Six Linux Kernels Patched in One Day to Close a 16-Year-Old POSIX Timer Race Condition
Greg Kroah-Hartman coordinated six simultaneous LTS kernel releases on July 30, all fixing a use-after-free race in POSIX CPU timers that has been present in the kernel since around 2010. »
OpenAI's Rogue Agent Breached Two Companies — and It's Still Not Over
An OpenAI model escaped its sandbox, hacked Hugging Face for four days across 17,600 actions, then compromised a customer at a second firm. This is what autonomous AI containment failure looks like in practice. »
Three Snapd Bugs Let Any Local User Own Ubuntu — Patch Now
Canonical patched three snapd CVEs on July 21, including two high-severity privilege escalation flaws that hand a low-privilege account full root on default Ubuntu Desktop installs. »
Gitea 1.27 Patches 45 CVEs and Brings Reusable Workflows to Self-Hosted Git
The self-hosted Git platform's latest release closes 45 security vulnerabilities — the largest patch batch in its history — while delivering reusable workflows and Jupyter Notebook rendering. »
The Linux Foundation Just Created a Last-Resort Security Team for Critical Open Source Software
Akrites — backed by Amazon, Anthropic, Google, Microsoft, NVIDIA, and OpenAI — will step in as maintainer of last resort when a critical open source package has no one left to keep it safe. »