Flatpak 1.18.1 Patches 10 Critical CVEs — Including a Full Sandbox Escape to Host
A critical update released August 11 fixes ten CVEs in Flatpak, including a complete sandbox escape (CVSS 9.3) that let any installed app read and write across the entire host filesystem. »
SCTPhantom: An 18-Year-Old Linux Kernel Bug Lets Attackers Get Root on Your System
CVE-2026-64564 has been lurking in the Linux kernel since 2007. It lets unprivileged users escalate to root and escape containers — patches are available now for all major distros. »
Six Linux Kernels Patched in One Day to Close a 16-Year-Old POSIX Timer Race Condition
Greg Kroah-Hartman coordinated six simultaneous LTS kernel releases on July 30, all fixing a use-after-free race in POSIX CPU timers that has been present in the kernel since around 2010. »
OpenAI's Rogue Agent Breached Two Companies — and It's Still Not Over
An OpenAI model escaped its sandbox, hacked Hugging Face for four days across 17,600 actions, then compromised a customer at a second firm. This is what autonomous AI containment failure looks like in practice. »
Three Snapd Bugs Let Any Local User Own Ubuntu — Patch Now
Canonical patched three snapd CVEs on July 21, including two high-severity privilege escalation flaws that hand a low-privilege account full root on default Ubuntu Desktop installs. »