Certainly had a lasting REACTion on me.

GhostLock (CVE-2026-43499) is a 15-year-old Linux kernel vulnerability that allows attackers to gain root privileges.

A Linux vulnerability that allows untrusted virtual machines to gain root access to host machines is one of two high-severity ...

A long-dormant virtualization vulnerability was discovered that can expose AMD and Intel hosts to compromised virtual ...

Linus Torvalds has announced the release of Linux 7.1 with a rewritten NTFS filesystem driver, battery reporting for Apple Silicon devices and a Steam Deck OLED audio fix. Other notable changes ...

A newly discovered local privilege escalation vulnerability dubbed 'CIFSwitch' in the Linux kernel could allow attackers to forge CIFS authentication key descriptions, abuse the kernel's key request ...

Last year I was looking into a post-mortem from an incident where a container breakout went completely undetected in a production Kubernetes cluster. The security team pulled up dashboards, scrolled ...

Major Linux distributions are rushing to fix two new vulnerabilities after the disclosure embargo was broken. The vulnerability, comprised of two chained issues in subsystems of the Linux kernel and ...

The actively exploited flaw builds on Dirty Pipe and Copy Fail techniques to overwrite page cache and gain full system control. A newly disclosed Linux privilege escalation issue dubbed “Dirty Frag” ...

A new Linux zero-day exploit, named Dirty Frag, allows local attackers to gain root privileges on most major Linux distributions with a single command. Security researcher Hyunwoo Kim, who disclosed ...

A new high-security zero-day vulnerability that has lurked in the Linux kernel since 2017 has just been found with the help of AI. This nine-year-old flaw, dubbed ‘Copy Fail’, was discovered by ...