SNP virtual machine enhancements for AMD EPYC servers, improving performance and sec...
ClickFix Evolution: State-Sponsored Malware Bypassing Domain Blocking via On-Chain Infrastructure
CTM360 report details ClickFix's shift to a state-sponsored subscription model using on-chain infrastructure to bypass traditional domain blocking defenses.
LINBIT Submits Patch Series for DRBD 9 Mainline Linux Integration
LINBIT releases a new patch series to upstream DRBD 9 into the mainline Linux kernel, consolidating 15 years of distributed block device replication code.
GitHub Actions Supply Chain: Recurrence of Mini Shai-Hulud Compromise in actions-cool Repositories
Analysis of the re-disabling of actions-cool GitHub Actions repositories following a brief online period, linked to the May 2026 Mini Shai-Hulud supply chain...
Carbonato Botnet Exploits Exposed Docker Daemons to Deploy Hermes Agent AI Framework
Carbonato malware targets insecure Docker hosts, installing the Hermes Agent AI framework to hijack infrastructure via autonomous agents.
AMD Linux Driver Updates Enable GDDR7 Support and RDNA 5 Graphics IP
AMD updates Linux GPU drivers to support GDDR7 memory and additional graphics IP blocks, signaling active enablement work for RDNA 5 architectures.
Qualcomm Accelerates Adreno 850 Linux Integration with Early Kernel Patches
Qualcomm released initial Linux kernel patches for the Adreno 850 GPU in the Snapdragon 8 Elite Extreme Gen 6, signaling early open-source driver support.
Linux 7.3 Kernel Delivers 8% Geometric Mean Performance Gain on AMD EPYC
Phoronix benchmarks show Linux 7.3 kernel delivers an 8% geometric mean performance improvement on AMD EPYC servers compared to Linux 6.18 LTS.
Linux 7.3 Kernel Performance on AMD Strix Halo: Ubuntu 26.10 Benchmark Analysis
Analysis of Linux 7.3 kernel benchmarks on AMD Ryzen AI Max+ 395 hardware following Canonical's Ubuntu 26.10 update, highlighting performance shifts on Strix...
Linux Kernel Adds Sysfs Interface for AMD SEV Status Reporting
The Linux kernel introduces a new sysfs path to expose AMD Secure Encrypted Virtualization status, enhancing hypervisor observability and security auditing.
AMDGPU Driver Patches Introduce GDDR7 Video Memory Support in Linux Kernel
AMD submits Linux kernel patches to the AMDGPU driver, enabling hardware IP blocks and preparing for GDDR7 video memory integration.
Hacktron Chains SSO Flaw to Access OpenAI Internal Repository
Hacktron researchers demonstrate a multi-stage exploit chaining Discourse forum flaws and SSO tokens to gain write-access to an internal OpenAI code repository.
Mandiant’s Undercover Operation Disrupts TeamPCP Supply‑Chain Attacks
Mandiant undercover operation infiltrates the TeamPCP hacking collective, disrupting an active supply-chain campaign targeting critical developer tools.