News related to
Linux

A custom ransomware family linked to the Toy Ghouls cybercrime group is targeting Windows, Linux and VMware ESXi systems, giving its operators the ability to disrupt entire corporate networks through a single attack campaign. GenieLocker has been active since March 2026 and has mainly struck organisations in Russia, with manufacturing companies bearing much of the activity. Construction, financial services, retail and technology businesses have also encountered the […]

Google has released Chrome 151 with fixes for 370 security vulnerabilities, including seven critical flaws capable of exposing users and organisations to serious attacks. The update began rolling out on July 29 for Windows, macOS and Linux. Chrome 151.0.7922.71 and 151.0.7922.72 are being distributed to Windows and Mac devices, while Linux systems are receiving version 151.0.7922.71. The Android release, carrying the same core security fixes, is being […]

Apple is facing a federal lawsuit from three investors who allege that a fraudulent cryptocurrency wallet distributed through its App Store enabled scammers to steal Bitcoin worth about $1.8 million. The complaint, filed on July 24 in the US District Court for the Northern District of California, accuses Apple of negligence, misrepresentation and failing to adequately review or monitor applications offered through its tightly controlled digital marketplace. […]

A Linux kernel vulnerability capable of giving a local attacker root access has been publicly detailed after artificial intelligence helped a security researcher identify and weaponise a race condition in the operating system’s network traffic-control subsystem. The flaw, tracked as CVE-2026-53264, affects the kernel’s net/sched component and carries a severity score of 7.8. It is a use-after-free vulnerability that can allow an ordinary user with access to […]

Nvidia has assembled nearly 40 technology companies to develop open tools for artificial intelligence security, but the absence of OpenAI, Google, Anthropic and Amazon has highlighted widening divisions over how the industry should protect increasingly autonomous systems. The Open Secure AI Alliance, announced on July 27, brings together major software, cloud, cybersecurity and infrastructure groups. Its inaugural partners include Microsoft, IBM, Adobe, Cisco, CrowdStrike, Cloudflare, Dell Technologies, […]

Ransomware attacks on universities rose during the first half of 2026 as a fast-expanding cybercrime operation called The Gentlemen intensified its focus on higher education institutions across several continents. Higher education attacks increased by more than 8% compared with the second half of 2025, even as ransomware incidents across the broader education sector fell by 13%. Researchers recorded 104 attacks on schools, colleges and universities worldwide between […]

Hackers have hijacked GitHub Actions workflows across compromised repositories to create a distributed attack network targeting cPanel and WebHost Manager servers, exposing credentials, databases and cloud accounts. The campaign uses GitHub-hosted computing systems as disposable machines for scanning the internet, exploiting vulnerable hosting platforms and transmitting stolen information to attacker-controlled infrastructure. Security researchers linked the activity to malicious workflow files planted in thousands of repositories. The investigation […]

Advertisements

Bazzite is emerging as a flexible gaming operating system that seeks to bring a console-style experience to desktop computers, handhelds, tablets and home theatre systems without stripping away the functions of a conventional PC. Built on Fedora Atomic Desktops, the open-source platform arrives with Steam installed and includes gaming-focused drivers, software and system adjustments. Its developers aim to reduce the configuration work traditionally associated with Linux gaming […]

A China-linked cyber-espionage group has expanded its use of hijacked devices to mask attacks on telecommunications infrastructure, deploying three newly documented malware implants across Windows, Linux and network edge systems. The activity, tracked as UAT-9244, has targeted critical telecoms infrastructure in South America since 2024. The campaign shows how state-aligned operators are moving beyond direct server compromise to build distributed relay networks that help them scan, brute-force […]

Parrot OS 7.3 has been released with a clear emphasis on faster execution, cleaner images and smoother daily use, marking a refinement-led update for the security-focused Linux distribution rather than a broad expansion of its tool catalogue. The update rebuilds every edition of the operating system and targets two areas that matter to security researchers, penetration testers, developers and privacy-focused users: better performance on modern hardware and […]

Valve has acknowledged that its new Steam Machine will cost more than it wanted, putting pressure on the company’s attempt to bring PC gaming deeper into the living room at a price well above mainstream consoles. The Bellevue-based games and hardware group has priced the 512GB Steam Machine at $1,049, while the 2TB version costs $1,349. Bundles with the new Steam Controller lift the prices to $1,128 […]

OpenAI has expanded its Daybreak cybersecurity programme with Patch the Planet, a new initiative aimed at helping open-source maintainers find, validate and fix software flaws before attackers can exploit them. The project, built with security research firm Trail of Bits and supported by HackerOne, Calif, researchers and maintainers, shifts the focus from simply discovering vulnerabilities to landing tested patches in widely used software. It comes as artificial […]

postmarketOS has released version 26.06, a six-monthly update that strengthens one of the most active Linux-based alternatives for mobile devices and extends its testing reach to 254 devices, including phones, tablets, Chromebooks and single-board computers. The release, named Alpen Avocado, shipped on 21 June and is built on Alpine Linux 3.24. It brings GNOME 50, KDE Plasma Mobile 6.6.5, Phosh 0.55.0, systemd 261, Plymouth boot animation support, […]

AryStinger, a newly analysed botnet family, has compromised more than 4,000 outdated routers and begun turning ageing network devices into covert infrastructure for reconnaissance, intranet scanning and traffic tunnelling. The campaign highlights a shift in botnet use from crude denial-of-service activity towards stealthier pre-intrusion work, where hijacked routers and network-attached storage appliances act as relay points between attackers and intended targets. Security analysts say the malware helps […]

Security teams have been urged to update the UEFI Forbidden Signature Database after a newly disclosed weakness showed that trusted vendor-signed boot applications can be misused to bypass Secure Boot and run unauthorised code before an operating system starts. The issue, tracked as VU#457458 and made public on June 18, 2026, affects multiple UEFI applications signed by hardware and firmware vendors. The weakness does not rely on […]

NVIDIA has patched three high-severity vulnerabilities in its NeMo Framework, including a Linux command-injection flaw that could let low-privileged attackers run code, escalate access, alter data or expose information on affected AI development systems. The June security update covers NeMo Framework versions from 0.0 through 2.7.2, with users advised to move to version 2.7.3 or later. The flaws are tracked as CVE-2026-24155, CVE-2026-24252 and CVE-2026-24228, each carrying […]

Arabian Post Staff -Dubai Valve’s SteamOS has moved into Intel Arc territory after beta updates widened support beyond AMD-powered handhelds, allowing MSI’s Claw 8 AI+ to run the gaming operating system while community testing showed a desktop Arc B580 card booting into the same ecosystem. The shift is an important step for Linux gaming hardware, though it remains far from a polished Windows replacement for Intel users. […]

A China-nexus hacking group maintained covert access to a segregated critical-infrastructure network for nearly a decade by tampering with Linux authentication tools that administrators rely on to control access. The operation, tracked as Velvet Ant and labelled Operation Highland by investigators, exposed a high-risk tactic in cyber espionage: rather than relying only on conventional malware, the intruders replaced trusted OpenSSH binaries and Pluggable Authentication Modules with altered […]

The Linux Foundation has launched OpenSharing, a vendor-neutral protocol aimed at standardising how companies exchange AI agents, models and data across platforms, marking a fresh attempt to curb fragmentation as enterprises move from pilot projects to production-scale agentic AI. The project, contributed by Databricks and now hosted under Linux Foundation governance, extends the Delta Sharing protocol beyond structured data into AI-era assets such as agent skills, machine-learning […]

Russian military-linked hackers tracked as APT28 have shifted cyber operations into compromised internet routers, using the MooBot botnet and vulnerable edge devices to harvest credentials, route traffic and host malicious tools across dispersed global infrastructure. The technique marks an operational evolution for the group, also known as Fancy Bear, Sofacy, Forest Blizzard and Pawn Storm. Long associated with intelligence collection against NATO governments, Ukraine, defence contractors, political […]

ReactOS has crossed a symbolic gaming milestone after the open-source Windows-compatible operating system ran Valve’s original Half-Life in playable, in-game form on real hardware, marking a notable advance for a project that has spent decades trying to reproduce Windows NT behaviour without using Microsoft code. The demonstration showed the Windows version of Half-Life running on a Dell OptiPlex desktop fitted with an Intel Core i5-2400 processor and […]

Software developers across close to 100 organisations have been targeted by a likely North Korea-linked hacking operation that used fake recruitment and code-review tasks to steal cryptocurrency, browser credentials and wallet data. The campaign, tracked by security researchers as UNK_DeadDrop, unfolded over April and May and reached targets in technology, finance, cryptocurrency, education, business services and other sectors. More than 250 phishing emails were sent during a […]

Microsoft has warned that Anthropic’s Claude Code GitHub Action could expose CI/CD workflow secrets when AI agents process untrusted GitHub content, raising fresh concerns over how autonomous coding tools operate inside software delivery pipelines. The issue centres on the way Claude Code Action handled file-reading capabilities inside GitHub Actions runners. While subprocess paths such as Bash were subject to environment scrubbing and sandboxing controls, the agent’s Read […]

Cybersecurity teams are warning that VECT 2.0, a ransomware strain promoted as a recovery-for-payment tool, can leave victims with files that even its operators may be unable to restore, widening concern over a campaign that behaves closer to a destructive wiper than conventional extortion malware. The latest technical findings show that VECT 2.0 suffers from multiple encryption and file-handling flaws, including a failure to preserve critical nonce […]

VISHNU RAJA
RYO YAMADA
HITORI GOTOH
IKUYO KITA