OpenAI’s GPT-5.6 Sol was not the problem during a researcher’s ripgrep investigation—the separate cybersecurity classifier was. After repeated refusals, Daniel Fox Franke switched to Z’ai GLM 5.2 and Moonshot AI’s Kimi K3, which helped trace the recurring segmentation fault to a suspected Linux kernel bug.

Source

A publicly released exploit for Linux kernel CVE-2026-53264 can escalate a local user to root on compatible CentOS Stream 9 systems. AI helped identify the traffic-control race and refine the exploit, but unprivileged namespaces, specific kernel options, and a matching kernel build are still required.

Source

Découvrez Portmaster, le pare-feu applicatif open source pour Windows et Linux : installation, règles par application, blocage des traceurs et DNS chiffré.

Le post Portmaster : le pare-feu applicatif open source pour Windows et Linux a été publié sur IT-Connect.

RefluXFS (CVE-2026-64600) est une faille du système de fichiers XFS qui permet à un utilisateur local de devenir root sur RHEL. Ce qu'il faut savoir.

Le post RefluXFS : cette faille dans XFS donne un accès root sur RHEL, CentOS et AlmaLinux a été publié sur IT-Connect.

Debian has formally opened a General Resolution debate that could ban AI-assisted contributions across much of the project, rather than merely issuing guidance. The resolution, submitted July 22, 2026, covers Debian source packages, packaging work, Debian-maintained software such as lintian, web resources, documentation, translations, and official communications. That scope makes the decision relevant to anyone administering Debian systems because it could affect how packages and maintenance changes are produced and reviewed.

Source

NetworkManager 1.58 introduces significant improvements for IPv6-only environments, including native 464XLAT support to enable legacy IPv4 applications to function via a customer-side translator. The release also implements RFC 8925, allowing clients to signal an IPv6-only preference to networks, and ensures that IPv6 interfaces using prefix delegation via DHCPv6 are recognized as healthy without requiring a non-temporary address. These updates aim to mitigate the ongoing pressure of IPv4 address exhaustion in modern cloud and mobile network deployments.

Source

The RefluXFS vulnerability, tracked as CVE-2026-64600, is a serious race-condition flaw residing in the Linux kernel’s XFS filesystem copy-on-write path. Affecting kernel versions 4.11 and later, the bug allows an unprivileged local user to overwrite protected system files by exploiting a timing window during concurrent direct I/O operations. Because the manipulation occurs at the block layer, it effectively bypasses common security controls, including SELinux, kernel lockdown, and standard memory protections.

Source

La CVE-2026-8933 est une faille dans snap-confine qui donne à un utilisateur local un accès root sur Ubuntu. Voici comment se protéger.

Le post Accès root : une faille dans snap-confine expose les machines Ubuntu a été publié sur IT-Connect.

A high-severity local privilege escalation vulnerability, tracked as CVE-2026-8933, has been identified in the snap-confine component of Ubuntu’s snapd package. This flaw affects default installations of Ubuntu Desktop versions 24.04, 25.10, and 26.04 that utilize the set-capabilities model. The vulnerability stems from a race condition introduced during a recent security-hardening update, which inadvertently allows unprivileged users to gain root access.

Source

The Linux kernel team recently published 432 Common Vulnerabilities and Exposures (CVEs) over a two-day period, creating a significant challenge for system administrators. This sudden influx of security reports has fueled speculation that AI-assisted bug hunting is accelerating the discovery of kernel flaws. Maintainers have noted that the sheer volume of these reports is becoming increasingly difficult to manage manually.

Source

Hardware-encrypted SSDs sold under the TCG Opal2 standard cannot be assumed safe just because they ship with encryption features turned on. Researchers tested 38 drives from multiple vendors and found broken or weak behavior, including predictable random numbers, flawed PSID reset tokens, and, on some Lenovo OEM drives, a tweak value reused across the whole disk. One drive firmware issue was fixed by Micron, but many other reports were already known, unpatched, unsupported, or ignored.

Source

Red Hat has developed a two-node configuration for high-availability OpenShift deployments at the edge to cut hardware costs that customers find prohibitive when powering and maintaining a third node across many sites. OpenShift is Red Hat's enterprise Kubernetes platform for running containers and related workloads. Previously a lightweight arbiter device was required to maintain quorum and prevent split-brain scenarios in which both nodes act as primary after a connectivity loss.

Source

A regression in the open-source AMDGPU driver is causing significant performance degradation across several major Linux distributions, including Ubuntu, Fedora, and Arch. The issue stems from a bug in the Linux 7.0 kernel series that mismanages GPU power profiles and clock settings. This flaw can allow GPU core frequencies to exceed manufacturer limits, triggering the kernel to throttle the device to prevent damage.

Source

ESET a identifié 11 shims UEFI signés par Microsoft et jamais révoqués. Copier l'un de ces binaires suffisait à contourner Secure Boot sur Linux ou Windows.

Le post Secure Boot : 11 shims signés par Microsoft permettaient de contourner la protection a été publié sur IT-Connect.

Linus Torvalds has officially declared that the Linux kernel project is not "anti-AI," positioning artificial intelligence as a practical utility for developers. He emphasized that the usefulness of large language models is no longer in question for those who have actively engaged with the technology. While acknowledging that AI can sometimes increase maintainer workloads or surface embarrassing bugs, Torvalds insists that the project will prioritize technical merit over ideological opposition.

Source

Microsoft has revoked 11 legacy, Microsoft-signed UEFI shim bootloaders that allowed attackers to bypass Secure Boot protections. These outdated binaries, primarily version 0.9 and earlier, remained trusted by the "Microsoft Corporation UEFI CA 2011" certificate despite containing long-known vulnerabilities. By utilizing a "Bring Your Own Vulnerable Bootloader" (BYOVB) attack, threat actors could execute unauthorized code during the early boot phase before the operating system initializes.

Source

Red Hat OpenShift 4.22 introduces a hardened foundation by migrating core components to a minimal Universal Base Image to reduce the attack surface. The platform now utilizes a zero-trust workload identity manager and SPIRE to replace static credentials with dynamic, cryptographic tokens. These architectural changes aim to automate compliance and minimize the manual effort required for risk mitigation across hybrid cloud environments.

Source

The release of Debian 12.15 marks the final point update for the "Bookworm" series as it transitions to long-term support. This milestone signifies the end of mainstream support for the native 32-bit x86 (i386) architecture within the Debian ecosystem. While Debian 12 will receive security maintenance until mid-2028, no further point releases are planned for this version.

Source

ESET researchers have identified 11 vulnerable UEFI shim bootloaders that allow attackers to bypass Secure Boot on nearly any UEFI-based system. These shims, some dating back to 2013, remained signed by Microsoft despite containing critical flaws or authorizing vulnerable secondary components. Because these binaries were never revoked, attackers can use them to execute untrusted code and deploy persistent bootkits like BlackLotus or BootKitty.

Source