A major Linux package scare just exposed how dangerous trust-based software ecosystems can get when abandoned packages fall ...

CVE-2026-23111 is a Linux kernel nf_tables use-after-free that lets an unprivileged local user escalate to root and escape a ...

Sygnia says Velvet Ant modified Linux PAM and OpenSSH components to steal credentials and maintain stealthy access since 2016 ...

Attackers hijacked over 1,500 packages in Arch Linux's AUR to plant a credential stealer. The official repos are safe, but the trust model took the hit.

Open-source code has become a malware vector. For example, by the closest of shaves, an open-source developer discovered that Jia Tan, a chief programmer and maintainer of the Linux xz data ...

WTF?! A well-known hacker has done the impossible. He got a stripped-down version of Linux to run on a 4-bit Intel chip from the early 1970s. Sure, it takes nearly five days for the kernel to boot, ...

Eset uncovered two previously undocumented Windows variants of the China-linked SprySocks backdoor tied to FishMonger and ...

Hacker conversation with Sri Lanka-born Isira Adithya, a successful bug bounty hunter driven by the desire to bend systems to ...