Vulnerability (CVE)
A race condition in the Linux kernel's IPv4 TCP connection setup, tracked as CVE-2026-98432, lets an unauthenticated remote attacker read freed memory and potentially run commands as root; the kernel CVE team rates it 9.8 while Red Hat, Oracle and SUSE...
The FBI attributed the theft of more than $6 billion in virtual assets from Binance to a North Korean hacking group called TraderTraitor, with funds taken across 11 blockchains and 82% on Ethereum and Bitcoin. Of the $6.43 billion stolen, $2.85 billion has...
Red Hat shipped fixed kernels for RHEL 8, 9, and 10 on November 1 for CVE-2026-98432, a use-after-free in the Linux kernel's IPv4 TCP code that a remote, unauthenticated attacker can reach to achieve remote code execution, rated 9.8 by the kernel CVE team....
Threat actors are attempting to exploit CVE-2026-123158 (CVSS 8.1), codenamed SSHole, an OpenSSH flaw that can enable sign-ins to accounts with no password set on Linux systems running OpenSSH on the musl C library with PAM disabled, including Alpine...