Vulnerability
Linux CopyFail exploit threatens root access amid Ubuntu outage
Сообщено ИИ Изображение, созданное ИИ
A critical Linux vulnerability known as CopyFail, tracked as CVE-2026-31431, allows attackers to gain root access on systems running kernels since 2017. Publicly released exploit code has heightened risks for data centers and personal devices. Ubuntu's infrastructure has been offline for over a day due to a DDoS attack, hampering security communications.
Developers of the popular AI tool OpenClaw released patches for three high-severity vulnerabilities, including one that allowed attackers with basic pairing privileges to silently gain full administrative control. The flaw, tracked as CVE-2026-33579 and rated up to 9.8 out of 10 in severity, has raised alarms among security experts. Thousands of exposed instances may have been compromised unknowingly.
Сообщено ИИ
A critical remote code execution vulnerability has been discovered in multiple BeyondTrust products. The flaw, rated 9.9 out of 10 in severity, allows hackers to run code on affected systems without needing to log in. The issue was reported on February 10, 2026.
Security researchers have discovered a vulnerability in ServiceNow’s Now Assist platform. The flaw involves second-order prompt injection, which can transform AI into a malicious insider. This finding highlights potential risks in AI-assisted enterprise tools.
Сообщено ИИ
Google has addressed a critical zero-day vulnerability in Chrome's V8 engine that was being actively exploited. The flaw allowed arbitrary code execution, posing significant risks to users. The company provides guidance on staying safe.
The US Cybersecurity and Infrastructure Security Agency has issued an urgent warning about CVE-2024-1086, a critical Linux kernel vulnerability actively exploited by hackers to deploy ransomware. This use-after-free flaw allows attackers to escalate privileges to root level on affected systems. Organizations worldwide are urged to patch immediately to mitigate the threat.
Сообщено ИИ
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that a high-severity privilege escalation vulnerability in the Linux kernel, known as CVE-2024-1086, is now being exploited by ransomware gangs. The flaw, a use-after-free issue in the netfilter: nf_tables component, was introduced in February 2014 and patched in January 2024. It affects major Linux distributions including Debian, Ubuntu, Fedora, and Red Hat.
NVIDIA fixes critical flaw in NSIGHT Graphics for Linux
08 января 2026, 06:04Linux battery utility TLP patched after authentication bypass flaw
17 декабря 2025, 22:29Rust in Linux Kernel: First Vulnerability Emerges in Android Binder Driver
16 декабря 2025, 23:12React2Shell exploits continue with large-scale Linux backdoor deployments and cloud credential theft
16 декабря 2025, 11:30Silent Whisper vulnerability exposes WhatsApp users to secret tracking
14 ноября 2025, 06:22Critical Imunify360 AV vulnerability exposes 56 million websites to RCE
07 ноября 2025, 02:51Amazon discloses Linux WorkSpaces vulnerability in authentication tokens
03 ноября 2025, 14:24CISA alerts on Linux kernel flaw exploited by ransomware
02 ноября 2025, 21:17CISA warns of ransomware exploiting Linux kernel vulnerability
01 ноября 2025, 19:33Security flaw in WordPress add-on affects 10,000 sites