Azure Files now offers fully managed NFS 4.1 storage designed to accelerate data-intensive Linux workloads such as AI inferencing and containerized applications. By utilizing the nconnect mount option, clients can establish multiple parallel TCP connections to a single share to significantly improve throughput. New zonal placement capabilities allow administrators to co-locate file shares with GPU virtual machines, reducing latency and maximizing expensive hardware utilization.

Source

Fedora 45 is considering a proposal to enable x86_64 Shadow Stack protection by default to enhance system security on modern processors. This hardware-assisted feature creates a hidden, isolated stack to store copies of return addresses for verification during function calls. By comparing these copies against the primary stack, the CPU can detect and block Return-Oriented Programming (ROP) attacks that attempt to hijack control flow.

Source

Oracle has released VirtualBox 7.2.12, a maintenance update addressing a critical stability flaw affecting Linux hosts. The most significant fix resolves a bug that caused full kernel freezes on Arch Linux when attempting to start a virtual machine. This issue previously required a hard hardware reset because the system would stop responding before any diagnostic information could be logged.

Source

AMD has submitted new Linux kernel patches that officially introduce a "Low Power" CPU core classification for its future heterogeneous processors. This new core type joins the existing Performance and Efficiency categories to help the operating system better manage diverse workloads. The patches enable the Linux kernel to identify these cores via specific CPUID functions, ensuring they are correctly recognized by the system's performance management infrastructure.

Source

Kali Linux 2026.2 introduces significant optimizations for virtual environments by removing unnecessary graphics firmware from pre-built VM images. This change reduces the initial RAM disk size from 200 MB to 60 MB, resulting in boot times that are approximately three times faster. Administrators managing virtual labs will also benefit from updated helper scripts that provide consistent commands for starting and stopping tool-based services.

Source

Microsoft has launched the public preview of WSL containers, a feature that allows Linux containers to run natively on Windows 11 without third-party tools like Docker Desktop. This integration introduces a new command-line interface called wslc.exe, which supports familiar container commands and includes a built-in alias for container.exe. Administrators can access this preview immediately by updating to the latest pre-release version of the Windows Subsystem for Linux via the terminal.

Source

Linus Torvalds has officially released the first release candidate for Linux kernel 7.2, marking the end of the initial merge window. The development cycle appears stable, with Torvalds describing the current state of the code as reasonably normal and on track for a late August release. While the patch size appears large, approximately one-third of the commits consist of AMD GPU register definitions that do not represent complex logic changes.

Source

Microsoft has released the public preview of Azure Linux 4.0, a free, Fedora-based distribution specifically optimized for Azure virtual machines and VM Scale Sets. Originally developed as an internal project called CBL-Mariner, the operating system now powers major infrastructures like LinkedIn and Databricks. Unlike general-purpose distributions, this version is a stripped-down, text-based OS designed to minimize attack surfaces by excluding graphical interfaces and unnecessary tools.

Source

DarkMoon is a new open-source framework designed to automate the end-to-end process of offensive security assessments. It functions as an AI-powered conductor that orchestrates over 80 integrated security tools, including Nmap, sqlmap, and Nuclei. The platform uses 18 specialized AI agents to interpret scan results and determine the next logical steps in a testing campaign without constant human intervention.

Source

A critical vulnerability tracked as CVE-2026-55200 has been identified in libssh2, a widely used client-side library for the SSH protocol. The flaw resides in the transport layer's packet-reading function, which fails to validate the length of incoming data from a server. This lack of bounds checking allows a malicious or compromised SSH server to trigger an integer overflow and subsequent heap memory corruption on the connecting client.

Source

The Linux Foundation has introduced Akrites, a new industry initiative designed to modernize how security vulnerabilities are handled in critical open source projects. This framework addresses the shrinking window between the discovery of a flaw and its active exploitation by malicious actors. By standardizing the remediation process, the project aims to protect the foundational software used across global infrastructure.

Source

A newly discovered Linux kernel vulnerability, tracked as CVE-2026-43503 and dubbed DirtyClone, enables local users to achieve root privileges. This flaw belongs to the DirtyFrag family of vulnerabilities and centers on the corruption of file-backed memory. By leveraging cloned network packets, an attacker can bypass standard permission boundaries to modify sensitive system data.

Source

IBM and Red Hat have expanded their Project Lightwell initiative by partnering with Palo Alto Networks to improve open source security. This collaboration aims to integrate network-layer protections with software remediation to counter the increasing speed of cyberattacks. The initiative addresses the reality that AI has reduced the time between vulnerability discovery and exploitation to just minutes.

Source