A separate vulnerability in Linux allows users with limited rights to escalate to root. Tracked as CVE-2026-43499, it lurked in the OS for 15 years. Researchers from Nebula Security said they discovered it using Vega, Nebula’s AI-assisted vulnerability scanner. Matt Lucas, a researcher and founder of RedEye Security, explained
This will become more and more common as we use AI to find vulnerabilities faster (hopefully) than bad actors can use AI to find vulnerabilities.
If you pay attention you can hear a hundred NSA assholes tear their hair out
This is why they restrict Mythos and similar.
They want the vulnerability machine, and they don’t want you to have it.
You don’t think frontier AI models are leaving some out deliberately?
If they leave it out someone else will find it, the days of leaving things out deliberately past.
20 years of hoarding CVEs down the drain.
Now they’ll never be able to gg ez their way into any country and will have to actually use their bribery budget to get more implants lol.
Which means the new paradigm will be ‘every piece of hardware is a supply chain attack.’
cough TPM 2 cough
If it was microsoft they would ban github and gitlab account and not give cve.
I’m not a big Google fan but I will give credit where credit is due
They do put their money where their mouth is
Linux’s “security through obscurity” was never going to last.
Edit: it’s a common concept in hacking. Shorthand for a type of security through improbability.
The self-hosted crowd thinks reverse proxies protect you from the Internet. Don’t expect too much of them.
The selfhosted guys are correct with that. Of course its not a magic pill, but it can help to minimize the attack surface immensely with little effort.
Edit: while open ports can easily be enumerated, a reverse proxy often requires knowledge of the right server name. In tls1.3 those are not transferred in clear. Depending on your threat scenario you might want to consider doh/dot etc.
Reverse proxies can require client certs, which lift the security benefit to something like a vpn. Even basic auth adds a high threshold to attackers and is simple even for random users to work with. All this is functionality many services don’t offer natively - as they assume a reverse proxy anyway I guess.
