AI Found a Root Bug in Linux That Everyone Missed for 15 Years
AI Found a Root Bug in Linux That Everyone Missed for 15 Years Nebula Security has published exploit code for GhostLock (CVE-2026-43499), a use-after-free...
Key points
- AI Found a Root Bug in Linux That Everyone Missed for 15 Years Nebula Security has published exploit code for GhostLock (CVE-2026-43499), a use-after-free bug that sat in the Linux kernel for 15 years and lets any logged-in user take root on an unpatched machine, according to SecurityWeek and The Hacker News.
- Flock Cameras Sent 4 Cops After a Reporter Writing in The Drive, reporter Joel Feder describes being boxed in by four Plymouth, Minnesota, police cars in a Kohl's parking lot in late June—officers shouting, hands on their guns—because Flock's license plate cameras had flagged the $155,000 Range Rover he was testing, loaned from a New Jersey dealership, as stolen.
- Feder reports that four other Land Rovers sharing the same license plate format were being tracked around Minnesota that same week; he was just the first pulled over.
- ICE’s Cyber Contractor Gets Breached Consulting giant Accenture has confirmed a security breach after a threat actor going by “888” claimed to have lifted 35 GB of data—source code, RSA and SSH keys, Azure access tokens, and configuration files—and put it up for sale on a cybercrime forum, according to BleepingComputer.
What happened
AI Found a Root Bug in Linux That Everyone Missed for 15 Years Nebula Security has published exploit code for GhostLock (CVE-2026-43499), a use-after-free bug that sat in the Linux kernel for 15 years and lets any logged-in user take root on an unpatched machine, according to SecurityWeek and The Hacker News. Flock Cameras Sent 4 Cops After a Reporter Writing in The Drive, reporter Joel Feder describes being boxed in by four Plymouth, Minnesota, police cars in a Kohl's parking lot in late June—officers shouting, hands on their guns—because Flock's license plate cameras had flagged the $155,000 Range Rover he was testing, loaned from a New Jersey dealership, as stolen. Feder reports that four other Land Rovers sharing the same license plate format were being tracked around Minnesota that same week; he was just the first pulled over. ICE’s Cyber Contractor Gets Breached Consulting giant Accenture has confirmed a security breach after a threat actor going by “888” claimed to have lifted 35 GB of data—source code, RSA and SSH keys, Azure access tokens, and configuration files—and put it up for sale on a cybercrime forum, according to BleepingComputer. It's not the actor's first swing...