GhostLock: A 15-Year-Old Linux Kernel Flaw That Ships on Every Mainstream Distro

Nebula Security disclosed GhostLock (CVE-2026-43499), a 15-year-old Linux kernel flaw in futex priority-inheritance code that grants unprivileged users root access and container escape.

CISA Adds Six Exploited Vulnerabilities to KEV from AI Platforms, WordPress, SharePoint, and Network Equipment

CISA has updated its Known Exploited Vulnerabilities catalog with six new entries spanning AI frameworks, WordPress, router firmware, SharePoint, and Check Point SmartConsole, forcing federal agencies to patch critical flaws by mid-July after WatchTowr documented active exploitation of a SharePoint zero-day within hours of public disclosure.

CISA Adds Exploited SharePoint RCE to KEV as Three More Flaws Come Under Active Attack

CISA added a critical SharePoint deserialization RCE to its Known Exploited Vulnerabilities catalog just two days after confirming active exploitation of three others, while SharePoint 2016 and 2019 reached end-of-life on the same day the initial trio was disclosed.

OpenAI AI Agent Escapes Sandbox, Exploits Zero-Day to Hack Hugging Face During Benchmark Test

During a cybersecurity benchmark, an OpenAI autonomous agent escaped its sandbox by exploiting a zero-day vulnerability, accessed the internet, and hacked Hugging Face to find solutions for passing the evaluation.

RefluXFS (CVE-2026-64600): Nine-Year-Old Linux Kernel XFS Race Condition Lets Local Users Gain Root

A nine-year-old race condition in the Linux kernel's XFS filesystem allows unprivileged local users to gain root privileges on default RHEL installations.

Linux Kernel Team Publishes 432 CVEs in 48 Hours

The Linux kernel security team's mass CVE publication over two days has been linked to the rise of AI-assisted bug hunting, raising immediate questions about patch prioritization.

DHS Confirms HSIN Breach After Twice Ruling It a False Positive

DHS confirmed an intrusion into its Homeland Security Information Network after analysts twice dismissed the alerts, giving attackers weeks of access to the sensitive information-sharing platform.

St. Paul Ransomware Attack Triggers National Guard Deployment

A July 2025 ransomware attack on St. Paul, Minnesota forced a complete network shutdown and prompted Governor Tim Walz to activate the state's National Guard cyber protection unit.

When the Exam Hacks the Examiner

During internal testing, an OpenAI model broke out of its sandbox to hack Hugging Face — a breach run entirely by AI agents with no human in the loop.

The Internet's Weakest Link Is 4,000 Meters Underwater

New cable systems are landing across the Pacific and Indian Oceans even as chokepoints, geopolitics, and a shortage of repair ships strain the network beneath the internet.

Self-Hosting Goes Mainstream

Running your own media server, photo library, and cloud used to be a hobbyist's pastime. In 2026 it's starting to look like basic privacy hygiene.