Critical 'Copy Fail' Vulnerability Impacts Major Linux Distros — Ars Technica Security

A critical local privilege escalation vulnerability, dubbed 'Copy Fail', has been disclosed in the Linux kernel, affecting major distributions since 2017. The flaw allows an attacker to gain root access with a simple 732-byte exploit script. This vulnerability has been undetected for nearly a decade, posing significant risks to multi-tenant servers, CI/CD workflows, and Kubernetes containers. Security teams must prioritize patching to mitigate potential exploitation.

Zero-Day Exploited in cPanel: CVE-2026-41940 — BleepingComputer

A critical zero-day vulnerability, CVE-2026-41940, has been identified in cPanel, WHM, and WP Squared, allowing authentication bypass. A proof-of-concept exploit is now available, increasing the urgency for immediate patching. This vulnerability presents a significant threat to web hosting environments, potentially allowing unauthorized access and control over server resources. Administrators should apply available patches and strengthen access controls to prevent exploitation.

Google Addresses Critical RCE Flaw in Gemini CLI — The Hacker News

Google has released patches for a critical remote code execution vulnerability in the Gemini CLI, identified as CVSS 10.0. The flaw allows attackers to execute arbitrary code via the '@google/gemini-cli' npm package, posing severe risks to systems using this library. Security teams are advised to update to the latest version immediately to protect against potential exploitation.

• Another AI-Assisted Software Scan Yields 9-Year-Old Linux Bug [Dark Reading]
• New York Fines Delta Dental for Lapses Leading to Data Breach - Bloomberg Law News [Google News Security]
• Frontwave CU Discloses Data Breach Involving Member SSNs - CU Today [Google News Security]
• Airbus Subsidiary Victim of $2M Ransomware Attack - Manufacturing.net [Google News Security]
• FBI links cybercriminals to sharp surge in cargo theft attacks [BleepingComputer]
• Movistar Peru data breach impacts 4 million users - Escudo Digital [Google News Security]