#security

2 results

tech Newsjacking

May 21, 2026

CopyFail (CVE-2026-31431): How 732 Bytes of Python Gets Root on Nearly Every Linux Machine

CVE-2026-31431 (CopyFail) is a Linux kernel page cache vulnerability allowing a 732-byte Python script using only standard library modules to achieve root privilege escalation on virtually all Linux distributions released since 2017.

#linux #security #python #cve #kernel

tech Newsjacking

May 17, 2026

Mini Shai-Hulud: Anatomy of the Largest npm Supply Chain Worm Attack

On May 11, 2026, the TeamPCP group compromised 42 TanStack packages in 6 minutes using GitHub Actions cache poisoning and OIDC token extraction from process memory — producing the first-ever malicious package with valid SLSA Build Level 3 provenance.

#npm #supply-chain-security #github-actions #oidc #security #open-source