Загрузка видео...

Не удалось загрузить видео

На главную

Dirty Frag: Unfixed Root Exploit Makes All Linux Systems Vulnerable Due to a broken embargo, this severe root exploit has no patches available for any Linux distribution. Ubuntu, RHEL, openSUSE... they're all vulnerable.

LundukeJournal's profile picture

The Lunduke Journal

36,047 subscribers

36,975 просмотров • 4 месяцев назад •via X (Twitter)

Наука и технологии
LIVE

Anya Rossi• Live Now

Private livecam show

Комментарии: 0

Нет доступных комментариев

Здесь появятся комментарии из оригинального поста

Похожие видео

‼️ Dirty Frag: A Universal Linux Local Privilege Escalation via Page-Cache Write Primitives GitHub: Patches: CVE-2026-43284: A page-cache write flaw in the Linux kernel's xfrm-ESP (IPsec) subsystem that lets a local user corrupt read-only file pages via in-place decryption on shared skb fragments CVE-2026-43500: A sibling page-cache write flaw in the Linux kernel's RxRPC subsystem (AFS protocol) where the same fast-path pattern enables arbitrary plaintext writes into attacker-chosen pages, escalating to root
0:22

‼️ Dirty Frag: A Universal Linux Local Privilege Escalation via Page-Cache Write Primitives GitHub: Patches: CVE-2026-43284: A page-cache write flaw in the Linux kernel's xfrm-ESP (IPsec) subsystem that lets a local user corrupt read-only file pages via in-place decryption on shared skb fragments CVE-2026-43500: A sibling page-cache write flaw in the Linux kernel's RxRPC subsystem (AFS protocol) where the same fast-path pattern enables arbitrary plaintext writes into attacker-chosen pages, escalating to root

Dark Web Informer

18,534 просмотров • 4 месяцев назад

The Holdovers has turned into one of my favorite films of the decade. This movie is all heart. Paul Giamatti’s performance is so honest & even more vulnerable, it’s impossible to not root for this guy. This is one of those movies I universally recommend to family & friends.
1:24

The Holdovers has turned into one of my favorite films of the decade. This movie is all heart. Paul Giamatti’s performance is so honest & even more vulnerable, it’s impossible to not root for this guy. This is one of those movies I universally recommend to family & friends.

Cinema Tweets

206,358 просмотров • 1 год назад

DirectorsConsole 1-Click Launcher Just published a 1-click launcher for this app. Great for enhancing prompts using ANY LLM provider (including local LLMs) and has storyboard canvas, etc. Works on ALL OS (Mac, Linux, Windows)
0:36

DirectorsConsole 1-Click Launcher Just published a 1-click launcher for this app. Great for enhancing prompts using ANY LLM provider (including local LLMs) and has storyboard canvas, etc. Works on ALL OS (Mac, Linux, Windows)

cocktail peanut

13,884 просмотров • 7 месяцев назад

Wisconsin Democrats refuse to even look for fraud. ❌ Vetoed a food stamp audit. ❌ Vetoed additional state auditors. I won't look the other way. As governor, I'll audit all of state government, root out fraud, protect taxpayers, and preserve these programs for the vulnerable.
0:26

Wisconsin Democrats refuse to even look for fraud. ❌ Vetoed a food stamp audit. ❌ Vetoed additional state auditors. I won't look the other way. As governor, I'll audit all of state government, root out fraud, protect taxpayers, and preserve these programs for the vulnerable.

Tom Tiffany

11,275 просмотров • 2 месяцев назад

South Carolina's justice system is broken. Our state has become a safe haven for pedophiles. Predators walk free, get slaps on the wrist, and exploit every gap in a system failing to protect the most vulnerable among us. We will not stop until it is fixed. Until our children are safe. Until justice is actually served.
0:32

South Carolina's justice system is broken. Our state has become a safe haven for pedophiles. Predators walk free, get slaps on the wrist, and exploit every gap in a system failing to protect the most vulnerable among us. We will not stop until it is fixed. Until our children are safe. Until justice is actually served.

Rep. Nancy Mace

19,316 просмотров • 3 месяцев назад

Containers are no longer a security boundary. Over the past few months, we’ve seen a crazy amount of Linux kernel vulnerabilities and exploits. This has forced us to rethink the security of infrastructure that relies heavily on the underlying kernel, especially containers. As models become more capable, the barrier to escaping a container has fallen so much that adversaries can now generate working kernel exploits in a single shot. CVE-2026-80521 is one such example. We discovered it using dfs-large1 from depthfirst and generated the exploit in one shot with GPT-5.6 Sol. The exploit still works on the latest Ubuntu 26.04 release because the fix has not yet been backported. Read our full writeup:
0:28

Containers are no longer a security boundary. Over the past few months, we’ve seen a crazy amount of Linux kernel vulnerabilities and exploits. This has forced us to rethink the security of infrastructure that relies heavily on the underlying kernel, especially containers. As models become more capable, the barrier to escaping a container has fallen so much that adversaries can now generate working kernel exploits in a single shot. CVE-2026-80521 is one such example. We discovered it using dfs-large1 from depthfirst and generated the exploit in one shot with GPT-5.6 Sol. The exploit still works on the latest Ubuntu 26.04 release because the fix has not yet been backported. Read our full writeup:

Zhenpeng (Leo) Lin

115,332 просмотров • 3 дней назад

This is big... Anthropic just announced a model so powerful they won't release it to the public out of fear over the damage it will cause 😨 Claude Mythos Preview found thousands of zero-day exploits in every major operating system and web browser... The numbers are hard to believe: > $50 to find a 27-year-old bug in OpenBSD, one of the most security-hardened operating systems ever built > Under $1,000 to find AND build a fully working remote code execution exploit on FreeBSD that grants unauthenticated root access from anywhere on the internet > Under $2,000 to chain together multiple Linux kernel vulnerabilities into a complete privilege escalation exploit For context: these are the kinds of findings that previously required elite security researchers working for weeks. Anthropic engineers with no formal security training asked Mythos to find exploits overnight. They woke up to working code the next morning. The results were so impressive Anthropic assembled Apple, Google, Microsoft, Amazon, NVIDIA, and seven other organizations into Project Glasswing: A $100M defensive coalition. They're not releasing this model publicly. Instead, they're racing to patch the world's infrastructure before models like this proliferate.
4:14

This is big... Anthropic just announced a model so powerful they won't release it to the public out of fear over the damage it will cause 😨 Claude Mythos Preview found thousands of zero-day exploits in every major operating system and web browser... The numbers are hard to believe: > $50 to find a 27-year-old bug in OpenBSD, one of the most security-hardened operating systems ever built > Under $1,000 to find AND build a fully working remote code execution exploit on FreeBSD that grants unauthenticated root access from anywhere on the internet > Under $2,000 to chain together multiple Linux kernel vulnerabilities into a complete privilege escalation exploit For context: these are the kinds of findings that previously required elite security researchers working for weeks. Anthropic engineers with no formal security training asked Mythos to find exploits overnight. They woke up to working code the next morning. The results were so impressive Anthropic assembled Apple, Google, Microsoft, Amazon, NVIDIA, and seven other organizations into Project Glasswing: A $100M defensive coalition. They're not releasing this model publicly. Instead, they're racing to patch the world's infrastructure before models like this proliferate.

Josh Kale

4,067,268 просмотров • 5 месяцев назад

someone built an AI RED TEAM that maps your entire attack surface as a knowledge graph, finds every vulnerability, then EXPLOITS them to root access AUTONOMOUSLY its called RedAmon, 9,000 templates. 17 node types, actual Metasploit shells, not reports, no pentesters needed 6 phases of autonomous recon: subdomain discovery, port scanning, http probing, resource enumeration, vulnerability scanning, MITRE mapping every finding stored in a Neo4j graph with 17 node types and 20+ relationship types. the AI reasons about the graph, finds attack paths, and runs actual Metasploit exploits, actual shells stress-tested with zero vulnerability data, zero exploit modules, one instruction find a CVE and exploit it, it went from empty database to root-level RCE in 20 steps, researched the exploit on the web, crafted a custom deserialization payload, debugged itself when the first attempt failed next try, the server responded with root access, the highest privilege level on any Linux system. full control over everything the target was running node-serialize 0.0.4, a package with a critical deserialization flaw (CVE-2017-5941, CVSS 9.8), the server takes your cookie, decodes it, and passes it straight into unserialize() which executes any code inside it, the AI figured this out on its own with no hints built on LangGraph + MCP tool servers for naabu, nuclei, curl, metasploit. hunts leaked secrets across GitHub repos, 40+ regex patterns for AWS keys, Stripe tokens, database creds
1:42

someone built an AI RED TEAM that maps your entire attack surface as a knowledge graph, finds every vulnerability, then EXPLOITS them to root access AUTONOMOUSLY its called RedAmon, 9,000 templates. 17 node types, actual Metasploit shells, not reports, no pentesters needed 6 phases of autonomous recon: subdomain discovery, port scanning, http probing, resource enumeration, vulnerability scanning, MITRE mapping every finding stored in a Neo4j graph with 17 node types and 20+ relationship types. the AI reasons about the graph, finds attack paths, and runs actual Metasploit exploits, actual shells stress-tested with zero vulnerability data, zero exploit modules, one instruction find a CVE and exploit it, it went from empty database to root-level RCE in 20 steps, researched the exploit on the web, crafted a custom deserialization payload, debugged itself when the first attempt failed next try, the server responded with root access, the highest privilege level on any Linux system. full control over everything the target was running node-serialize 0.0.4, a package with a critical deserialization flaw (CVE-2017-5941, CVSS 9.8), the server takes your cookie, decodes it, and passes it straight into unserialize() which executes any code inside it, the AI figured this out on its own with no hints built on LangGraph + MCP tool servers for naabu, nuclei, curl, metasploit. hunts leaked secrets across GitHub repos, 40+ regex patterns for AWS keys, Stripe tokens, database creds

chiefofautism

70,129 просмотров • 7 месяцев назад

Linux is the most widespread operating system, globally – but how is it built? Few people are better to answer this than Greg Kroah-Hartman (Greg K-H): Greg has been a Linux kernel maintainer for 25 years, and one of the 3 Linux Kernel Foundation Fellows (the other two are Linus Torvalds and Shuah Khan). Greg manages the Linux kernel’s stable releases, and is a maintainer of multiple kernel subsystems. We cover the inner workings of Linux kernel development, exploring everything from how changes get implemented to why its community-driven approach produces such reliable software. Greg shares insights about the kernel's unique trust model and makes a case for why engineers should contribute to open-source projects. Watch or listen: • YouTube: • Spotify: • Apple: Brought to you buy: • WorkOS — The modern identity platform for B2B SaaS. • Vanta — Automate compliance and simplify security with Vanta. Check out all of our current sponsor and their offerings: ---- One of the most surprising things I learned about Linux: although 4,000 developers contribute to the project from 500 companies per year, and has around 800 kernel maintainers, the project is run with email, git... and that's about it! No dedicated project managers, no regular meetings across the group. It's a truly fascinating and unique model (and only applies to the Linux kernel project: not to Linux distributions.) We go into more detail about this topic with Greg in the podcast as well.
0:59

Linux is the most widespread operating system, globally – but how is it built? Few people are better to answer this than Greg Kroah-Hartman (Greg K-H): Greg has been a Linux kernel maintainer for 25 years, and one of the 3 Linux Kernel Foundation Fellows (the other two are Linus Torvalds and Shuah Khan). Greg manages the Linux kernel’s stable releases, and is a maintainer of multiple kernel subsystems. We cover the inner workings of Linux kernel development, exploring everything from how changes get implemented to why its community-driven approach produces such reliable software. Greg shares insights about the kernel's unique trust model and makes a case for why engineers should contribute to open-source projects. Watch or listen: • YouTube: • Spotify: • Apple: Brought to you buy: • WorkOS — The modern identity platform for B2B SaaS. • Vanta — Automate compliance and simplify security with Vanta. Check out all of our current sponsor and their offerings: ---- One of the most surprising things I learned about Linux: although 4,000 developers contribute to the project from 500 companies per year, and has around 800 kernel maintainers, the project is run with email, git... and that's about it! No dedicated project managers, no regular meetings across the group. It's a truly fascinating and unique model (and only applies to the Linux kernel project: not to Linux distributions.) We go into more detail about this topic with Greg in the podcast as well.

Gergely Orosz

51,383 просмотров • 1 год назад

An evacuation was initiated in Belgorod due to heating problems, according to Russian media. 🔥🔥🔥 Those dirty, disgusting, brainwashed Russians are getting what they've been doing to the Ukrainians for the past four years. This involves vulnerable population groups. Furthermore, water is being drained from the heating systems of 455 residential buildings, 17 schools, 25 kindergartens, and other facilities. All that remained was a lone, drunken street musician.
0:25

An evacuation was initiated in Belgorod due to heating problems, according to Russian media. 🔥🔥🔥 Those dirty, disgusting, brainwashed Russians are getting what they've been doing to the Ukrainians for the past four years. This involves vulnerable population groups. Furthermore, water is being drained from the heating systems of 455 residential buildings, 17 schools, 25 kindergartens, and other facilities. All that remained was a lone, drunken street musician.

Jürgen Nauditt 🇩🇪🇺🇦

22,556 просмотров • 7 месяцев назад

Nebula Security is now backed by Y Combinator. We’re celebrating by bringing you the world’s first Android 17 root demo — “IonStack”, a url click can let attacker fully control your phone. This is not only an Android root demo. We’re bringing you a full chain browser-to-kernel exploit with two 0-day vulnerabilities affecting Firefox before v151.0.2 and all Linux distros in 15 years. "IonStack" demonstrates how bad actors can control your phone by sending a malicious URL, but good news, Nebula Security found it before attackers do. Both 0-day were found by our code scanning agent, VEGA, overshadowing any vulnerabilities found by Mythos or any scanner you name it. VEGA has demonstrated its extraordinary capability in finding critical bugs in the world’s most complicated software: operating systems and browsers. It can spot the same vulnerabilities in your codebase too. VEGA support full scan and incremental scan that can integrated into your CI/CD flow. We launched VEGA within YC companies and received overwhelmingly positive feedback. Now it is open to all enterprise customers in private beta. Book a demo with us:
1:00

Nebula Security is now backed by Y Combinator. We’re celebrating by bringing you the world’s first Android 17 root demo — “IonStack”, a url click can let attacker fully control your phone. This is not only an Android root demo. We’re bringing you a full chain browser-to-kernel exploit with two 0-day vulnerabilities affecting Firefox before v151.0.2 and all Linux distros in 15 years. "IonStack" demonstrates how bad actors can control your phone by sending a malicious URL, but good news, Nebula Security found it before attackers do. Both 0-day were found by our code scanning agent, VEGA, overshadowing any vulnerabilities found by Mythos or any scanner you name it. VEGA has demonstrated its extraordinary capability in finding critical bugs in the world’s most complicated software: operating systems and browsers. It can spot the same vulnerabilities in your codebase too. VEGA support full scan and incremental scan that can integrated into your CI/CD flow. We launched VEGA within YC companies and received overwhelmingly positive feedback. Now it is open to all enterprise customers in private beta. Book a demo with us:

NebuSec

225,805 просмотров • 3 месяцев назад

🚨The left has completely destroyed black society & it was all BY DESIGN 🚨 Teen Takeovers are sweeping through American cities & no one is addressing the root cause for a lasting solution against this madness!
1:46

🚨The left has completely destroyed black society & it was all BY DESIGN 🚨 Teen Takeovers are sweeping through American cities & no one is addressing the root cause for a lasting solution against this madness!

Melissa Tate

61,241 просмотров • 3 месяцев назад

Reflecting on the events this week, I am reminded of 1 Tim 6:10, “For the love of money is a root of all kinds of evil…” Corruption is destroying our communities and nation. Corruption, in any form, has a negative ripple effect on life everywhere!
2:20

Reflecting on the events this week, I am reminded of 1 Tim 6:10, “For the love of money is a root of all kinds of evil…” Corruption is destroying our communities and nation. Corruption, in any form, has a negative ripple effect on life everywhere!

Julius Rwotlonyo

60,523 просмотров • 2 лет назад

"As much as this hurts for our kids, how do you not have respect and root for a team that had to figure some things out too along the way and has battled injuries?" Lindsay Gottlieb has all the respect for Geno Auriemma and UConn 🤍
0:47

"As much as this hurts for our kids, how do you not have respect and root for a team that had to figure some things out too along the way and has battled injuries?" Lindsay Gottlieb has all the respect for Geno Auriemma and UConn 🤍

Yahoo Sports

91,353 просмотров • 1 год назад

Linus Charles wrote Linux at 21 from his mother's apartment in Helsinki and he just explained the philosophy that made him give it all away for free: "When I started Linux, I needed an operating system for my own use, and today you find Linux everywhere." "In small embedded devices, supercomputers, this technology allows you to expand into many different niches." "Working in an open source project where you work with hundreds, potentially thousands of people, makes the whole technology even more interesting." "One of the nice things about Linux and open source in general is that there's a lot of different things and everybody has something that you can give to the project." PS. We post daily content strictly for dedicated entrepreneurs, so if you’re one of them, make sure to follow us Entrepreneurs on X for more. Like and repost if you found value in this post:
0:59

Linus Charles wrote Linux at 21 from his mother's apartment in Helsinki and he just explained the philosophy that made him give it all away for free: "When I started Linux, I needed an operating system for my own use, and today you find Linux everywhere." "In small embedded devices, supercomputers, this technology allows you to expand into many different niches." "Working in an open source project where you work with hundreds, potentially thousands of people, makes the whole technology even more interesting." "One of the nice things about Linux and open source in general is that there's a lot of different things and everybody has something that you can give to the project." PS. We post daily content strictly for dedicated entrepreneurs, so if you’re one of them, make sure to follow us Entrepreneurs on X for more. Like and repost if you found value in this post:

Entrepreneurs on X

12,486 просмотров • 4 месяцев назад

It no longer rains but pours for South Africa. Likely to face African isolation due to violation of migrants human rights. The US has now imposed 12.5% tariff on goods, accusing South Africa of using forced labour . South Africa needs Africa. All these happenings make South Africa vulnerable to the external forces.
0:54

It no longer rains but pours for South Africa. Likely to face African isolation due to violation of migrants human rights. The US has now imposed 12.5% tariff on goods, accusing South Africa of using forced labour . South Africa needs Africa. All these happenings make South Africa vulnerable to the external forces.

Limukani Mathe Ph.D

73,034 просмотров • 2 месяцев назад

We just got a root shell on a Starlink terminal antenna! To our knowledge, this is the first full exploit of a "square dish" since Lennert's attack on the "circular" one in 2021. SpaceX security team has done an amazing job, leaving us no choice but a *hardware attack* to achieve this 👏 The demo below shows what's only possible on actual rooted hardware: reading fuse register contents, accessing hardware-encrypted "file_edr" data, and more.
0:23

We just got a root shell on a Starlink terminal antenna! To our knowledge, this is the first full exploit of a "square dish" since Lennert's attack on the "circular" one in 2021. SpaceX security team has done an amazing job, leaving us no choice but a *hardware attack* to achieve this 👏 The demo below shows what's only possible on actual rooted hardware: reading fuse register contents, accessing hardware-encrypted "file_edr" data, and more.

DARKNAVY

112,643 просмотров • 1 месяц назад