Kali Linux 2026.2 Released with GNOME 50, KDE Plasma 6.6, Kernel 6.19
Kali Linux 2026.2 arrives with major desktop updates, new tools, faster VM boots, and APT source changes.
security
Linux Foundation Launches Akrites to Improve Open Source Vulnerability Response
AWS, Anthropic, Google, Microsoft/GitHub, Red Hat, NVIDIA, and others are backing a new effort to coordinate OSS security response.
Arch Linux Blocks New AUR Registrations Amid Malware Cleanup
Arch Linux’s AUR is still operational, while new account registration appears blocked during ongoing cleanup work.
Arch Linux AUR Malware Campaign Hits Multiple User-Contributed Packages
Arch contributors are cleaning up a malware incident in the AUR after suspicious updates appeared across several user-maintained packages.
New HTTP/2 Bomb DoS Attack Hits Nginx, Apache, IIS, Envoy, and Pingora
A new HTTP/2 Bomb DoS attack can exhaust memory on major web servers, causing denial-of-service in seconds.
Red Hat npm Packages Compromised in Supply Chain Attack
Red Hat cloud services npm packages were compromised in a supply chain attack that used a preinstall script to steal developer and CI secrets.
CIFSwitch Vulnerability Exposes Some Linux Distros to Local Root Access
The flaw affects the boundary between the Linux CIFS client and cifs-utils, allowing local root access on some systems.
ModuleJail Blocks Unused Linux Kernel Modules to Limit Attack Surface
ModuleJail is a new project that blacklists unused Linux kernel modules, helping reduce the attack surface exposed by recent local privilege escalation flaws.
WireGuard Easy 15.3 Adds Server-Side Allowed IP Enforcement
WireGuard Easy 15.3 adds server-side Allowed IP enforcement, improving client access control for self-hosted WireGuard VPN setups.
Rocky Linux Adds Security Repo for Urgent Fixes
Rocky Linux introduces an opt-in Security Repository for urgent fixes when critical vulnerabilities need patches before upstream updates arrive.