“Linux”

Researchers disclosed factory-installed backdoor in Zbtlink routers enabling unauthenticated root shells and persistent beaconing.

Arch Linux disables AUR package adoption after malicious takeovers and commits threatened wide user compromise via packages.

Chrome 151 fixes 370 vulnerabilities, including seven critical flaws in core browser components and rendering engines.

AI-assisted research discovered a Linux kernel use-after-free zero-day in net/sched enabling local root escalation.

Autonomous Hermes AI agent used for espionage against Thailand's Ministry of Finance, facilitating data access and stealthy reconnaissance.

Sandbox escape in Anthropic's Claude Cowork could allow agent VM breakout to read/write Mac files for ~500,000 users.

Eleven Microsoft-signed legacy UEFI shims can be abused to bypass Secure Boot, undermining platform integrity across devices.

Miasma v3 delivered via trojanized AsyncAPI packages creates persistent backdoors on developer machines and build servers.

Malicious jscrambler npm v8.14.0 runs a preinstall hook that drops a cross-platform Rust infostealer during package install.

Google's Chrome 150 fixes 27 vulnerabilities, including 13 use-after-free bugs and two critical flaws.

Januscape KVM vulnerability enables VM escape to execute code on hosts across Intel and AMD platforms.

Unprivileged users can escalate to root via a race condition in epoll, enabling OS-level compromise on Linux and Android systems.

Chrome 149 fixes 18 severe bugs, many use-after-free with potential remote code execution risks; ensure auto-update is enabled.

Chrome 149 fixes 18 severe bugs, many use-after-free with potential remote code execution risks; ensure auto-update is enabled.

Chrome 149 patches 28 flaws, including use-after-free issues; hardening Chrome remains a priority for enterprise endpoints.

Chrome emergency patch closes a zero-day actively exploited, preventing remote code execution in many deployments.

Massive Chrome fix patching numerous critical/high flaws; prioritize browser patching and user awareness.

Critical Linux kernel flaw being actively exploited; remediation and KEV tracking require immediate patching and monitoring.