#Copyfail

Instead of waiting for patch cycles, admins could simply shut down vulnerable functions before attackers get there

After the CopyFail vulnerability gave root access from any user on almost all distributions last week, this week we’ve got DirtyFrag. This chains the vulnerability in CopyFail (xfrm-ESP) and …

From The Register: 'Dirty Frag' Linux flaw one-ups CopyFail with no patches and public root exploit

U.S. cybersecurity agency CISA says the CopyFail bug is being actively used in hacking campaigns, and poses a major risk to servers and datacenters that rely on Linux.

The CopyFail Linux exploit lets hackers gain root access—update your kernel now to secure your system from this critical vulnerability.

From Techmeme: Pushing back on AI job loss fears, AWS CEO Matt Garman says Amazon plans to hire 11,000 software engineering interns in 2026, a figure in line with recent years (Ben Shimkus/Business Insider)

From Techmeme: The US, UK, Australia, Canada, and New Zealand publish guidance on orgs' use of agentic AI systems, saying many give AI more access than can be safely monitored (Greg Otto/CyberScoop)

Making headlines everywhere is the CopyFail Linux kernel vulnerability, which allows local privilege escalation (LPE) from any user to root privileges on most kernels and distributions. Local privi…