Unknown threat actors have managed to compromise two legitimate MemTensor packages across the npm and Python Package Index (PyPI) repositories to push a platform-specific Go-based implant dubbed sckit designed for Windows, Linux, and macOS. According to reports from Aikido, SafeDep, Socket, and StepSecurity, the libraries in question below - @memtensor/memos-cloud-openclaw-plugin versions
A use-after-free in the Linux kernel's AF_UNIX socket subsystem can be used to escape a container and gain root on the host, security firm DepthFirst said in research published September 22. The flaw, tracked as CVE-2026-80521 (CVSS score: 7.8), was fixed upstream on August 6, but Ubuntu has not shipped the patch for its 26.04, 24.04, or 22.04 LTS releases. DepthFirst
Rabbit, the company behind the underwhelming R1 device, is rolling out a standalone AI agent that you don't need its hardware to use, as reported earlier by Wired. The startup says its new OS3 "agentic operating system" runs in the cloud but operates locally across Windows, Mac, and Linux devices. According to Rabbit, you can […]
The Verge•Emma Roth19h ago
Rabbit Inc. launches OS3, an agentic operating system replacing traditional apps with intent-driven chat across Windows, Mac, Linux, and its own
CryptoBriefing•Editorial Team22 Sept
Three decades after he wrote the original Windows Task Manager at Microsoft, Dave Plummer is back with a new iteration that works on macOS and Linux too.
A new flaw in the Linux kernel's KVM virtualization code for ARM64 processors can leave a freed piece of host memory exposed to a guest virtual machine on hosts with nested virtualization enabled. The bug, tracked as CVE-2026-89775, allows a guest to read and write host kernel memory, and the researcher who found it says it can be used to escape the guest and run code on the host machine.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are exploiting three Linux kernel vulnerabilities, one of them rated critical. [...]
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added three security flaws impacting the Linux kernel to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities are listed below - CVE-2025-39682 (CVSS score: 9.8) - An improper check for unusual or exceptional conditions vulnerability in the TLS receive path
A security researcher has released working exploit code for four Linux kernel flaws that each let a local user gain root, the highest level of access on a machine. Kernel maintainers have fixed all four over the past few weeks, so a system running an up-to-date kernel is not affected. But the exploit code is now public, and any machine still running an older kernel should be updated. The flaws
Valve has just released its Lepton tool as an open-source resource for bringing Android-native games to Linux and, in turn, Steam. more…
9to5Google•Ben Schoon18 Sept
An anticipated open source Linux mod for newer PS5 consoles might now be in jeopardy of never happening
Acronis has warned that a high-severity security flaw in its Backup plugin for cPanel and Web Host Manager (WHM) deployments has been exploited in the wild. The vulnerability, tracked as CVE-2026-87886 (CVSS score: 7.8), is described as a case of local privilege escalation due to insecure file permissions. It affects the following versions - Acronis Backup plugin for cPanel & WHM (Linux
Acronis disclosed a high-severity Linux local privilege escalation vulnerability in its backup plugin for cPanel, WebHost Manager (WHM), and Plesk that may be exploited in the wild. [...]
Cybersecurity researchers have disclosed details of a multi-platform campaign that uses the Message Queueing Telemetry Transport (MQTT) protocol as a communication channel to control Windows and Linux systems. The emerging malware family, codenamed BambooToken, is assessed to be active since at least February 2023 and put to use in attacks targeting organizations across Asia and South America.
A previously unknown malware framework called BambooToken, active since at least 2023, is now using the Message Queuing Telemetry Transport (MQTT) protocol to communicate with Windows and Linux systems. [...]
One of the biggest goal's of Valve's latest wave of hardware wasn't necessarily to move as many units as possible, but to expand the reach of SteamOS , and it does seem like it's succeeded. There are now two things that are really standing in Valve's way in its quest to dethrone Windows 11 as the de facto gaming OS: anti-cheat and Nvidia graphics drivers. And it looks like the latter is going to be solved soon. Ahead of Steam Frame's launch, I got a chance to sit down with Valve software developers Pierre-Loup Griffais and Jeff Leinbaugh , and I asked how Nvidia support was coming along. "Yeah, we're working on it hard," Griffais told me. "It's definitely at the top of our list. It's one of those things just like FEX and working on the Qualcomm driver, it just takes years." That doesn't sound like the driver support is right around the corner, but it does seem like the team has at least got Nvidia GPUs working on the Linux OS, albeit with limited performance. "We've done a few things like we've enabled the driver now in the main tree of SteamOS," Griffais told me, "so you can get things to light up on certain generations, but in terms of the performance difference between that driver and where the state of the art is, there's definitely still a little bit of a rift that we're trying to work on, but it's getting better day-to-day." There are certainly versions of Linux that already work with Nvidia drivers, but Team Green's GPUs are always a bit of a hassle on the open-source operating system. Instead, for most people, gaming on Linux works best with AMD graphics cards , as that company has supported drivers on the operating system for years. But for Valve's goal of getting as many people on SteamOS as possible, getting Nvidia's cards working at full performance is incredibly important. According to the latest Steam Hardware Survey , Nvidia GPUs still make up for 72.88% of Steam's player base. Getting Nvidia graphics cards up and running reliably on SteamOS would be a huge win for Valve. Hopefully Valve is able to get these graphics cards working as intended on SteamOS soon, and then, maybe, we can finally get anti-cheat support on the operating system. Because, after all, unlocking the operating system for another 72% of the playerbase could cause a huge spike in players migrating from Windows, and that'd be hard to ignore for the Call of Dutys of the world.
IGN•Jacqueline Thomas14 Sept
A flaw in FreeIPA lets a client that has never logged in create a Kerberos identity of its own choosing in the directory and end up in the administrators group, Red Hat says. FreeIPA is the system that determines who may log in across a Linux domain and maintains all identities in a 389 Directory Server database accessed via LDAP. The attack needs a second flaw in that database software. The
Nvidia's advancements in agentic AI hardware could redefine competitive dynamics, challenging existing CPU leaders and expanding AI's reach.
CryptoBriefing•Editorial Team25 Aug
Linux users gaining access to the ChatGPT desktop app could enhance productivity and innovation, bridging a gap in platform parity.
CryptoBriefing•Editorial Team11 Aug
Torvalds' support for AI tools in Linux development could enhance software reliability, impacting industries reliant on Linux infrastructure.
CryptoBriefing•Editorial Team16 Jul