Security researcher Chinmohan Nayak has detailed a WhatsApp-to-host attack chain leveraging three now-patched vulnerabilities in the OpenClaw personal AI assistant. The flaws,…
A Linux kernel futex vulnerability, dubbed GhostLock, is used as the second stage of the IonStack exploit chain to escalate privileges to…
CVE-2026-53166 is a separate crash bug introduced by the initial fix for GhostLock (CVE-2026-43499). The cleanup was still being finalized in early…
The Linux kernel is the core operating system component. Versions 5.9 and later are affected by CVE-2026-64561 until fixed stable releases, including…
A critical use-after-free vulnerability in the Linux Kernel-based Virtual Machine (KVM) hypervisor, tracked as CVE-2026-53359 and named 'Januscape', allows a guest virtual…
A newly disclosed Linux kernel vulnerability, dubbed "Bad Epoll" and tracked as CVE-2026-46242, allows unprivileged local users to gain full root access…
CVE-2026-46242, named Bad Epoll, is a Linux kernel privilege escalation vulnerability similar to GhostLock. It allows an unprivileged user to gain root…
A sibling vulnerability to Bad Epoll in the same epoll code area, discovered by Anthropic's Mythos AI model. Fixed earlier in 2026.…
This week's cybersecurity landscape highlighted significant threats including a new Linux kernel flaw, AI-assisted malware, and active exploitation of critical vulnerabilities. The…
A critical vulnerability in the Linux kernel's traffic-control subsystem, tracked as CVE-2026-46331 and nicknamed 'pedit COW,' allows a local unprivileged user to…