Vulnerability (CVE)
JFrog Security Research published a working exploit walkthrough on June 25 for DirtyClone, a Linux kernel privilege escalation tracked as CVE-2026-43503 (CVSS 8.8) that lets a local user gain root by corrupting file-backed memory through a cloned network...
This week's recap details DirtyClone (CVE-2026-43503), a new variant of the Dirty Frag Linux kernel flaw that lets local users gain root privileges via cloned packets, working on Debian, Ubuntu, and Fedora with default namespace configurations. JFrog said...
An operator installed the open-source Hermes AI assistant on a rented server, disabled its permission prompts using the documented YOLO mode, and pointed it at Thailand's Ministry of Finance, where it scanned hosts for root access, ran LinPEAS, and crawled...