Vulnerability
Linux CopyFail exploit threatens root access amid Ubuntu outage
AI에 의해 보고됨 AI에 의해 생성된 이미지
A critical Linux vulnerability known as CopyFail, tracked as CVE-2026-31431, allows attackers to gain root access on systems running kernels since 2017. Publicly released exploit code has heightened risks for data centers and personal devices. Ubuntu's infrastructure has been offline for over a day due to a DDoS attack, hampering security communications.
Developers of the popular AI tool OpenClaw released patches for three high-severity vulnerabilities, including one that allowed attackers with basic pairing privileges to silently gain full administrative control. The flaw, tracked as CVE-2026-33579 and rated up to 9.8 out of 10 in severity, has raised alarms among security experts. Thousands of exposed instances may have been compromised unknowingly.
AI에 의해 보고됨
A critical remote code execution vulnerability has been discovered in multiple BeyondTrust products. The flaw, rated 9.9 out of 10 in severity, allows hackers to run code on affected systems without needing to log in. The issue was reported on February 10, 2026.
Security researchers have discovered a vulnerability in ServiceNow’s Now Assist platform. The flaw involves second-order prompt injection, which can transform AI into a malicious insider. This finding highlights potential risks in AI-assisted enterprise tools.
AI에 의해 보고됨
Google has addressed a critical zero-day vulnerability in Chrome's V8 engine that was being actively exploited. The flaw allowed arbitrary code execution, posing significant risks to users. The company provides guidance on staying safe.
The US Cybersecurity and Infrastructure Security Agency has issued an urgent warning about CVE-2024-1086, a critical Linux kernel vulnerability actively exploited by hackers to deploy ransomware. This use-after-free flaw allows attackers to escalate privileges to root level on affected systems. Organizations worldwide are urged to patch immediately to mitigate the threat.
AI에 의해 보고됨
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that a high-severity privilege escalation vulnerability in the Linux kernel, known as CVE-2024-1086, is now being exploited by ransomware gangs. The flaw, a use-after-free issue in the netfilter: nf_tables component, was introduced in February 2014 and patched in January 2024. It affects major Linux distributions including Debian, Ubuntu, Fedora, and Red Hat.
NVIDIA fixes critical flaw in NSIGHT Graphics for Linux
2026년 01월 08일 06시 04분Linux battery utility TLP patched after authentication bypass flaw
2025년 12월 17일 22시 29분Rust in Linux Kernel: First Vulnerability Emerges in Android Binder Driver
2025년 12월 16일 23시 12분React2Shell exploits continue with large-scale Linux backdoor deployments and cloud credential theft
2025년 12월 16일 11시 30분Silent Whisper vulnerability exposes WhatsApp users to secret tracking
2025년 11월 14일 06시 22분Critical Imunify360 AV vulnerability exposes 56 million websites to RCE
2025년 11월 07일 02시 51분Amazon discloses Linux WorkSpaces vulnerability in authentication tokens
2025년 11월 03일 14시 24분CISA alerts on Linux kernel flaw exploited by ransomware
2025년 11월 02일 21시 17분CISA warns of ransomware exploiting Linux kernel vulnerability
2025년 11월 01일 19시 33분Security flaw in WordPress add-on affects 10,000 sites