Artificial intelligence has helped uncover one of the most significant Linux kernel security flaws in recent years. Security ...

Plus: The Pentagon is training amateurs to become part of its hacker army, a Flock license plate reader error led to cops surrounding a car reviewer, and more.

An exposed WP-SHELLSTORM server revealed tools, logs, cloud credentials, and thousands of webshells used in a large website ...

Hackers are actively exploiting a critical vulnerability in the official Docker image for the Gitea self-hosted Git service ...

An open WP-SHELLSTORM server exposed tools, logs, and target lists naming 1.4 million sites, with researchers validating ...

GhostLock (CVE-2026-43499) is a 15-year-old Linux kernel vulnerability that allows attackers to gain root privileges.

A China-linked threat cluster has been exploiting vulnerable Roundcube servers at U.S. and Canadian universities to steal ...

A Linux vulnerability that allows untrusted virtual machines to gain root access to host machines is one of two high-severity ...

CVE-2026-43503, named DirtyClone, is the fourth member of a Linux kernel exploit family found in under two months. It is a DirtyClone privilege escalation that lets any local user reach root on ...

A publicly documented exploit now shows any local user on an unpatched Linux system how to gain root access — and do it without leaving a single line in the kernel log or on-disk evidence for ...

A flaw in the Linux kernel's traffic-control subsystem can let a local unprivileged user gain root on affected systems. The exploit never touches the file on disk. It poisons the cached copy of a ...

European cybersecurity research firm Paradigm Shift has disclosed details of a new BootROM exploit that affects millions of iPhones and cannot be patched with a software update. Dubbed Usbliter8, the ...