News Archives

Linux Kernel Zero-Day “Copy Fail” Gives Root Access Across Major Distributions Since 2017

A newly disclosed zero-day vulnerability in the Linux kernel could allow any unprivileged local user to gain root access on nearly all major Linux distributions released since 2017. Known as “Copy Fail” and tracked as CVE-2026-31431, the flaw was initially identified by Theori researcher Taeyang Lee and later developed into a complete exploit chain by the Xint Code Research Team with AI-assisted...

April 30, 2026

Chinese National Alleged Silk Typhoon Operator Sent to U.S. Over COVID‑19 Research Hacks

A Chinese national accused of ties to the Silk Typhoon hacking group has been extradited from Italy to the United States over alleged cyberattacks that targeted COVID‑19 research and exploited Microsoft Exchange vulnerabilities.

April 28, 2026

73 Fake VS Code Extensions on Open VSX Linked to GlassWorm v2 Information-Stealer

Security researchers have uncovered 73 cloned VS Code extensions on Open VSX that serve as loaders for the GlassWorm v2 information-stealing campaign. Six packages are confirmed malicious, while the rest act as sleeper implants that fetch a secondary VSIX from GitHub to infect multiple IDEs and exfiltrate data.

April 27, 2026

SentinelOne reveals pre-Stuxnet Lua malware fast16 built to corrupt engineering calculations

SentinelOne researchers found a Lua-based Windows sabotage framework called fast16 dating back to 2005. The implant targets high-precision engineering and simulation software, includes an embedded Lua 5.0 VM, a kernel driver fast16.sys, and an adaptable carrier svcmgmt.exe that can propagate across older Windows networks.

April 26, 2026

CISA Adds Four Actively Exploited Flaws to KEV, Sets May 2026 Federal Remediation Deadline

CISA has placed four actively exploited vulnerabilities affecting SimpleHelp, Samsung MagicINFO 9 Server, and D-Link DIR-823X routers onto its Known Exploited Vulnerabilities (KEV) list and set a May 8, 2026 remediation deadline for federal civilian agencies.

April 25, 2026

Researchers Uncover 26 FakeWallet Apps on Apple App Store Designed to Harvest Crypto Seed Phrases

Security researchers uncovered 26 malicious apps on Apple’s App Store that pose as legitimate cryptocurrency wallets to harvest seed phrases and private keys, while a separate Android malware framework called MiningDropper combines mining, data theft, and RAT capabilities.

April 24, 2026