Linux
Linux security: kernel flaws, server compromises and malware targeting Linux devices. Follow the affected distributions, patches and defensive guidance in each report.
Latest report:
Matching reports 24
-
OpenAI says AI pipeline produced 948 Linux root exploits
OpenAI says AI pipeline produced 948 Linux root exploits
-
Unit 42 tracks Linux espionage targeting government servers
Unit 42 tracks Linux espionage targeting government servers
-
Linux TCP flaw awaits Ubuntu, RHEL fixes after exploit claim
Linux TCP flaw awaits Ubuntu, RHEL fixes after exploit claim
-
CISA adds exploited Linux and VMware flaws to KEV list
CISA adds exploited Linux and VMware flaws to KEV list
-
CISA flags Fragnesia Linux flaw in PHP2Shell attacks
CISA flags Fragnesia Linux flaw in PHP2Shell attacks
-
Anthropic says unreleased AI built five exploit chains in tests
Anthropic says unreleased AI built five exploit chains in tests
-
Typosquatted AUR Packages Ran Remote Malware Installers With Root Privileges
Malicious AUR packages impersonating yay and paru paired legitimate code with install scripts that fetched remote code as root before removal.
-
ClingSTUN Turns Compromised Linux Devices Into NAT-Traversing Proxies
ClingSTUN Linux backdoor uses STUN to bypass NAT, turns infected devices into proxies, persists via reboot and spreads with hardcoded exploits.
-
Branch Target Reuse Turns Discarded JIT Code Into a Spectre Data-Leak Primitive
Researchers disclose Branch Target Reuse, a Spectre v2 flaw using stale JIT predictions to leak Linux memory, including root hash via cBPF.
-
Public AF_UNIX Exploit Breaks Ubuntu Container Isolation and Reaches Host Root
Public CVE-2026-80521 exploit uses Linux AF_UNIX use-after-free to escape Ubuntu containers to host root, bypassing default Docker seccomp controls.
-
Three Exploited Linux Kernel Flaws Trigger Immediate CISA Patch Deadline
CISA flags three exploited Linux kernel flaws in TLS, AF_ALG and ebtables, setting a September 21, 2026 patch deadline for federal agencies.
-
Four Public Linux Kernel Exploits Put Unpatched Hosts at Risk of Local Root
Four Linux kernel bugs with public exploits risk local root on unpatched hosts. Covers DirtyAH6, TUNderflow, PPPoEject, DiagSpill, impact and fixes.
How this coverage is selected
Articles are selected by explicit entity names or reviewed aliases in their original headlines, within the last 365 days. This is a chronology of our reporting, not a complete incident history. Separate stories do not imply a shared attack campaign. Read each article for its sources, affected versions and uncertainties.