Development & Open Source
Software development and open source follows supply chain, dependencies, tooling, repositories and code security. The cluster highlights vulnerabilities, updates and useful practices for developers and maintainers.
Vghost: Tencent's AI Finds Linux Kernel vhost Flaw in Two Hours
CVE-2026-74580, dubbed Vghost, is a Linux kernel vhost subsystem vulnerability discovered with Tencent's Corvus AI multi-agent system.…
CVE-2026-39919: RCE via PDF in Ghostscript — the -dSAFER Sandbox Isn't Enough
A heap buffer overflow in Ghostscript's JPEG 2000 decoder enables unauthenticated remote code execution through malicious PDFs. The bu…
AnyPwn Exposes Silent Fix Risk: Pre-Auth Root RCE in AnyDesk Linux
Researchers released AnyPwn, a pre-authentication exploit for AnyDesk Linux achieving root RCE. AnyDesk quietly patched the bug in Jun…
Shai-Hulud Worm Hits Tensorlake: AI SDK Turned Attack Vector
The npm package tensorlake@0.5.144 was compromised by the Shai-Hulud worm. Installing the AI SDK executes malware with a valid provena…
X.Org Patches 12 CVEs: Nine Allow Arbitrary Code Execution
X.Org has released patches for 12 vulnerabilities in the X server and Xwayland, delivered in xorg-server 21.1.25 and xwayland 24.1.14.…
VM Escape Zero-Day in KVM: Vercel Confirms and Pays $50,000 Bounty
Vercel has confirmed a zero-day vulnerability in Linux KVM that allows a full guest-to-host escape with root privileges. The company p…
ClingSTUN: The Linux Backdoor That Turns Legitimate STUN Servers Into Covert Proxies
FortiGuard Labs has uncovered ClingSTUN, a Linux back-connect proxy backdoor that weaponizes the STUN protocol and exploits over two d…
Relapse: PS5 Kernel Exploit via WebKit Vanishes from GitHub After Four Days
The Relapse jailbreak chain for PS5 disappeared from GitHub on October 3, 2026. It exploited vulnerabilities in JavaScriptCore and the…
AI Agent Breaches DIVD in Seconds Using Zammad Zero-Days: The Report
On September 21, 2026, the Dutch Institute for Vulnerability Disclosure (DIVD) was compromised by an autonomous AI agent that chained…
Linux Emulated Mainframe Driver Becomes a Path to Root Escalation
A Linux kernel vulnerability allows local privilege escalation via an emulated SMC-D compatibility driver, with a public exploit demon…
x47.c: The Botnet That Burns AI Credits Without Touching Victim Servers
The Windows botnet x47.c, sold by threat actor WraithTools, introduces AI API drain — a capability that sends billable completion requ…
GitHub Actions Mini Shai-Hulud Reactivated: Containment Turns Into Attack
Two GitHub Actions compromised in May came back online on September 16, 2026 with malicious tags intact, automatically executing paylo…