Rapid7 researchers identified two malware campaigns using Linux backdoors that closely mimic legitimate Asian network security appliances. One campaign involves new variants of the BPFdoor implant and a modified Rekoobe trojan designed to impersonate South Korea's SpamSniper anti-spam software, while the other uses a newly identified tool called AVERAT. The implants replicate filenames, firewall-permitted traffic patterns, and operational behaviors of the genuine products to avoid detection.
darkreading.com
· 2026-10-02
Christie's is auctioning a physical scroll that was transmitted by carrier pigeon in 2001 as part of a real-world implementation of RFC 1149, the 1990 joke internet standard written by David Waitzman. Members of Norway's Bergen Linux User Group printed IP packets as hex strings, attached them to pigeons, and flew them roughly three miles between lofts, sending nine packets and receiving four replies. This particular packet was later framed and given to Waitzman himself.
onlineonly.christies.com
· 2026-10-02
Debian's security team published advisory DSA-6528-1, addressing nearly 90 CVEs discovered in the Linux kernel. The advisory, issued by Salvatore Bonaccorso, lists vulnerabilities spanning multiple kernel subsystems and recommends users update their systems to the patched packages.
lwn.net
· 2026-10-01
openSUSE announced that version 16.1 of Leap, its stable distribution, will include an Immutable Mode featuring a read-only, transactionally updated root filesystem. The feature, described on the official openSUSE blog, brings capabilities previously exclusive to Leap Micro—a lightweight immutable OS for containers and edge devices—into the general-purpose Leap desktop distribution.
zdnet.com
· 2026-09-30
A newly released PS5 hacking exploit now supports more recent console firmware, expanding the pool of hardware that can be jailbroken beyond older, unupdated units previously required. This means users no longer need to hunt for outdated secondary-market consoles to get into PS5 hacking.
arstechnica.com
· 2026-09-30
Amutable has introduced Quarry, a software delivery system designed to distribute the immutable OS images built with its earlier tool, tine. The design shifts all logic to the client side, serving update payloads and metadata as static blobs from simple, 'dumb' hosting rather than requiring a server capable of generating dynamic responses.
amutable.com
· 2026-09-30
Microsoft has released WSL Containers to general availability, letting Windows 11 developers build, run and deploy Linux containers natively through Windows Subsystem for Linux. The update adds a wslc.exe management tool, GPU support, networking improvements, health checks, storage mounts, and integration with Microsoft Defender for Endpoint and Intune. Microsoft says file access from Linux environments to Windows storage can now run up to twice as fast, though Compose support is still missing and listed as a priority.
linux.slashdot.org
· 2026-09-29
Microsoft has released WSL Containers as a generally available feature, letting users run Linux containers on Windows via the wsl --update command. The update adds a new wslc.exe command-line tool (aliased as container.exe), a WSL Containers API for Windows apps, and previously-missing features like container restarts, file copying, health checks, and network commands.
bleepingcomputer.com
· 2026-09-29
NSL is a new command-line tool that lets Linux users launch a login shell into any of seven prebuilt distros—Debian, Ubuntu, Fedora, CentOS Stream, Arch, openSUSE Tumbleweed and Leap—with a single command. The tool mounts the host's home directory, keeps the user's UID, GID and passwordless sudo, forwards network ports, and passes through Wayland windows to the desktop. An --isolated flag can instead run a distro in its own VM with no access to host files or desktop actions.
frostyard.github.io
· 2026-09-29
The Netherlands is developing DAWO (Digitaal Autonome Werkomgeving Overheid), a sovereign IT ecosystem built on NixOS, a Linux distribution with roots in Dutch-created Nix package-manager technology. The project aims to supply government and public institutions with a homegrown operating system, office applications, cloud services and management tools as alternatives to US software. Early pilot deployments of DAWO have already launched in private and local settings, with plans to expand across Dutch institutions.
techspot.com
· 2026-09-29
Security researchers at VUsec and Scuola Superiore Sant'Anna developed a new Spectre v2 attack called Branch Target Reuse (BTR), which exploits stale branch predictor data left behind when JIT engines reuse memory addresses for new code. Tested against Firefox's SpiderMonkey, GraalVM, and the Linux kernel's cBPF, the attack can extract a system's root password hash within minutes on Intel processors. The flaws were assigned CVE-2026-64507 and CVE-2026-64508, and fixes have already been merged into the Linux kernel.
bleepingcomputer.com
· 2026-09-29
Phoronix's Michael Larabel reports that a clean x86-64 defconfig Linux kernel build now takes about 15 seconds on his dual AMD EPYC 9575F workstation, down from over 22 seconds before recent Kbuild patches. The speedup stems from work by Linux memory-management developer Lorenzo Stoakes, who used AI/LLM assistance to remove compilation bottlenecks, alongside continued hardware gains.
tomshardware.com
· 2026-09-27
GoKawiil