Related Threat Clusters
-
Chinese Hackers Exploit Microsoft 365 for 18 Months; Oracle PeopleSoft Vulnerability Targeted
Chinese hackers infiltrated Microsoft 365 environments, maintaining access for 18 months before detection. The attack exploited vulnerabilities to harvest sensitive data from various organizations. Simultaneously, a new…
12 articles · Updated June 13, 2026 -
Critical Vulnerabilities in dnsmasq Expose Systems to DoS and Code Execution Risks
Multiple vulnerabilities have been identified in dnsmasq, an open-source DNS and DHCP server, affecting various Linux distributions, including Ubuntu. The vulnerabilities, tracked as CVE-2026-2291, CVE-2026-4890,…
37 articles · Updated May 13, 2026 -
Critical Linux Vulnerability 'Copy Fail' Grants Root Access Across Major Distros
A newly disclosed vulnerability in the Linux kernel, tracked as CVE-2026-31431 and named 'Copy Fail', allows unprivileged local users to gain root access on virtually all major Linux distributions released since 2017.…
227 articles · Updated April 30, 2026 -
Critical GhostLock Vulnerability Allows Root Access on Linux Systems
A severe Linux kernel vulnerability, CVE-2026-43499, known as GhostLock, has been publicly disclosed by Nebula Security's VEGA team. This flaw, present since 2011, allows any logged-in user to gain full root control of…
14 articles · Updated July 8, 2026 -
New DirtyDecrypt Linux Flaw Exploit Released, Patching Urged
A local privilege escalation vulnerability in the Linux kernel's rxgk module, named DirtyDecrypt, has been discovered and a proof-of-concept exploit is now available. The V12 security team reported this flaw on May 9,…
8 articles · Updated May 18, 2026 -
AI-Driven Exploit for Linux Kernel Zero-Day CVE-2026-53264 Uncovered
A zero-day vulnerability in the Linux kernel, tracked as CVE-2026-53264, has been disclosed, allowing local privilege escalation (LPE) through a use-after-free condition in the net/sched subsystem. Discovered by Lee Jia…
6 articles · Updated July 28, 2026 -
New PinTheft Vulnerability Exposes Arch Linux to Root Escalation Attacks
A newly discovered Linux privilege escalation vulnerability, named PinTheft, allows local attackers to gain root access on Arch Linux systems by exploiting a flaw in the RDS subsystem. The vulnerability, identified by…
5 articles · Updated May 20, 2026 -
Over 400 Arch Linux AUR Packages Compromised in Supply Chain Attack
A significant supply chain attack has compromised over 400 packages in the Arch User Repository (AUR), with attackers injecting malicious build scripts that deploy credential-stealing malware and rootkits. The campaign,…
26 articles · Updated June 12, 2026 -
Critical ImageMagick Vulnerability Exposes Millions to Remote Code Execution
A critical vulnerability in ImageMagick, identified by Octagon Networks, allows remote code execution (RCE) through specially crafted image files. This 'magic byte shift' vulnerability affects major Linux distributions,…
3 articles · Updated April 1, 2026 -
Arch Linux Freezes AUR Adoption Amid Malware Surge
Arch Linux has temporarily disabled package adoption in the Arch User Repository (AUR) following a surge in malicious package takeovers. The decision was announced by contributor Robin Candau on July 30, 2026. Attackers…
7 articles · Updated August 2, 2026
Recent Intelligence Reports
- Arch Linux halts package adoptions after malware hijacking wave — Itnews.Au · August 2, 2026
- Arch Linux Disables Aur Package Adoption To Stop Malware Flood — www.bleepingcomputer.com · August 2, 2026
- Arch Linux Freezes AUR Adoption: Tor — Techtimes · August 1, 2026
- Arch Linux freezes AUR package adoptions after malware wave — Feeds.4Sysops · August 1, 2026
- AI-Assisted Bug Hunt Uncovers Linux Kernel 0-Day in net/sched — Infosecurity-Magazine · July 28, 2026
- Public Exploit Turns 15-Year Linux Kernel Flaw Into 5-Second Root Attack — Techtimes · July 8, 2026
- 400+ Arch Linux AUR Pakete in Lieferkettenangriff kompromittiert — Borncity · June 13, 2026
- Arch Linux's AUR Sees More Than 400 Packages Compromised With Malware — Lxer · June 13, 2026