Threat Watch– active
All incidents
More on Threat Watch
More Debian incidents
- Xen XSA-523: guest reads/writes other domains and Dom0 memory via grant copy (CVE-2026-102703/CVE-2026-102704) Critical · Patch now
- Linux KVM: guest-to-host escape via malformed IPv4 checksum metadata lets guest VMs compromise the host (CVE-2026-99999) Critical · Patch now · Closed
- Linux kernel TCP use-after-free (CVE-2026-98432): Anthropic-built root exploit; Ubuntu and RHEL unfixed Critical · Patch now
- TianoCore EDK II PXE driver: ICMP error overflow gives pre-boot code execution on network-booting machines (CVE-2026-97631) Critical · Patch now · Closed
- Checkmarx: GitHub repos breached via Trivy-campaign credentials, malicious KICS/AST Actions, Docker image and IDE/Jenkins plugins published (no CVE) High · Supply chain · Closed
- XZ Utils: backdoor in 5.6.0/5.6.1 release tarballs targets sshd via liblzma (CVE-2024-3094) Critical · Supply chain · Closed
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.