Linux
Researchers Disclose "GhostLock," a 15-Year-Old Linux Flaw Enabling Root and Container Escape
Another long-standing Linux finding lands with defender-team implications across distributions and container platforms.
Policy & Government
France's ANSSI to Stop Certifying Non-Quantum-Safe Encryption
A sharp French policy signal on quantum-safe encryption — international PQC migration accelerates this week.
Artificial Intelligence (AI)
Adversa AI Research — “GuardFall” Shell Injection Bypasses 10 of 11 Open-Source AI Coding Agents
An AI-coding-agent bypass with cross-vendor implications — defender posture-review work for organizations running open-source agents this week.
Artificial Intelligence (AI)
"BioShocking" Research Tricks AI Browsers Into Leaking User Credentials
A multi-vendor AI-browser research disclosure — defender posture-review work for organizations deploying agentic browsers this week.
Mobile Security
Researchers Disclose AirDrop and Quick Share Flaws Affecting Five Billion Devices
Two researchers mapped the proximity-sharing protocols behind AirDrop and Quick Share and found six flaws spanning five billion Apple and Android devices, with vendor fixes only partly shipped.
Linux
Researchers Publish "pedit COW" Linux Disclosure (CVE-2026-46331)
Researchers detailed pedit COW, CVE-2026-46331, a Linux kernel privilege-escalation flaw in the act_pedit traffic-control action — a second Linux disclosure in the same weekend as DirtyClone, with distribution patch tracking continuing.
Linux
Researchers Publish "DirtyClone" Linux Kernel Disclosure (CVE-2026-43503)
Another Linux kernel research disclosure — distribution patch tracking work for the week. JFrog published a working exploit for DirtyClone, a local privilege escalation to root in the kernel networking stack, fixed upstream in late May.
Vulnerabilities
Researchers Disclose macOS Flaw Allowing Standard Users to Disable EDR and MDM
A macOS endpoint-protection bypass with defender posture-review implications. XM Cyber researchers showed that a standard, non-admin user can silently unload EDR and MDM agents on macOS, abusing legitimate XPC behavior rather than a single patchable bug.
Vulnerabilities
Researchers Publish Squid Proxy Bug "Squidbleed" (CVE-2026-47729) After 29 Years
A 29-year-old proxy bug surfaces — defender review for Squid Proxy deployments. Researchers at Calif.io disclosed Squidbleed, a heap over-read that can leak another user's cleartext HTTP request on a shared Squid proxy.
Vulnerabilities
Researchers Publish "usbliter8" BootROM Exploit Affecting Apple A12 and A13 Chips
Another silicon-level finding lands with lifecycle implications — defenders issuing affected iPhones have device-policy work to plan.
Vulnerabilities
Apple Patches Beats Studio Buds Microphone Vulnerability (CVE-2025-20701)
Apple's firmware update for the Beats Studio Buds closes a high-severity Bluetooth flaw that let a nearby attacker listen through the microphone of an unpaired unit — verification work for organizations issuing the device.
Supply Chain Attack
GitHub Announces NPM 12 Default-Behavior Change for Install Scripts
The default flips — npm 12 changes the install-script behavior that has driven years of supply-chain reform debate.