OpenAI details AI pipeline that reproduced 948 Linux privilege escalation bugs
ResearchBrief2 min read
The company says a prototype found and analyzed 2,308 candidate Linux kernel findings and reproduced 1,724 of them, at $1.2 million in API costs.
Linux
Thursday 5 November 2026
Wednesday 4 November 2026
Red Hat ships fixes for 9.8-rated Linux TCP use-after-free; Ubuntu's sit in testing
VulnerabilitiesCVE-2026-98432CVSS 9.82 min read
Fixed kernels for Red Hat Enterprise Linux 8, 9 and 10 are out. Ubuntu's fixes for its three newest long-term-support releases are still in the opt-in testing channel, with no date for a regular update.
Tuesday 3 November 2026
Node-RED auth bypass in Siemens IoT2050 exploited in the wild
VulnerabilitiesCVE-2026-58115CVSS 10.02 min read
VulnCheck says attackers are scanning for Node-RED instances without adminAuth and firing a single HTTP request to plant bots and webshells.
NCSC chief warns of 'unprecedented rise' in UK cyber incidents
Threat intelBrief2 min read
Richard Horne's annual report warning points at unpatched, long-tolerated vulnerabilities rather than novel AI attacks, and sets out a £70 million vulnerability centre and £60 million for Cyber Shield.
Monday 2 November 2026
SysGoRAT research examines espionage against government Linux systems
Threat intelBrief1 min read
Unit 42 describes persistent access, credential theft and suspected AI-assisted scripting in a campaign against government infrastructure.
Saturday 31 October 2026
TeamViewer Flaw Could Let a Malicious Host Take Over a Technician's Machine
VulnerabilitiesCVE-2026-111585CVSS 8.82 min read
Security firm Remedio says an integer overflow in TeamViewer's screen processing can be triggered from inside an ordinary session, letting a hostile host crash or run code on the viewer's system. TeamViewer has patched it.
Friday 30 October 2026
Critical Linux kernel TCP flaw draws remote root exploit demo
VulnerabilitiesCVE-2026-98432CVSS 9.82 min read
Anthropic researchers built an exploit for a use-after-free in IPv4 TCP handling that reached root on a server with an MPTCP listener. Patches are landing, but several major distros were still listed as vulnerable on October 30.
PHP2Shell exploitation roots Palo Alto firewalls, but WordPress sites hold up
VulnerabilitiesExploitedCVE-2026-109618CVSS 9.22 min read
A China-linked group chained the PHP flaws with a kernel privilege-escalation bug to get root on PAN-OS devices, while mass scanning against WordPress has yet to produce confirmed compromises.
Alpine Linux says GitLab exploit attempt failed, rebuilds instance
VulnerabilitiesExploitedCVE-2026-97229CVSS 10.02 min read
A newly registered account sent crafted CI configurations to Alpine's GitLab instance on October 20 and 21. The attack failed, but the project rebuilt the server and reset all passwords.
Thursday 29 October 2026
CISA warns Fragnesia Linux flaw is being chained with PHP2Shell bugs
VulnerabilitiesExploitedCVE-2026-109618CVSS 9.21 min read
The agency told federal agencies to patch the kernel privilege escalation bug, which researchers say was used alongside two critical PHP flaws to root servers.
Wednesday 28 October 2026
Linux kernel flaw can be chained with two PHP bugs to plant webshells, NVD entry says
VulnerabilitiesExploitedCVE-2026-109618CVSS 9.22 min read
A missing variable initialization in the Linux kernel could let attackers alter page-cache-backed data, and the NVD entry says it can be chained with two PHP vulnerabilities to implant webshells and run commands as root.
Brotli decoder flaw, dubbed Node2Shell, drives patches across Microsoft, Node.js and Python
VulnerabilitiesExploitedCVE-2026-111497CVSS 9.22 min read
An out-of-bounds write in Google's Brotli decoder affects Node.js, .NET, PowerShell and Python packages, and researchers say it can lead to code execution.