🚨 Critical Linux kernel flaw could allow remote root code execution; CVE-2026-98432

A use-after-free vulnerability in the Linux IPv4 TCP handshake path allows an unauthenticated attacker to trigger memory corruption by sending specially timed packets to a listening service.

Successful exploitation could crash the system or potentially execute arbitrary code as root.
⠀
• CVSS: 9.8
• Affected: Linux kernel 4.4 and later
• Attack vector: Network
• Privileges required: None
• User interaction: None
• Active exploitation: Not reported
⠀
Fixed kernel branches:

• 5.10.272
• 5.15.223
• 6.1.190
• 6.6.159
• 6.12.113
• 6.18.56
• 7.2.10
• 7.3
⠀
Administrators should install their distribution’s updated kernel and reboot to activate the fix.

Advisory: https://access.redhat.com/security/vulnerabilities/RHSB-2026-016

This laptop UEFI firmware flash upgrade is bigger than my Linux install

I've confirmed with folks the impacted freezers in the countries impacted today are all mgmt interface facing internet, same issue and vuln as last time.

Many of the freezers are end of life and have no patch available, they've just been left online to quite literally rot.

🚨🇪🇺 Second wave of cyberattacks manipulates supermarket freezers across Europe

Refrigeration systems at stores in Sweden, Belgium, Ireland, Estonia, the Netherlands and Luxembourg were remotely altered, with some units reportedly set to 50°C and switched into defrost mode.
⠀
More than 50 stores were identified in Belgium, while 13 SuperValu locations in Ireland and at least 17 businesses in the Netherlands were affected. Stores removed or discarded chilled and frozen products.
⠀
The attacks follow a similar incident that disrupted refrigeration at around 700 locations in France during October.

No group has claimed responsibility, and authorities have not confirmed whether the two campaigns are connected.

Source: https://therecord.media/cyberattack-grocery-freezers-europe

RE: https://circumstances.run/@davidgerard/117548159247284710

If anybody wondering - the Anthropic IPO amendment key changes:

- $104 billion net loss for the first nine months of 2026
- shows growth has slowed in the latest quarter
- shows almost $900 billion of upcoming future spending commitments it is locked in to - a dramatic increase

I had a conversation online recently on BlueSky and I think there are some cultural differences of late between the UK and US I wasn’t aware of.

I essentially mildly disagreed about something cybersecurity and it spun into people attempting to discredit me based on where I work, personal insults about being a ‘reply guy’, requests to go ‘write a blog’ etc.

In the UK at least it’s okay to disagree about something - views aren’t sacred cows you have to protect the honour of.

Tomorrow morning I’ll sign in for my 16 hr shift as a NYS election inspector.

I’ll boot up the machines.

I’ll provide voters w the correct ballot for their precinct.

I’ll make sure every ballot is cast and counted.

I’ll do this for every registered Democrat, Republican, Third Party voter, and Independent.

Because voting is an inviolable right of citizenship.

Because #democracy depends on free and fair elections.

Because we are the caretakers of this Republic.

#midterms2026

Your periodic reminder that blocking api.telegram[.]org in your network is a defensive W so huge it needs a pilot car and police escorts.