logo

News related to
Linux

Microsoft has warned that Anthropic’s Claude Code GitHub Action could expose CI/CD workflow secrets when AI agents process untrusted GitHub content, raising fresh concerns over how autonomous coding tools operate inside software delivery pipelines. The issue centres on the way Claude Code Action handled file-reading capabilities inside GitHub Actions runners. While subprocess paths such as Bash were subject to environment scrubbing and sandboxing controls, the agent’s Read […]

Cybersecurity teams are warning that VECT 2.0, a ransomware strain promoted as a recovery-for-payment tool, can leave victims with files that even its operators may be unable to restore, widening concern over a campaign that behaves closer to a destructive wiper than conventional extortion malware. The latest technical findings show that VECT 2.0 suffers from multiple encryption and file-handling flaws, including a failure to preserve critical nonce […]

A China-linked cyber-espionage group tracked as VerdantBamboo has been tied to a BRICKSTORM malware operation targeting Linux-based virtual appliances, firewalls and enterprise infrastructure, sharpening concerns over the security of systems that often sit outside mainstream endpoint monitoring. The activity came to light after suspicious traffic was detected from a Linux-based virtual machine appliance during an incident response investigation. The inquiry found that attackers had used stolen administrative […]

Anthropic has expanded access to Claude Mythos Preview to about 200 organisations, widening a controlled cybersecurity programme designed to help governments, companies and critical software maintainers find severe vulnerabilities before attackers can exploit them. The San Francisco-based artificial intelligence company is adding around 150 organisations to Project Glasswing, its gated initiative for defensive use of a frontier model that has drawn intense attention from technology companies, banks, […]

NASA’s Jet Propulsion Laboratory has moved mission-critical IT infrastructure to Red Hat OpenShift Virtualization, strengthening the computing foundation behind deep space operations as robotic missions place rising demands on data handling, resilience and automation. The migration gives JPL a unified platform for running traditional virtual machines alongside containerised applications, allowing teams to modernise core workloads without forcing an abrupt break from legacy systems that support highly specialised […]

Linux Foundation has launched DNS-AID, an open source project designed to let AI agents discover, verify and connect with one another through the internet’s existing Domain Name System rather than through private registries, vendor directories or hardcoded configuration files. The project, initially developed at Infoblox, is being positioned as a neutral discovery layer for the emerging agentic web, where software agents are expected to act across websites, […]

Roundcube Webmail administrators are being pressed to install emergency updates after maintainers fixed a set of security flaws that could expose email systems to database manipulation, script injection, server-side request forgery and other attacks. Versions 1.6.16 and 1.7.1, released on 24 May 2026, address vulnerabilities affecting the 1.6 long-term support line and the 1.7 branch. The most closely watched issue is a pre-authentication SQL injection flaw in […]

Advertisements

China-linked cyber operators have targeted edge routers across Southeast Asia with a custom Linux implant, widening concern that network infrastructure has become a prime entry point for long-term espionage rather than a peripheral security risk. The campaign centres on Linux-based border and edge routers used by organisations to manage traffic entering and leaving enterprise networks. By compromising these devices, the attackers place themselves at a strategic point […]

Cybersecurity teams are reviewing exposed SonicWall firewall interfaces after a sharp burst of internet scanning activity hit SonicOS management endpoints, with almost 597,000 sessions observed on 12 May, the highest single-day total for the tracked activity over a 90-day period. The surge, recorded between 9 May and 18 May, stood out because the 12 May peak was about 46 times higher than the normal daily volume seen […]

Anthropic’s Claude Mythos Preview has identified more than 10,000 high- or critical-severity software vulnerabilities through Project Glasswing, intensifying debate over whether frontier AI is becoming a defensive breakthrough or a new accelerant for cyber risk. The findings, disclosed after the initiative’s first month of operation, mark a sharp escalation in AI-assisted vulnerability discovery across software used in operating systems, browsers, cloud platforms, open-source projects and financial infrastructure. […]

Hackers have compromised the Laravel-Lang open-source ecosystem, turning trusted PHP localisation packages into a vehicle for credential theft and remote code execution across developer machines and build systems. The attack, detected on May 22, targeted packages used by Laravel applications to manage translations, attributes and HTTP status messages. Security teams tracking the incident identified malicious activity across laravel-lang/lang, laravel-lang/http-statuses, laravel-lang/attributes and laravel-lang/actions, with more than 700 historical […]

Hosting providers using LiteSpeed’s user-end cPanel plugin are confronting an actively exploited privilege-escalation flaw that can allow any authenticated cPanel account to run scripts as root and take control of affected Linux servers. The vulnerability, tracked as CVE-2026-48172, has been rated at the maximum severity level by security trackers and affects LiteSpeed cPanel user-end plugin versions from 2.3 through 2.4.4. LiteSpeed patched the initial flaw in version […]

Hackers are exploiting unsupported F5 BIG-IP appliances to gain SSH access to enterprise Linux systems, turning trusted edge infrastructure into entry points for deeper attacks on identity systems and internal applications. A May 22 threat intelligence disclosure detailed a multi-stage intrusion that began with an exposed F5 BIG-IP load balancer and moved through Linux infrastructure, an internal Atlassian Confluence server and eventually Active Directory. The case underlines […]

Google has issued a Chrome security update after fixing multiple flaws that could allow attackers to execute code remotely, disrupt browser sessions, steal information, bypass restrictions or spoof content on affected systems. The update moves Chrome’s stable desktop channel to version 148.0.7778.178/179 for Windows and macOS, and 148.0.7778.178 for Linux. It is being rolled out globally through the browser’s automatic update mechanism, though users and administrators may […]

Security researchers uncovered 47 previously unknown vulnerabilities at Pwn2Own Berlin, underscoring persistent weaknesses in enterprise software, artificial intelligence tools, operating systems and virtualisation platforms even when products are fully patched. The three-day competition, held from May 14 to May 16 alongside OffensiveCon in Berlin, awarded $1,298,250 in cash prizes. The event placed some of the world’s most widely used corporate technologies under controlled attack, with researchers targeting […]

Users of JDownloader have been warned to check systems and delete suspicious installer files after attackers compromised the project’s official website and redirected selected Windows and Linux downloads to malware-laced files during a narrow but serious exposure window on May 6 and May 7, 2026. The breach affected users who downloaded the Windows “Download Alternative Installer” or the Linux shell installer from jdownloader. org during that period. […]

Gunra ransomware has expanded from a relatively narrow Windows-focused threat into a structured cybercrime franchise, raising concern among security teams as its operators shift from a Conti-derived locker to their own Ransomware-as-a-Service model. The group, first observed in April 2025, initially drew attention after attacks on five companies in South Korea. Its early malware showed similarities to Conti, the once-dominant ransomware operation whose leaked source code reshaped […]

Microsoft Edge, Windows 11 and AI infrastructure tools were breached on the opening day of Pwn2Own Berlin 2026, underscoring how quickly security researchers are finding weaknesses across browsers, operating systems and enterprise artificial intelligence platforms. The contest, staged alongside OffensiveCon in Berlin on 14 May, produced 24 unique zero-day vulnerabilities and $523,000 in rewards on its first day. The results placed DEVCORE at the top of the […]

Cloud security teams are facing a new credential-theft campaign after researchers identified PCPJack, a worm-like malware framework built to compromise exposed container, database and cloud-native systems while stripping away traces of rival TeamPCP tooling. The framework targets internet-facing Docker APIs, Kubernetes environments, Redis and MongoDB instances, Ray dashboards and vulnerable web applications. Its operators appear less interested in cryptomining, a familiar revenue stream in cloud intrusions, and […]

A newly documented Linux remote access trojan has sharpened concerns over software supply-chain security after researchers found it was built to steal developer and DevOps credentials that could be used to compromise trusted code repositories, cloud systems and package registries. The malware, known as Quasar Linux or QLNX, combines remote access functions with a rootkit, a Pluggable Authentication Module backdoor, keylogging and credential-harvesting features. Its design suggests […]

A new botnet campaign is turning poorly secured Jenkins servers into attack nodes aimed at online game infrastructure, including Valve Source Engine servers used for titles such as Counter-Strike and Team Fortress 2. The activity shows how a single exposed continuous integration system can be repurposed to generate UDP, TCP and application-layer floods against multiplayer platforms. Cybersecurity researchers observed the activity on March 18, 2026, after a […]

MCP’s rapid rise as the preferred bridge between AI assistants and external tools is running into a harder test inside production software teams: whether convenience justifies the security, reliability and governance risks now surfacing around the protocol. Model Context Protocol, introduced by Anthropic in November 2024 and later moved into broader open governance under the Linux Foundation’s Agentic AI Foundation, was designed to solve a real engineering […]

Google has issued an urgent Chrome security update after fixing 30 vulnerabilities, including four critical memory-related flaws that could expose users to attacks through compromised or malicious web pages. The update moves Chrome’s stable desktop channel to version 147.0.7727.137 or 147.0.7727.138, depending on platform, and is being rolled out across Windows, macOS and Linux. Users have been advised to restart the browser after the update is installed, […]

A malicious npm dependency slipped into an AI-assisted crypto trading project has exposed how automated coding tools can be manipulated into importing software that steals credentials, wallet data and source code. The campaign, named PromptMink by security researchers, centres on the npm package @validate-sdk/v2, which presents itself as a utility for hashing, validation, encoding, decoding and random generation. Its actual function is to harvest secrets from infected […]

VISHNU RAJA
RYO YAMADA
HITORI GOTOH
IKUYO KITA
Just in:
Assembly ruckus trial begins after 11 years // ADIA and partners establish $1.4 billion aviation venture // AI trust gap reveals distinct retail priorities: Divergent paths to consumer growth in Hong Kong and the GBA // SC to examine students’ exam plea today // DIP Holding targets Dh1.12 IPO price and $529m proceeds // Burying Head In “India Made Poverty Reduction” Data Is Dangerous // Middle East governments assess Iran war after US vote // ADIPEC leaders urge investment in global energy networks // Cyberport Venture & Capital Forum 2026 Grand Opening // Ta’ziz finalises $1.39bn funding for Ruwais industrial facilities // Democrats capture Senate majority with seven Republican seats // Anthropic to prohibit persistent abuse of Claude chatbot // CPI, CPM dispute portrayal of Vayalar uprising leaders // ADIA and partners establish $1.4 billion aviation venture // xCube Access Welcomes Entrust Capital Limited  Expanding Access to Professional Portfolio Management // BJP’s Aggressive Response Exposes Anxiety Over Opposition Unity // Vingroup And Legends Global Announce Strategic Partnership For VinFast – Trong Dong Stadium // Varsity jobs face quota questions // Vance attributes Republican midterm defeats to Iran conflict // ADIA and partners establish $1.4 billion aviation venture //