Tag: Open Source OS
-
NetBSD 10.2 security fixes close a remote kernel bug in ipfilter
A NetBSD box at the edge of a network, filtering traffic with ipfilter, has been carrying a kernel flaw that someone outside the machine …
-
Radware finds web DDoS attacks doubled as the patch window turns negative
A new report out today from Radware Ltd. finds that web distributed denial-of-service attacks more than doubled over the first six months …
-
Locking your ssh-agent exposed local-only keys until OpenSSH 10.5
Lock your ssh-agent and it should sit there refusing to sign anything until you unlock it. In OpenSSH 10.4, locking it also switched off …
-
15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux Distros
Researchers at Nebula Security have disclosed GhostLock (CVE-2026-43499), a 15-year-old Linux kernel flaw that lets any logged-in user take …
-
Atomic Arch Campaign Hijacks 20+ Linux AUR Packages to Deliver Malware
Research firm Sonatype has discovered a malicious campaign targeting Linux systems in an entirely different way. Hackers are exploiting a …
-
KDE Linux security audit cuts kernel modules and unused packages
KDE Linux, the in-progress operating system from the KDE community, removed several kernel modules and software packages after a security …
-
IBM, Red Hat launch $5B Project Lightwell to boost open-source security
Red Hat, which became part of IBM through a 2019 acquisition, sells a popular Linux distribution called RHEL. Its code is publicly …
-
Meet Fractal, an OS made for microarchitecture reverse engineering
Probing how a CPU isolates user code from kernel code is messy work. Researchers patch kernels, write drivers, or boot stripped-down …
-
Linux Kernel Dirty Frag LPE Exploit Enables Root Access Across Major Distributions
Details have emerged about a new, unpatched local privilege escalation (LPE) vulnerability impacting the Linux kernel. Dubbed Dirty Frag, …
-
VirtualBox 7.2.8 is out with Linux kernel 7.0 support and crash fixes
Oracle shipped VirtualBox 7.2.8 on April 21, 2026, as a maintenance release covering crashes, networking problems, clipboard issues, and …
-
New ClickFix Attack Uses Node.js Malware via Tor to Steal Crypto
We’ve all done it- clicked a box to prove we’re not a robot without thinking twice. But according to the latest research from Netskope …
-
ImageMagick Zero-Day Enables RCE on Linux and WordPress Servers
A widespread security crisis has hit ImageMagick, the ubiquitous, highly popular software tool used by millions of websites to process and …
●●●