Search
6 stories found
A CVSS 9.8 use-after-free in the kernel's IPv4 TCP handshake code affects kernels back to 4.4, and Anthropic says one of its models wrote a remote-root exploit for it. Red Hat shipped kernels on November 1; Ubuntu users are still waiting. Here's the status by distro and what to do in the meantime.
Anomaly's open-source Hex lets you hold a key, talk, and have text pasted into any app without sending audio to the cloud. Version 3.0 brings one app to Mac, Windows and Linux, and it was one of GitHub's fastest-climbing repos on November 2.
CISA has added CVE-2026-97229 to its exploited-vulnerabilities list after an attack on Alpine Linux's GitLab server. The flaw lives in Ruby's regex engine, so self-built and custom GitLab images can stay vulnerable even on a "fixed" version number.
Two critical flaws in PHP's default upload-progress feature allow unauthenticated remote code execution. Here are the fixed versions, a one-line check, and the config change that buys you time.
An open-source scanner compares your system against ~12,400 published indicators from 25 sources — without sending anything anywhere. What it can find, what it can't, and how to run it in five minutes.
A misconfigured DNS resolver, chained zero-days and a covert channel built from CPU cache timing — OpenAI's own red team found the paths. Here's what happened and why it matters beyond OpenAI.
