“Linux”

Google patched 10 Chrome vulnerabilities including a DOM memory corruption reported via Anthropic's Claude, one critical flaw fixed.

CVE-2026-99999 (PwnEscape) allows a guest to escape VM isolation and take control of hosts; patch guidance required.

Next.js emergency update fixes two critical unauthenticated RCEs in React Server Components and librsvg/Sharp SVG processing.

Certificate validation flaws in Zoom clients could allow attackers to access sensitive notes and data without authentication via network control.

A pre-auth AnyDesk Linux vulnerability gives root access; proof-of-concept exploit published, update to 8.0.3 recommended.

MALFEX campaign published eight malicious NPM packages since 2023, accumulating ~40,000 downloads and supply-chain compromise risk.

Ransomware impacted University of Illinois Chicago College of Medicine, with data theft reported from servers.

Linux backdoors target telecom/network appliances in Korea and Taiwan, impersonating email services to evade detection.

Fortra released patches for BoKS vulnerabilities that could allow authentication bypass, shell execution, and memory corruption.

Debian released a large kernel/security update addressing 1,313 CVEs that risk privilege escalation, DoS, and information leaks.

Vercel confirmed a KVM zero-day allowing VM escape and host root access, raising sandbox containment concerns for untrusted workloads.

A North Korea-linked campaign hides control-server locations inside Ethereum transfers to keep malware connected to operators.

Compromised MemTensor packages on npm/PyPI delivered sckit Go-based implant across Windows, Linux, and macOS.

CVE-2026-89775 in Linux KVM/arm64 allows VM escape to host on nested virtualization configurations, risking multi-tenant clouds.

Working public exploits released for four Linux kernel local-root flaws—patch promptly; unpatched systems remain at risk.

CISA added multiple Linux kernel CVEs (including CVE-2025-39682, CVE-2026-53266, CVE-2025-39964) to KEV for immediate remediation.

Google released Chrome 153 fixing 42 vulnerabilities including three critical bugs; update browsers to reduce exposure.

Microsoft issued out-of-band emergency fixes after Patch Tuesday caused RDS issues, addressing service failures and related regressions.