Linux 2026
Global headlines curated by our intelligent agents.
Latest News
14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2
Trojanized npm packages launch RedC2 4.0 on Linux at import time, giving operators shell access, credential theft, and payload execution.
Riot is ending development on its League of Legends fighting game
2XKO never found a “path toward sustainability.”
Framework says it’s addressing a BIOS update that bricked some of its older laptops
In-warranty and out-of-warranty Laptop 13 7040-series mainboards confirmed to be affected will be replaced.
Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers
Citrix fixes NetScaler CVE-2026-19490, a CVSS 9.3 authentication bypass affecting certain Gateway, AAA, and SAML configurations.
DJI Osmo fans are breaking the shackles of its closed-source camera app
Osmosis lets you download DJI Osmo camera footage without DJI’s Mimo app.
Framework gave its 12-inch laptop some hardware upgrades
Now preloaded with Linux.
Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data
Clop-linked attacks exploit CVE-2026-12569 to deploy a Windchill web shell that decrypts credentials, maps vault data, and loads Java code in memory.
Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000
Ransom Busters claims ransomware server access and asks victims for $20,000 to $60,000 to recover files and delete stolen data.
How MCP Servers Can Expose Enterprise Secrets
MCP servers can leak enterprise secrets through plaintext config files or prompt injection. Learn the main risks and how to secure them.
Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies
Evooo1Bot exploits known flaws to infect Linux edge devices, then adds SOCKS5 proxying, SSH brute force, credential theft, and DDoS.
I can’t thank this AI tool enough for turning me into a salient LinkedIn sage
This week's edition of new AI tools includes a LinkedIn post generation bot that thrives on snark, a TV and movie suggestion tool, and more.
Apple Opens Houston Advanced Manufacturing Center Ahead of Mac Mini Production
Apple today opened its Advanced Manufacturing Center (AMC) in Houston, Texas. It's located in the same Houston facility where Apple makes AI servers and will start manufacturing the Mac mini this year. Small and medium businesses can visit the 20,000-square-foot facility for free training and educational sessions, taking advantage of interactive labs, tools, and equipment, including a holographic lab table.
Apple opens Houston center to train next generation of U.S. manufacturers
Apple is expanding its U.S. manufacturing footprint with a new Houston center designed to help bolster American manufacturing with education and resources.
.png)
Linux Foundation Newsletter: August 2026
Welcome to the August 2026 edition of the LF Newsletter. Check out the highlights, save the dates, and be sure to register for upcoming events!
Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE
SharePoint CVE-2026-55040 lets unauthenticated attackers impersonate users and chain with CVE-2026-63520 for code execution
Apple Accused of 'Fraud' in iCloud Private Relay Class Action Lawsuit
Apple is facing a proposed class action lawsuit accusing it of fraud and false advertising over a security flaw in iCloud Private Relay, according to 9to5Mac. The suit was filed by the Clarkson Law Firm, which accuses Apple of deceiving iCloud+ subscribers with its marketing of Private Relay, the feature meant to shield a user's IP address and DNS records while browsing in Safari.
iPhone 18 Pro Will Reportedly Start With 256GB of Storage
While the iPhone 17 Pro has double the base storage compared to the iPhone 16 Pro, there will apparently be no further increase this year. In a report this week estimating that the iPhone 18 Pro's bill of materials will be nearly 40% higher than the iPhone 17 Pro, Taiwanese research firm TrendForce said the iPhone 18 Pro will start with 256GB of storage, matching the iPhone 17 Pro's minimum capacity.
Mozilla Revokes Firefox and Thunderbird Linux Signing Key After Key Lands in Private Repo
Mozilla revokes a Firefox and Thunderbird Linux signing subkey after an unencrypted copy landed in a private repository.
Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets
GhostSplice splits MCP instructions across channels, letting AI coding agents combine them to exfiltrate SSH keys, secrets, and source code.
iOS 27 Hints at 'Apple Reference Image' Photo Authentication
Apple is working on "Apple Reference Image," a photo provenance system that will verify if an image was captured with an iPhone. References to the feature were found in a privacy disclosure included in iOS 27 beta 5, but it is not live yet. According to the text, there will be a "Reference" mode option in the Camera app that users can select. Using this mode will embed provenance data in the image's metadata.
Aliens: Fireteam Elite on Nintendo Switch Shut Down With No Refunds, as Owners Become the Latest Victims of Gaming's Increasingly Digital Future
Aliens: Fireteam Elite has had its cloud servers shut down, leaving Nintendo Switch owners unable to play the game without any form of refund.
Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Development
Kimsuky runs Ollama, GPT4All, and Msty offline while testing RAG and collecting AI libraries that could support phishing, malware, and data analysis.
TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore
Head Mare exploits two TrueConf flaws to gain SYSTEM privileges and replace client installers with PhantomCore malware across Russian companies.
Claude Code Adds Cross-Session Messaging on macOS
Anthropic has updated Claude Code so that separate coding sessions can message each other directly, removing the need to manually copy context between Terminal windows. The company shipped the feature in Claude Code version 2.1.224, released on Friday for macOS and Linux. Two new tools power it: ListAgents, which finds other active sessions running on the Mac, and SendMessage, which delivers the message. A session that receives one shows it as a labeled card with a link back to the sender.