Linux News
Global headlines curated by our intelligent agents.
Latest News
A Decade of Industrial Grade Linux: How the Civil Infrastructure Platform Is Securing Mission-Critical Systems
Hilary Carter, SVP of Research at the LF, describes the key insights from the report celebrating the Civil Infrastructure Platform at its 10 year milestone.
📦 Prime Day is here. Save up to 75% for 2 days only!
Build your tech skills for less with savings on certifications, training, bundles, and subscriptions. ENROLL NOW
Initial basic M4 support coming to Linux 7.4
While it won't be practically usable initially, Asahi Linux developer Sven Peter sent out the pull requests for very basic support for the M4 "device tree," and for the MacBook Neo. Upon release, the support will be good enough to install the kernel on those devices, and that's about it. Further development, particularly for GPU support, will be needed to make the OS usable on the M4 family of hardware.
GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers
GitLab fixed CVE-2026-90970, a 9.9 AI Gateway flaw that could let logged-in Duo Agent Platform users run commands on self-hosted gateways.
Police Arrest 16-Year-Old Suspected of Running KillSec, Seize Ransomware Leak Site and Servers
European police arrested three KillSec suspects, seized its leak site and servers, and secured at least 110 TB of data.
How to Get a Great Deal During the Steam Sales and Beyond
While that initial hardware cost of PC gaming can sting a bit, once you’re in the games and software can be very cheap, especially with a little help from Steam Hype. While Sony and Nintendo might want you paying upwards of £70 for a new game, there’s seldom a reason to, with a little savvy shopping, pay more than £45 on PC, even at launch! Plus, the discounts can get huge during sales season.While it might be tempting to just pick up stuff the moment you get a notification email from Steam that it’s discounted, you can save a lot of money by following these handy tips:Maintain a large wishlistEven if your brain-goblins tell you to keep clutter to a minimum, it’s often a useful idea to add every game that even vaguely interests you to your Steam wishlist. Not only will this get you notifications when it does get discounted, but the Steam Wishlist page can be filtered by items on sale, genre, how big the discounts are and more. But the other reason is…Let other sites do the legwork for youThere are several bargain-tracking sites but our go-to is IsThereAnyDeal, which tracks prices across a broad range of sites and tells you if a game is unusually cheap now, or has been cheaper previously. You can often get significant savings compared to Steam and it doesn’t include any sketchy key resellers – it’s all vetted retail outlets. Just double-check that it’s a Steam key you’re buying, unless you’re cool with GOG or Epic. Once you’ve made an account on IsThereAnyDeal, you can have it tap into your Steam Wishlist and inform you of deals across all of those sites.Bundles, Humble & OtherwiseIt’s always worth a quick poke around bundle-heavy storefronts such as Fanatical, Humble, Green Man Gaming and Digiphile. Better yet, IsThereAnyDeal tracks most of them for you. Each has its own system but almost all offer big bundles of games on Steam. The discounts are often so steep that it might be cheaper to snag one game you really wanted along with several others. It’s also worth noting that the Humble Choice (a subscription bundle service run by IGN) also builds up a major discount on the store – up to 20% after a year. This stacks on top of the store’s regular discounts so you can often get 30% or more off a brand new AAA game before it even launches.Free stuff is coolA surprising number of great games are given away for free, especially on the Epic Games Store, which often doles out two titles every week and one a day running through their end-of-year celebrations. Once again, IsThereAnyDeal tracks everything available and it seldom hurts to spend a minute or two a week just adding freebies to your account. Some really big stuff has been given away too, including Death Stranding: Director’s Cut, A Plague Tale: Innocence and the entire Batman Arkham Trilogy. Steam gets the occasional giveaway too, but less frequently.Organize your libraryLastly, not quite a sales tip but if you shop around and snag freebies, you’ll build up an assortment of games across Steam, GOG, Epic, Itch and more, and it can be tricky keeping track of it all. As a Windows user I highly recommend Playnite, which is a free, open-source app that tracks your games across multiple storefronts and can install and launch them without requiring any extra legwork. While a Linux version of Playnite is planned, the Heroic Games Launcher fills that void for the penguin crowd.And that, there, is a crash course on saving big bucks when shopping for PC games. As for how to keep on top of an ever-growing backlog of bundles and impulse buys? We’re still figuring that part out.Steam Hype is the latest site in the Hookshot network, joining Nintendo Life, Push Square, Pure Xbox and the retro-centric Time Extension to cover all corners of the gaming universe. Hookshot is also partnered with the tech experts at Digital Foundry and is partnered commercially with IGN. As Hookshot’s dedicated PC gaming site, it’s got news of the latest releases, updates and mod drops, plus weekly roundups and a must-play monthly playlist to help you keep up with the never-ending deluge of new experiences.
PSA: Apple Mail on Mac May Stop Syncing Microsoft 365 Accounts Today
Microsoft today began disabling Exchange Web Services (EWS) by default in Exchange Online, which will cut off the protocol that Apple's Mail and Calendar apps on Mac still rely on to sync Microsoft 365 work accounts. The cutoff has been on the cards for a fairly long time, as Microsoft stopped adding new features to EWS back in 2018, while in 2023 it announced that it would start disabling the protocol in Exchange Online from October 2026.
New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses
Spectre BTR reuses stale JIT branch targets; Linux PoCs recover the root password hash within minutes on a fully patched Intel system.
Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials
MCP Python SDK flaw can let malicious servers redirect OAuth exchanges and steal credentials; fixes are in 1.30.0 and 2.2.0.
The Impact of Digital Sovereignty on Open Source Companies
By Philipp Reisner, CEO LINBIT® Sovereignty is a word borrowed from statecraft. A sovereign country is independent in its decisions. The term “digital sovereignty” is a more recent invention that applies to organizations and even individuals. In this article, I discuss what the push for digital sovereignty implies for Linux-focused, open source developers and companies. …
M6 Mac mini review, Apple fitness band rumors, Apple AI servers
Benjamin and Chance cover the week in Apple news, including hands-on with the new M6 Mac mini and AirPods 5,...
Muse will apparently let you download its entire filesystem
With a little coaxing, Meta’s AI will reveal all its secrets.
Docker Commits to Bringing the Sandbox Kit Spec to the CNCF
Docker and the CNCF will partner on an open spec to make agent permissions portable Docker Sandbox Kits let you package an AI agent together with exactly what it is allowed to do, so anyone can pull the same agent with the same limits, review changes to those limits, and enforce them. Now, Docker has …
Qualcomm is solving Snapdragon X’s Linux problem
Snapdragon X laptops are getting support for some of the most popular Linux distros, and Qualcomm is sharing the timetable.
Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI
Compromised MemTensor npm and PyPI packages deliver sckit, a Go-based stealer targeting cloud, registry, source-code, and developer credentials.
Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape
A Linux AF_UNIX use-after-free can escape containers for host root; exploit code targets Ubuntu 26.04, which remains unpatched.
F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers
Unauthenticated attackers are exploiting CVE-2026-94127 in F5 BIG-IP APM to run code on systems acting as OAuth authorization servers.
Rabbit’s new AI agent doesn’t need an R1 to run
Rabbit still isn’t giving up on AI hardware, though.
WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers
WordPress fixes a critical unauthenticated path traversal flaw that can load local PHP files and, on some servers, enable code execution.
Meta patches Muse exploit that let attackers control the AI agent
Local access was required to exploit the bug.
New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory
A Linux KVM flaw on ARM64 can expose host kernel memory to guests and enable guest-to-host escape when nested virtualization is enabled.
Rockstar Games' New Modding Policy Crushes Influencers' Dreams for Monetized GTA 6 RP Servers
Rockstar Games has outlined its policy for modding ahead of Grand Theft Auto 6's release, and it may crush the dreams of some would-be entrepreneurs.
CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild
CISA added three actively exploited Linux kernel flaws to its KEV catalog, including bugs that can enable local privilege escalation and DoS.