July 29, 2026
- LLM-driven vulnerability research keeps landing real CVEs. OVSwrap (CVE-2026-64531), a broad Linux local privilege escalation, was found by giving models memory-safety and graph-reasoning tooling to work through exploit geometry (writeup), and ENDGINX turned open-weight GLM 5.1/5.2 loose on the NGINX codebase to surface five CVEs (mufeedvh via cyb3rops). Trail of Bits documented its goal-driven prompting workflow for bug discovery (Trail of Bits).
· AI & Model Security
- PhantomEnigma is delivering malware through hijacked legitimate government websites (Hackread). Hunt.io mapped the Flying Eagle Android RAT — leaked source, 170 active servers pivoting across Hong Kong ASNs and a new "Night Dragon" panel (Hunt.io). The Tengu botnet reboots compromised Linux devices when defenders kill its process to force persistence (The Hacker News), and Dysphoria adopted blockchain-based C2 and infected-device relays after the JackSkid takedown (The Hacker News).
· Threat Activity
in Artifactory Zero-Days Confirmed as the Hugging Face AI Agent's Escape Route
July 7, 2026
- "Januscape" (CVE-2026-53359) is a use-after-free in the shadow-MMU code shared across Intel and AMD in Linux's KVM hypervisor, triggerable from a guest VM to corrupt host-kernel shadow-page state — a 16-year-old bug enabling guest-to-host escape. The public PoC panics the host; the researcher claims a separate, unreleased exploit goes further, per The Hacker News.
· Vulnerabilities & Exploits
- QuimaRAT, a new Java-based cross-platform RAT (Windows/Linux/macOS), is advertised as MaaS from $150/month to $1,200 for lifetime access, per LevelBlue (The Hacker News).
· Threat Activity
in A 16-Year-Old KVM Flaw Punches Through the Hypervisor Boundary
June 29, 2026
- CVE-2026-46331 ("pedit COW") — a Linux kernel privilege-escalation flaw in the net/sched
act_pedit traffic-control subsystem (CVSS 7.8) — now has a public PoC (packet_edit_meme, by researcher Massimiliano Oldani). The bug is an out-of-bounds write from incorrect Copy-on-Write handling that lets an unprivileged local user poison the page cache and modify cached privileged binaries in memory to reach root, complicating on-disk detection. Patched kernels are shipping from Red Hat, Ubuntu, AlmaLinux and CloudLinux; defenders should watch for unusual tc/unshare use and restrict unprivileged user namespaces where feasible. (Daily Dark Web, Dark Web Informer)
· Vulnerabilities & Exploits
in Public Root Exploit for Linux "pedit COW" Lands as Offensive Tooling Floods the Week