New research by Intezer reveals the OrBit Linux rootkit is actually a fork of the open-source Medusa kit, actively weaponized across multiple APTs.

Most intrusion alerts start with failures.

Learn how attackers exploit an unsecured GRUB bootloader to bypass Linux login passwords — and how to stop them with PBKDF2 password…

Every dashboard was green.

There was a time when green dashboards made me feel comfortable.

NVIDIA released updates fixing severe NVIDIA TensorRT-LLM vulnerabilities and Isaac Launchable flaws. Patch your active systems today.

Security researchers recently discovered a dangerous security flaw in a popular open-source application. Specifically, developers recently uncovered a severe Atril single-click RCE vulnerability t…

Secure your servers against a major Plesk privilege escalation flaw. Learn how the latest CVE-2026-44962 patch protects Linux infrastructure.

A serious sshfs command execution exploit threat is unveiled. Protect your Linux clients now that public exploit code released online.

There’s a moment every cybersecurity student remembers: the first time they boot into Kali Linux. The terminal opens, the dragon logo…

TL;DR Researchers have published full details and working exploit code for CVE-2026-31694. This Linux kernel FUSE bug lets a local user overflow the page cache and seize root. It reaches recent ke…

TL;DR The GNU Guix project disclosed four GNU Guix vulnerabilities in early July 2026. Three affect the guix substitute helper, and one affects guix pull and guix time-machine. Together, they allo…

TL;DR X.Org shipped fixes for two memory-safety flaws in the X.Org Server and Xwayland. The more severe one, CVE-2026-56000, is a use-after-free rated CVSS 9.0. The second, CVE-2026-55999, is a he…

A hands-on walkthrough covering reconnaissance, service enumeration, vulnerability analysis, and privilege escalation in one of VulnHub’s…

TL;DR The Exim team published advisory EXIM-Security-2026-06-22.1 on July 22, 2026. It describes an Exim vulnerability that lets a local attacker read files outside the mail spool. The bug can lea…

The Fedora Linux project plans to enable shadow stack protection by default in its upcoming version 46. The change targets 64-bit x86 systems and aims to strengthen their security posture. This fe…

TL;DR NVIDIA recently published an urgent software update for NVIDIA Dynamo for Linux. This update patches several security issues, including a critical NVIDIA Dynamo flaw. The most severe vulnera…

TL;DR Security researchers have detailed a critical Linux suTrap local privilege escalation flaw. This interactive su TIOCSTI bug allows an unprivileged user to gain root access during an active s…

A curious incident has come to light. According to an official Mozilla Security Blog post, the GPG signing key used to authenticate Firefox for Linux and Thunderbird for Linux packages has been ro…