Tengu Botnet Reboots Compromised Linux Devices When Defenders Kill Its Process
A new Mirai-derived botnet called Tengu can use a compromised Linux device's hardware watchdog to trigger a reboot when defenders kill its…
Tag: Linux
CentOS Stream 9 Targeted by CVE-2026-53264 Exploit
The public exploit for CVE-2026-53264 was demonstrated on CentOS Stream 9, requiring specific kernel configurations and unprivileged user namespaces. Users should apply…
DevMan Ransomware: Technical Analysis and Capabilities
DevMan ransomware is a locker that targets Windows, ESXi, and Linux systems. It uses ChaCha20-Poly1305 encryption, fully encrypting files up to 3…
DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts
The operators of the DevMan ransomware-as-a-service (RaaS) scheme maintain a dedicated web platform that offers affiliates the ability to build payloads, oversee…
Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft’s Servers
A crafted SVG submitted to Bing's image search ran commands as NT AUTHORITYSYSTEM on Microsoft's production image-processing workers, and as root on…
Claude Cowork Sandbox Escape Flaw Exposes Mac Files to AI Agent
Cybersecurity researchers at Accomplish AI have disclosed a sandbox escape vulnerability in Anthropic's Claude Cowork, tracked as SharedRoot, that allows an AI…
Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs
A critical Linux kernel vulnerability, tracked as CVE-2026-64600 and named RefluXFS, has been disclosed by Qualys. The flaw, present in Linux kernels…
Fedora Server
A Linux distribution by the Fedora Project, affected by CVE-2026-64600. Default installations with reflink-enabled XFS are vulnerable.
Amazon Linux
A Linux distribution by Amazon Web Services, affected by CVE-2026-64600. Default installations with reflink-enabled XFS are vulnerable.
Ubuntu snap-confine Flaw CVE-2026-8933 Gives Local Users Root on Default Desktop Installs
Cybersecurity researchers have disclosed a high-severity local privilege escalation (LPE) vulnerability in snap-confine, tracked as CVE-2026-8933 (CVSS score: 7.8), that allows an…