Linux Hit by Dirty Frag—Second Root-Level Zero-Day in Two Weeks
Dirty Frag chains two kernel vulnerabilities to grant root access on every major Linux distribution, with a deterministic exploit public and in-the-wild.
Archive
Category: Cybersecurity & Privacy
Data privacy, security vulnerabilities, surveillance technology, and cybersecurity threats
Linux ‘Dirty Frag’ Bypasses Copy Fail Fixes—And It’s Already Under Attack
Dirty Frag chains two Linux kernel flaws to gain root access, and existing Copy Fail mitigations do not stop it. Here is why the same bug…
Google Caught an AI-Built Zero-Day—And Says It’s Just the Beginning
Google Threat Intelligence Group found the first confirmed AI-developed zero-day exploit, disrupting a mass attack campaign before it launched. The implications are just starting to sink…
ShinyHunters Defaces 330 Canvas Portals After Second Instructure Breach
ShinyHunters breached Instructure again, defacing Canvas portals at 330 schools with extortion threats after stealing 280M records across 8,809 institutions.
Your AI Chatbot Shares Your Chats With Meta, TikTok—And You Probably Didn’t Know
Researchers at IMDEA Networks found that ChatGPT, Claude, Grok, and Perplexity leak conversation URLs and user identifiers to third-party trackers like Meta Pixel, TikTok, and Google…
Rhode Island Settles With Deloitte for $12M Over 2024 Ransomware
Rhode Island settled with Deloitte for $12M over the 2024 RIBridges ransomware breach that exposed 650,000 residents’ personal data.
ZachXBT Exposes US Law Firm’s $71M Grab of Stolen Lazarus Funds
ZachXBT accused Gerstein Harrow LLP of filing fraudulent claims over $71M in frozen KelpDAO funds linked to North Korea’s Lazarus Group, using a 2015…
April 2026 Crypto Hacks Hit Record $651M—North Korea Stole 76%
April 2026 set a crypto hack record with $651M in losses across 29 incidents. North Korea stole 76% of all crypto value extracted this year through…
Fidelity Fined $1.25M—Failed to Notify Minors in Data Breach
Massachusetts fined Fidelity $1.25M for failing to notify beneficiaries and minors affected by a data breach that exposed 77,000 customers’ personal.
22-Year-Old Dropout Just Reverse-Engineered Claude Mythos
Kye Gomez reverse-engineered Anthropic’s Claude Mythos in days, publishing OpenMythos as a public project that raises questions about AI moats and safety.