LINUX KERNEL FLAW ALLOWS ROOT ACCESS ACROSS DISTRIBUTIONS
■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE
A newly discovered local privilege escalation vulnerability in the Linux kernel, dubbed CIFSwitch, could allow attackers to gain root privileges on multiple distributions. The flaw affects the CIFS (Common Internet File System) subsystem.
■ MORE FROM THE SECURITY DESK
The Open Observatory of Network Interference (OONI) is expanding its crowdsourced effort to map global internet censorship. The project invites users to contribute measurements to what it describes as the largest open dataset on network interference.
A new technique allows attackers to exfiltrate neural network weights from machine learning models, potentially exposing proprietary AI systems. Security researchers demonstrated the vulnerability across multiple model architectures.
A malicious npm campaign demonstrates how threat actors are evading supply chain protections by embedding malware in package runtime behavior instead of installation scripts. The 'indexed-btree' package exemplifies this evolving attack technique.
Cybercriminals are exploiting lookalike characters from different alphabets to create fake URLs that appear legitimate to the naked eye. These homoglyph attacks bypass traditional security checks and trick users into visiting malicious sites.