Security researcher Chinmohan Nayak has detailed a WhatsApp-to-host attack chain leveraging three now-patched vulnerabilities in the OpenClaw personal AI assistant. The flaws,…
CVE-2026-43499, named GhostLock, is a use-after-free vulnerability in the Linux kernel's futex priority inheritance mechanism, present since 2011. It allows any logged-in…
CVE-2026-53166 is a separate crash bug introduced by the initial fix for GhostLock (CVE-2026-43499). The cleanup was still being finalized in early…
A new Linux kernel vulnerability, DirtyClone, allows local users to gain root privileges through cloned packets.
A critical use-after-free vulnerability in the Linux Kernel-based Virtual Machine (KVM) hypervisor, tracked as CVE-2026-53359 and named 'Januscape', allows a guest virtual…
A newly disclosed Linux kernel vulnerability, dubbed "Bad Epoll" and tracked as CVE-2026-46242, allows unprivileged local users to gain full root access…
CVE-2026-46242, named Bad Epoll, is a Linux kernel privilege escalation vulnerability similar to GhostLock. It allows an unprivileged user to gain root…
A sibling vulnerability to Bad Epoll in the same epoll code area, discovered by Anthropic's Mythos AI model. Fixed earlier in 2026.…
A vulnerability in the kernel's FUSE filesystem code, discovered by AI-driven research firm Bynario. Allows local users with FUSE access to corrupt…
This week's cybersecurity landscape highlighted significant threats including a new Linux kernel flaw, AI-assisted malware, and active exploitation of critical vulnerabilities. The…