Vulnerability

Linux CopyFail exploit threatens root access amid Ubuntu outage

01 maggio 2026 Riportato dall'IA Immagine generata dall'IA

A critical Linux vulnerability known as CopyFail, tracked as CVE-2026-31431, allows attackers to gain root access on systems running kernels since 2017. Publicly released exploit code has heightened risks for data centers and personal devices. Ubuntu's infrastructure has been offline for over a day due to a DDoS attack, hampering security communications.

OpenClaw patches severe vulnerability granting admin access

Developers of the popular AI tool OpenClaw released patches for three high-severity vulnerabilities, including one that allowed attackers with basic pairing privileges to silently gain full administrative control. The flaw, tracked as CVE-2026-33579 and rated up to 9.8 out of 10 in severity, has raised alarms among security experts. Thousands of exposed instances may have been compromised unknowingly.

BeyondTrust RCE flaw enables code execution without login

10 febbraio 2026 Riportato dall'IA

A critical remote code execution vulnerability has been discovered in multiple BeyondTrust products. The flaw, rated 9.9 out of 10 in severity, allows hackers to run code on affected systems without needing to log in. The issue was reported on February 10, 2026.

Linux

China-nexus groups and cybercriminals ramp up React2Shell exploits

Linux

React2Shell flaw exploited for PeerBlight malware on Linux

Tecnologia

Chinese hackers exploit React2Shell RCE flaw hours after disclosure

Security researchers find AI abuse method in ServiceNow platform

Security researchers have discovered a vulnerability in ServiceNow’s Now Assist platform. The flaw involves second-order prompt injection, which can transform AI into a malicious insider. This finding highlights potential risks in AI-assisted enterprise tools.

Google patches Chrome zero-day flaw exploited in the wild

19 novembre 2025 Riportato dall'IA

Google has addressed a critical zero-day vulnerability in Chrome's V8 engine that was being actively exploited. The flaw allowed arbitrary code execution, posing significant risks to users. The company provides guidance on staying safe.

CISA warns of exploited Linux kernel vulnerability in ransomware attacks

The US Cybersecurity and Infrastructure Security Agency has issued an urgent warning about CVE-2024-1086, a critical Linux kernel vulnerability actively exploited by hackers to deploy ransomware. This use-after-free flaw allows attackers to escalate privileges to root level on affected systems. Organizations worldwide are urged to patch immediately to mitigate the threat.

CISA confirms Linux kernel flaw exploited in ransomware attacks

31 ottobre 2025 Riportato dall'IA

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that a high-severity privilege escalation vulnerability in the Linux kernel, known as CVE-2024-1086, is now being exploited by ransomware gangs. The flaw, a use-after-free issue in the netfilter: nf_tables component, was introduced in February 2014 and patched in January 2024. It affects major Linux distributions including Debian, Ubuntu, Fedora, and Red Hat.

21 gennaio 2026 06:39