Company

Red Hat

4 articles First covered Apr 30, 2026, latest Jun 13, 2026

Cargo loader moving freight onto an aircraft, a stand-in for the software supply chain

Red Hat's npm namespace and Arch's AUR were both backdoored within two weeks of each other

A worm hijacked Red Hat's npm namespace, a rootkit spread through 1,500 Arch AUR packages, and a SOC 2-certified AI gateway shipped malware. Registries are under fire.

A source-code editor open to C++ code, evoking the debate over AI-written contributions to open source

Open Source·2 weeks ago

SQLite won't accept AI-written code, but QEMU just opened the door to it

Two of the most cautious C projects split on AI contributions in the same week. The real fight is over copyright provenance and who cleans up the slop.

Wiz Research's disclosure page for the Dirty Frag Linux kernel privilege escalation vulnerability

Security·last month

A nine-year-old Linux kernel bug gives root in one command. No patch exists yet.

Dirty Frag chains two page-cache flaws in the ESP and RxRPC subsystems into a deterministic privilege escalation that hits every major distro. A PoC exploit is public.

The Copy Fail launch graphic showing a stylized terminal prompt and the title text on a dark background.

Security·last month

'Copy Fail' lets a 732-byte script grab root on Ubuntu, RHEL, and SUSE. Patched April 29.

CVE-2026-31431 chains AF_ALG and splice() to write into the page cache of /usr/bin/su. Xint Code disclosed it on April 29, nine years after the bug shipped.