#theori — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #theori, aggregated by home.social.
-
Feed: All Latest | Dangerous New Linux Exploit Gives Attackers Root Access to Countless Computers by Dan Goodin, Ars Technica
AI generated summary, Read the full article for complete information.
A newly disclosed Linux kernel vulnerability, dubbed CopyFail (CVE‑2026‑31431), enables a local privilege‑escalation that lets an unprivileged attacker obtain root on virtually any Linux distribution with a single, unmodified script. Released by security firm Theori after a brief private disclosure, the flaw resides in the kernel’s crypto API where an AEAD template copy operation overwrites adjacent memory, allowing the attacker to elevate privileges, break out of containers, compromise multi‑tenant systems, and hijack CI/CD pipelines. Although patches were quickly issued for several kernel versions (7.0, 6.19.12, 6.18.12, 6.12.85, 6.6.137, 6.1.170, 5.15.204, and 5.10.254), many distributions had not yet applied them, leaving countless desktops, servers, and cloud environments exposed. Experts warn that the exploit’s reliability surpasses earlier high‑profile kernel bugs like Dirty Pipe and Dirty Cow, and they urge all Linux users to verify that their systems incorporate the relevant fixes or follow vendor mitigation guidance.
#Theori #Ubuntu #Amazon #SUSE #Debian #RedHat #Fedora #ArchLinux #Kubernetes #Linux #copyfail #security #security_cyberattacksandhacks #security_securitynews
-
Feed: All Latest | Dangerous New Linux Exploit Gives Attackers Root Access to Countless Computers by Dan Goodin, Ars Technica
AI generated summary, Read the full article for complete information.
A newly disclosed Linux kernel vulnerability, dubbed CopyFail (CVE‑2026‑31431), enables a local privilege‑escalation that lets an unprivileged attacker obtain root on virtually any Linux distribution with a single, unmodified script. Released by security firm Theori after a brief private disclosure, the flaw resides in the kernel’s crypto API where an AEAD template copy operation overwrites adjacent memory, allowing the attacker to elevate privileges, break out of containers, compromise multi‑tenant systems, and hijack CI/CD pipelines. Although patches were quickly issued for several kernel versions (7.0, 6.19.12, 6.18.12, 6.12.85, 6.6.137, 6.1.170, 5.15.204, and 5.10.254), many distributions had not yet applied them, leaving countless desktops, servers, and cloud environments exposed. Experts warn that the exploit’s reliability surpasses earlier high‑profile kernel bugs like Dirty Pipe and Dirty Cow, and they urge all Linux users to verify that their systems incorporate the relevant fixes or follow vendor mitigation guidance.
#Theori #Ubuntu #Amazon #SUSE #Debian #RedHat #Fedora #ArchLinux #Kubernetes #Linux #copyfail #security #security_cyberattacksandhacks #security_securitynews
-
The most severe #Linux threat to surface in years catches the world flat-footed
Publicly released #exploit code for an effectively unpatched #vulnerability that gives #root access to virtually all releases of Linux is setting off alarm bells as defenders scramble to ward off severe compromises inside data centers & on personal devs
…code that #exploits it were released from #security firm #Theori , 5 weeks after privately disclosing it to Linux #kernel security team
-
The most severe #Linux threat to surface in years catches the world flat-footed
Publicly released #exploit code for an effectively unpatched #vulnerability that gives #root access to virtually all releases of Linux is setting off alarm bells as defenders scramble to ward off severe compromises inside data centers & on personal devs
…code that #exploits it were released from #security firm #Theori , 5 weeks after privately disclosing it to Linux #kernel security team
-
The most severe #Linux threat to surface in years catches the world flat-footed
Publicly released #exploit code for an effectively unpatched #vulnerability that gives #root access to virtually all releases of Linux is setting off alarm bells as defenders scramble to ward off severe compromises inside data centers & on personal devs
…code that #exploits it were released from #security firm #Theori , 5 weeks after privately disclosing it to Linux #kernel security team
-
The most severe #Linux threat to surface in years catches the world flat-footed
Publicly released #exploit code for an effectively unpatched #vulnerability that gives #root access to virtually all releases of Linux is setting off alarm bells as defenders scramble to ward off severe compromises inside data centers & on personal devs
…code that #exploits it were released from #security firm #Theori , 5 weeks after privately disclosing it to Linux #kernel security team
-
The most severe #Linux threat to surface in years catches the world flat-footed
Publicly released #exploit code for an effectively unpatched #vulnerability that gives #root access to virtually all releases of Linux is setting off alarm bells as defenders scramble to ward off severe compromises inside data centers & on personal devs
…code that #exploits it were released from #security firm #Theori , 5 weeks after privately disclosing it to Linux #kernel security team
-
Theori unveils Xint to automate security operations in cloud and hybrid environments https://www.helpnetsecurity.com/2024/05/08/theori-unveils-xint-to-automate-security-operations-in-cloud-and-hybrid-environments/ #Industrynews #Theori
-
Theori unveils Xint to automate security operations in cloud and hybrid environments https://www.helpnetsecurity.com/2024/05/08/theori-unveils-xint-to-automate-security-operations-in-cloud-and-hybrid-environments/ #Industrynews #Theori
-
Theori unveils Xint to automate security operations in cloud and hybrid environments https://www.helpnetsecurity.com/2024/05/08/theori-unveils-xint-to-automate-security-operations-in-cloud-and-hybrid-environments/ #Industrynews #Theori
-
Theori unveils Xint to automate security operations in cloud and hybrid environments https://www.helpnetsecurity.com/2024/05/08/theori-unveils-xint-to-automate-security-operations-in-cloud-and-hybrid-environments/ #Industrynews #Theori
