Linux

Linux, Linux Basics, Linux Commands, Linux Servers, Linux Security, Linux Networking, Linux Distros, Ubuntu, Debian, CentOS, RHEL, Rocky Linux, Fedora, Arch Linux, Linux Performance, Linux Kernel, Linux Package Management, apt, yum, dnf, systemd, cron, chmod, chown, grep, awk, sed, Linux Troubleshooting, Linux firewall, iptables, nftables, tmux, screen

35 stories

Cybersecurity

Anthropic Exploit Reveals Critical Linux Kernel Flaw (CVE-2026-98432) That Grants Remote Root on MPTCP Servers

Security researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability—tracked as CVE-2026-98432—that can allow unauthenticated attackers to execute commands as root on servers running Multipath TCP (MPTCP) listeners. The flaw is a use-after-free in the kernel's IPv4 TCP networking code and has been scored 9.8/10 by the Linux kernel CVE team, although some vendors assess exploitation complexity differently. What the flaw is CVE-2026-98432 stems from a…

Saugata DattaOct 31, 20263 min read39

AI Agents and Frameworks

Linux TCP use-after-free (CVE-2026-98432): Anthropic’s exploit, vendor status, and what admins should do

A serious race-condition bug in the Linux kernel’s IPv4 TCP path, tracked as CVE-2026-98432, has drawn attention because the kernel team rated it 9.8/10 on the CVSS scale and because Anthropic says its AI model wrote an exploit that achieved root command execution against servers running a multipath TCP (MPTCP) listener. Vendors and distributions have diverging severity scores and staggered patch timelines, leaving many administrators deciding whether to wait for…

Saugata DattaOct 30, 20265 min read60

AI Agents and Frameworks

Claude-written exploit exposes critical Linux kernel race, patches and uncertain attack path

Anthropic’s Frontier Red Team disclosed a striking research result: an unreleased Claude model produced a working exploit for a critical Linux kernel vulnerability tracked as CVE-2026-98432. According to Anthropic, the proof-of-concept lets a remote attacker run commands as root without a login or user interaction. The company treated the work as a lab test and said the underlying bug has been fixed upstream and backported to maintained kernel branches—but distribution…

Saugata DattaOct 29, 20263 min read60

Cybersecurity

WordPress 7.1.4: Urgent Patch Fixes 22 Flaws, Including an Unauthenticated Update-Time RCE

WordPress pushed out version 7.1.4 on October 28, 2026, closing 22 security flaws and urging site owners to update immediately. The release addresses a range of issues from an unauthenticated remote code execution risk in the update process to multiple stored cross-site scripting and access-control problems. With fixes spanning recent and older branches, the update is a reminder that timely patching remains critical for every WordPress site. The unauthenticated update-time…

Saugata DattaOct 29, 20264 min read58

Azure

AI-Assisted PHP2Shell and Fragnesia Chain Roots 25 Servers, Penetrates U.S. Government-Affiliated Network

Cybersecurity researchers have detailed an AI-assisted campaign that combined PHP2Shell exploitation with a Linux kernel privilege escalation to gain root on 25 servers and pivot into an internal network tied to a U.S. government-affiliated environment. The activity was observed in late October 2026 and, according to the Israeli firm Dream, demonstrates a tailored, multi-stage intrusion that fused custom exploit development with automated reconnaissance at scale. Attack overview Dream attributes the…

Saugata DattaOct 29, 20264 min read72

Automation

Apple’s first touchscreen MacBook Pro arrives with PROLED XDR and M5 power

After years of resisting the idea, Apple has introduced a MacBook Pro with a full touchscreen, signaling a clear shift in the company’s laptop strategy. The new models come in 14-inch and 16-inch sizes, both equipped with a PROLED XDR Display and the option of M5 Pro or M5 Max chips. Apple says the displays reach 2,000 nits peak brightness for both HDR and SDR and offer a 10,000,000:1 contrast…

Saugata DattaOct 29, 20263 min read60

Linux

Windows 11 KB5127936: Microsoft removes a hidden app-launch slowdown

Microsoft has quietly been squeezing more speed out of Windows 11, and one of the latest tweaks targets a small but perceptible friction point that slows app launches. In the newest Release Preview update, KB5127936, Windows will stop spawning a temporary process when you open a link or launch Edge from the Taskbar or Start menu if the browser is already running. That unnecessary detour lengthens the launch path; removing…

Saugata DattaOct 26, 20263 min read69

Linux

Kali Linux 2026.3: Six New Tools, Kernel 7.1.5, KDE 6.7 and Major NetHunter Upgrades

Kali Linux 2026.3 arrived on October 26 as the third point release of 2026, bringing a broad set of updates across tools, the kernel, desktops, and the mobile-focused NetHunter platform. This release packages 126 updated packages, bumps the rolling-kernel from 6.19 to 7.1.5, and refreshes the image-building scripts while introducing six new penetration-testing utilities. For users and builders, the release mixes practical tool additions with infrastructure and documentation changes meant…

Saugata DattaOct 26, 20267 min read64

Cybersecurity

Firewall Fallout: How k0t Exploited Exposed Edge Devices to Harvest 70,000+ Credentials

Security teams woke up to a coordinated campaign that systematically targeted internet-facing firewalls and VPN appliances, resulting in the exposure of more than 70,000 credentials and LDAP dumps. Researchers from Group-IB and NyxLab attribute the activity to an operator tracked as k0t (also known as CryptoFeel, Member19, and QazWsxShop). The intrusions—detected largely between February and June 2026—rely less on high-value targeting and more on mass enumeration of exposed devices, leaving…

Saugata DattaOct 23, 20264 min read138

Cybersecurity

Accidental Leak Exposes Critical KSMBD Flaws in the Linux Kernel

Several unpatched Linux vulnerabilities were unintentionally posted to public mailing lists in October, exposing technical details before fixes reached production kernels. The reports, submitted by Trend Micro’s Zero Day Initiative (ZDI), included two critical flaws—each rated CVSS 9.0—that affect the kernel’s built-in KSMBD SMB file server and could enable remote code execution depending on configuration. Other reports described local privilege-escalation and information-disclosure risks across different kernel subsystems and related software.…

Saugata DattaOct 23, 20264 min read158

Cybersecurity

Debian Patches 1,313 Kernel Flaws: What Administrators Need to Know

Debian has just released a major kernel security update that aggregates fixes for 1,313 CVE entries, a headline figure that has drawn attention across the Linux community. The update — published as DSA-6528-1 and delivered for the Trixie stable release as Linux source package 6.12.111-1 — addresses a range of vulnerabilities that could, in different contexts, lead to privilege escalation, denial of service, or information leaks. While the scale of…

Saugata DattaOct 3, 20264 min read223

Cybersecurity

Cisco Issues Emergency Fix for Firewall Zero-Day Under Active Attack

Cisco has issued an urgent warning to organizations worldwide following the discovery of a zero-day vulnerability in its core firewall software. Tracked as CVE-2026-20349, the flaw is currently being exploited in the wild, allowing unauthenticated attackers to trigger a denial-of-service (DoS) condition. Because this vulnerability affects the perimeter of the network—the very place designed to keep threats out—security teams are being urged to prioritize patching immediately. The Nature of the…

Saugata DattaAug 13, 20263 min read286

Free Tools: IP, DNS, SSL