Cyber

What changed

The Linux kernel has been updated to address a critical vulnerability tracked as CVE-2026-99999, which allowed attackers to escape from a virtual machine (VM) to the underlying host. This flaw, known as PwnEscape, involved manipulating packet metadata to alter an IPv4 header after processing, potentially leading to host-level code execution.

• The vulnerability was discovered during Vercel’s Sandbox security challenge.
• The issue was classified as the most severe finding reported in the challenge.
• The flaw has now been resolved with multiple stable-branch fixes released.

Who is affected

Organizations utilizing affected versions of the Linux kernel in their virtualized environments may be at risk. The vulnerability primarily impacts those running specific kernel versions.

• Users of Linux kernel versions 5.10, 5.15, 6.1, 6.6, 6.12, 6.18, and 7.2.
• Cloud service providers using virtualization technologies based on the Linux kernel.
• Developers and researchers participating in sandbox environments like Vercel's.

What to do

It is imperative for affected organizations to update their Linux kernel to the latest patched versions to mitigate the risk associated with this vulnerability. Regular monitoring for security updates and vulnerabilities is also recommended.

• Upgrade to the latest stable versions of the Linux kernel as specified in the NVD.
• Review and enhance security measures for virtualized environments.
• Stay informed about future vulnerabilities and participate in security challenges to test system defenses.

What changed

The FBI has alerted the public to a rising trend of scams utilizing voice cloning technology to impersonate political candidates. This warning comes as the 2026 midterm elections approach, highlighting the potential for financial fraud and data theft.

Fraudsters are reportedly using the names, logos, and slogans of candidates to solicit fake donations and gather personal information from unsuspecting voters.

Who is affected

The scams are designed to target a broad audience, impacting various stakeholders in the electoral process.

Potential victims include voters, political candidates, and campaign organizations, all of whom may be misled by fraudulent communications.

• Voters across the United States who may receive deceptive solicitations.
• Political candidates whose identities are being cloned for fraudulent activities.
• Campaign organizations that could face reputational damage due to these scams.

What to do

In light of these developments, individuals and organizations are urged to remain vigilant against potential scams.

The FBI recommends verifying the authenticity of any solicitation for donations and reporting suspicious activities to local authorities.

• Always confirm the source of any donation requests, especially those claiming to represent political candidates.
• Report any suspicious communications to the FBI or local law enforcement.
• Educate others about the risks of voice cloning scams and the importance of safeguarding personal information.