Linux July 2026
Global headlines curated by our intelligent agents.
Latest News
Apple AI compute costs will be covered by iCloud+ subscriptions, for now
Monetizing AI is a tricky business and it seems Apple's only plans so far are tying daily usage limits to users' iCloud+ subscription tier, but whether or not that'll be enough isn't yet known.
This new app lets you root your Galaxy flagship without tripping Knox or unlocking the bootloader
Root My Galaxy is an open-source tool using the GhostLock Linux exploit for temporary root access on select Samsung Galaxy flagship phones.
Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads
CVE-2026-66066 could expose Rails server files through image uploads, leaking secrets that may enable RCE or lateral movement.
Flying Eagle Android RAT Traces Found on 170 Servers as Source Code Circulates
Flying Eagle Android RAT source code is circulating on Telegram, while Hunt.io links its infrastructure fingerprints to 170 internet servers.
Tengu Botnet Reboots Compromised Linux Devices When Defenders Kill Its Process
Tengu abuses Linux hardware watchdogs to reboot devices after its main process is killed, letting other persistence mechanisms relaunch it.
From Campus to Community Part 4: How Academia Plugs In
From Campus to Community Part 2: The Researcher Exodus
Researcher Says AI Helped Develop Linux Traffic-Control Race Into Root Exploit
Researcher Says AI Helped Develop Linux Traffic-Control Race Into Root Exploit | Read more hacking news on The Hacker News cybersecurity news website and learn how to protect against cyberattacks and software vulnerabilities.
NVIDIA Forms 37-Member Open Secure AI Alliance and Open-Sources NOOA Framework
NVIDIA and 36 partners form the Open Secure AI Alliance and release NOOA, while governance and joint deliverables remain undisclosed.
Ed Zitron: Apple Will 'Watch Everything Burn' When the AI Bubble Bursts
Memory prices have doubled, Macs and iPads have gone up, and iPhones are expected to follow. Ed Zitron – who writes the Where's Your Ed At newsletter, hosts the Better Offline podcast, and has been described by Politico as the AI boom's most "acerbic gadfly" – has spent years arguing the buildout driving those costs will never pay for itself. We asked him what happens to Apple if he's right. You've been calling AI a bubble since before it was fashionable.
Claude Cowork can escape its sandbox, rummage through all of your files
A flaw in Anthropic's Claude Cowork lets its AI agent break out of its virtual machine and reach sensitive files across a user's Mac, exposing a serious gap in the tool's sandbox protections.
Open Models and Open Weights Are Foundational to Secure AI
The Linux Foundation celebrates collaborative efforts to build and enhance the open tools and techniques that keep AI systems safe and secure.
Apple Responds to App Store Scam Lawsuit Involving Fake Bitcoin Wallet
Apple is facing a new lawsuit from three customers who allegedly lost a combined $1.8 million after falling victim to a fake Bitcoin wallet app in the App Store, according to a complaint filed in California federal court on Friday.
Apple Sued by Customers Who Lost Combined $1.8 Million Through Fake Bitcoin Wallet in App Store
Apple is facing a new lawsuit from three customers who allegedly lost a combined $1.8 million after falling victim to a fake Bitcoin wallet app in the App Store, according to a complaint filed in California federal court on Friday.
Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers
Two Bing image search flaws let crafted SVGs run commands as SYSTEM on Windows workers & root on Linux before Microsoft fixed them server-side.
New Geekbench 7 benchmark adds AI workloads, better reflects 2026 computer use cases
Primate Labs released Geekbench 7 for macOS, iOS, Android, Windows, and Linux, redesigning its cross-platform benchmark to better reflect how current software uses CPUs and GPUs.
Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files
SharedRoot exploits CVE-2026-46331 in local Claude Cowork sessions to gain guest root and read or write files across the host Mac.
Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers
Attackers abuse compromised GitHub repos and hosted runners to target cPanel and WHM via CVE-2026-41940, using 583 workflows across 10 versions.
Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs
CVE-2026-64600 lets local users overwrite root-owned files on reflink-enabled XFS systems, preserving metadata and persistent root access after reboot
Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs
CVE-2026-8933 combines two snap-confine races that could turn local Ubuntu access into root on default Desktop 24.04, 25.10, and 26.04 installs.
Only one new Galaxy foldable supports Linux Terminal, and not everywhere
The Samsung Galaxy Z Fold 8, Z Flip 8, and Z Fold 8 Ultra are official. But only one can run full-fledged Linux apps. If you're lucky.
From Campus to Community Part 3: What Universities Uniquely Bring
From Campus to Community Part 2: The Researcher Exodus
FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware
Researchers uncover 7,600 FakeGit GitHub repos, including 800 AI skills and MCP lures spreading SmartLoader malware.
Top Stories: iOS 27 and macOS Golden Gate Public Betas, Apple Back to School Promo, and More
Following through on its promise of a July release, Apple delivered the first public betas of iOS 27, macOS Golden Gate, and more this week, opening up testing to a broader audience.
Linux Foundation Newsletter: July 2026
Welcome to the July 2026 edition of the LF Newsletter. Check out the highlights, save the dates, and be sure to register for upcoming events!