Blog

A Linux kernel vulnerability that has been hiding in plain sight since 2011 was publicly disclosed on July 7, 2026, along with a fully working exploit that turns any unprivileged local user into root in about five seconds, at 97% reliability. Researchers at Nebula Security named it GhostLock, tracked as CVE-2026-43499, and Google awarded them… Read More »GhostLock: A 15-Year Linux Kernel Bug Has a 5-Second Public Root Exploit

A new Linux kernel vulnerability nicknamed “pedit COW” has become one of the biggest security stories of June 2026. Tracked as CVE-2026-46331, the bug lets an ordinary, unprivileged user on a Linux machine climb all the way to root — without ever touching a file on disk. A working exploit went public within a day… Read More »Pedit COW Explained: The Linux Kernel Flaw Letting Local Users Become Root

Here is something most Arch Linux users have never thought carefully about: the Arch User Repository — the AUR, the place millions of Arch users go to install software that isn’t in the official repos — has no code review process at all. Anyone can upload a package. Anyone can take over a package whose… Read More »The AUR Malware Attack Exposed a Fact Most Arch Users Don’t Know

Secure Boot Linux 2026 has a deadline most users don’t know about. On June 27, 2026, Microsoft’s original 2011 Secure Boot signing certificate expires — and the misinformation circulating about what that actually means is making things worse. Your machine will not suddenly stop booting on June 28. But if you do nothing and your… Read More »Microsoft’s Secure Boot Certificates Expire June 27 — What Every Linux User Must Know