Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root

thehackernews.com Sep 18, 2026

Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root

Curated by Shubham · TechCapsules · Sep 18, 2026

AI-summarised brief · reviewed before publication

A security researcher released working exploit code for four Linux kernel vulnerabilities—DirtyAH6, TUNderflow, PPPoEject, and DiagSpill—that allow local privilege escalation to root. The Linux kernel team patched all four in the weeks before the code was published, so systems with current kernels remain safe. The exploits target memory‑safety bugs in networking code and can crash machines; they are intended for isolated testing. Users running older kernels should update promptly to avoid exposure.

💡 Why It Matters

· Publicly available exploits raise the risk for shared systems, especially those with user namespaces enabled.
· Prompt patching is essential to prevent attackers from leveraging these flaws to gain full control.

Capsules Cybersecurity

Read full article on thehackernews.com

ICTK and Jiran Security Partner on ‘Q-BRIDGE’ to Commercialize End-to-End PQC Migration…

ICTK Co., Ltd., a South Korean quantum‑security fabless firm, and Jiran Security, a cybersecurity specialist, signed a memorandum of understanding to launch Q‑BRIDGE, a commercial service that delivers end‑to‑end post‑quantum cryptography (PQC) migration for enterprises, government agencies and financial institutions. The partnership combines Jiran’s Crypto Discovery platform, which audits cryptographic assets, identifies vulnerabilities and creates migration roadmaps, with ICTK’s hardware‑rooted security architecture built on its VIA PUF™ hardware root‑of‑trust chips. Jiran will conduct initial diagnostics for more than 6,000 domestic organisations, while ICTK will design, supply and verify PQC‑enabled certificate authorities, key‑management systems, hardware security modules and virtual private networks. The joint effort aims to streamline the transition to quantum‑resistant security across critical sectors and accelerate compliance with emerging standards.

💡 Enterprises face imminent risk from quantum attacks, and Q‑BRIDGE offers a ready‑made pathway to protect sensitive data before standards become mandatory.

finanznachrichten.de · Sep 17

GeeTest Showcases Adaptive Bot Management Innovations at GISEC Global 2026

GeeTest, a prominent bot‑management provider, unveiled new adaptive security tools at GISEC Global 2026 in Dubai. The company showcased dynamic, risk‑based CAPTCHA, device fingerprinting, and a configurable business rules engine designed to detect sophisticated automated attacks while minimizing user friction. Live demos highlighted real‑time challenge generation that outperforms traditional CAPTCHA libraries, targeting high‑risk touchpoints such as registration, login, and payment. GeeTest’s booth attracted cybersecurity professionals from fintech, e‑commerce, gaming, and digital services, offering hands‑on demonstrations and threat‑scenario discussions.

💡 The launch demonstrates a shift toward real‑time, AI‑driven verification that can outpace evolving bot tactics, offering a more resilient defense for critical digital interactions.

techcrunch.com · Sep 17

Comp AI sets eyes on a continuously agentic future for security and…

Comp AI, a cybersecurity and compliance startup founded in January by Lewis Carhart, Claudio Fuentes and Mariano Fuentes, announced a $34 million Series A financing led by Roo Capital and Grand Ventures, bringing its total funding to $37.5 million. Drawing on lessons from their previous venture LeapAI—where manual SOC 2 compliance slowed product development—the trio built an “agentic” platform that automates policy drafting, evidence collection and continuous monitoring of compliance controls. The system also offers AI‑driven penetration testing and aims to keep security postures up‑to‑date as companies deploy new AI agents that could alter permissions or introduce vulnerabilities. Human oversight remains integral, with AI agents handling routine tasks while humans review and approve critical outputs.

💡 Real‑time, AI‑powered compliance monitoring addresses the gap between static audits and the rapid changes introduced by autonomous agents, protecting revenue‑critical security postures.

gizmodo.com · Sep 16

Best Antivirus for Windows 2026: 5 to Install, 1 to Avoid

A 2026 review ranks five paid Windows antivirus products and Microsoft Defender. Norton 360 tops the list, completing a full scan in 13 minutes 22 seconds and offering a robust firewall and 250 GB cloud backup. Bitdefender excels on older PCs, keeping CPU usage at 11 % and memory at 183 MB during a sweep. Avast One delivers a free, lab‑certified solution. NordVPN Threat Protection Pro provides full Windows protection for VPN subscribers. McAfee + offers unlimited device coverage but has the slowest scan. Microsoft Defender, free and built‑in, still shows gaps when the PC is off the network.

💡 The review highlights how performance, feature breadth, and pricing diverge across vendors, guiding users to match protection needs with system capabilities. It underscores that even the default Windows Defender is not a complete solution, prompting consideration of third‑party options.

infosecurity-magazine.com · Sep 16

Major Cyber Threat Detection Vendors Shift from MITRE to UK Testing Program

SE Labs, a UK security testing firm, announced its six‑month PIVOT program on September 15 to benchmark cybersecurity vendors against the world’s most dangerous threat actors. The program employs a team of ethical hackers who simulate nation‑state and ransomware groups, testing vendors’ detection, interruption, and containment capabilities across full attack chains. Participants include Broadcom (Symantec, Carbon Black), CrowdStrike, Fortinet, Palo Alto Networks, and Sophos. Testing began in July, will finish in October, and results are slated for release in January 2027. The initiative aims to give buyers clearer insight into vendor performance against evolving threats.

💡 By exposing real‑world attack scenarios, PIVOT offers a transparent, third‑party assessment that can shift purchasing decisions and pressure vendors to close critical gaps in threat detection and response.

thehackernews.com · Sep 15

KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session…

Cybersecurity researchers uncovered the KREMLIN banking malware, active since May 2025, that lures Brazilian bank customers with fake documents and installs a malicious browser extension on Chrome and Edge. The multi‑stage payload uses JavaScript loaders, custom C++ installers, and blockchain‑based command‑and‑control via Ethereum smart contracts to evade detection. The extension bypasses Chromium integrity checks, harvests credentials, session tokens, and browser data, and exfiltrates it to a C2 server while maintaining persistence through scheduled tasks.

💡 The attack demonstrates how attackers combine browser exploitation with blockchain‑based infrastructure to create a resilient, stealthy threat that can adapt to security updates, posing a significant risk to online banking users worldwide.