ARMO researchers reveal how io_uring blinds Linux security tools like Falco, Tetragon, and Defender, exposing systems to undetected rootkit attacks.

RingReaper is a new remote access agent that exploits the Linux kernel's io_uring feature to stealthily bypass EDR solutions and control compromised systems with minimal detection.

A high-severity UAF (CVE-2025-40364) in Linux io_uring allows root RCE. Researchers demonstrated two kill chains: cheating the BPF verifier and using Dirty Pagetables for container escape. Patch immediately.

Occasionally, the most profound escalations in computational performance manifest almost as a whimsical irony. Jens Axboe, the esteemed

Technical details and a working PoC exploit are public for PinTheft, a critical Linux local privilege escalation bug. Block the RDS module now.