Four Linux Network Flaws Can Turn a Local User Into Root, and One Evades the Easy Mitigation
DirtyAH6, TUNderflow, PPPoEject and DiagSpill reach different kernel subsystems. One mitigation does not cover all four.
Rob Nidschelm
Tech tinkerer who spends too much time with home labs and Docker stacks. Into AI, Roman & Medieval history, and all things sci-fi. Avid traveller, reader and writer, with a passion for good food.
Microsoft Fixed Eighteen Cloud Flaws Before Customers Could Touch Them
The fixes were real, but there was no update button for customers. The affected layer sat inside Microsoft's cloud control plane.
Your Private Screenshots Were One Server Bug Away From Public View
Gyazo stored far more than pictures. Attackers obtained user records, OCR text, location data and information used to construct image URLs.
Hackers Reached Colorado Water Controls Without Stopping the Pumps
The attackers reached operational settings. Operators disabled remote access, while officials said water delivery and public safety were not affected.
A Departed Employee’s Token Quietly Opened 170 Private Security Repositories
The employee had left. The token had not. GitHub traced the access path back to the wider TanStack supply-chain incident.
How Plugin4Shell Made Reviewed AI Coding Plugins Run Different Code
Four coding agents trusted a commit hash but did not verify the code that Git actually placed in the working tree.
The Fake GitHub Download Arrived With a Microsoft-Signed EDR Killer
The repositories copied more than 40 brands. The payload then used a trusted driver to remove the tools most likely to stop it.
The Login Screen on Your Security Manager Could Hand an Attacker Root
The systems that manage firewalls and collect their logs have a network-reachable stack overflow before authentication.
Attackers Found a Workflow Engine That Would Run Their Code as Root
The workflow definition became the payload. Exposed Conductor servers could accept an unauthenticated task and run it with the service's operating-system privileges.
CISA Gave Three Linux Kernel Bugs a Three-Day Deadline
The catalogue entries share a deadline, not necessarily an attacker or exploit chain. Each Linux kernel flaw needs its own exposure check.