PACK2THEROOT FLAW GIVES HACKERS ROOT LINUX ACCESS
■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE
A new vulnerability called Pack2TheRoot allows local Linux users to exploit the PackageKit daemon and gain root permissions. The flaw enables attackers to install or remove system packages with elevated privileges.
■ MORE FROM THE SECURITY DESK
Visa is enabling expired payment cards to continue processing contactless transactions through a new feature. The move allows cardholders to keep using their old cards for tap-to-pay purchases even after expiration.
A Texas-based student discovered and reported an unauthorized AI system being used for cyberattacks. The disclosure prompted immediate investigation and security responses from affected organizations.
Iranian cyber actors shut down a small UK power generation facility for four days, according to sources cited by The Telegraph. The incident coincides with a broader wave of attacks targeting US water utilities attributed to Iran-affiliated groups.
A supply-chain attack is exploiting legitimate device-update apps to infect Android-based car head units with malware. The compromised devices are being enlisted into proxy botnets or used for ad fraud schemes.