🐧 Linux

3 Critical Security Flaws This Week: Red Hat Quay, Linux, and Zoom

A roundup of this week's security flaws, including a critical Quay registry bug and Linux kernel issues found using AI.

Artificial intelligence tools are now being used to patch Linux kernel bugs

Linus Torvalds announced Linux 7.4-rc2 and noted a growing volume of kernel bug fixes produced with AI tools.

30 Most Used Linux Command

The article lists the thirty most used Linux commands, drawn from the author's transition from data analytics to cloud work.

Windows 0-day dropped by disgruntled researcher hands hackers System rights

A Windows zero-day exploit called SignDrop, released by a disgruntled researcher, lets local users gain System rights.

AI Found 948 Linux Kernel Exploits for $1.2 Million. Here’s What It Means

An AI system reportedly discovered 948 working Linux kernel exploits at a cost of $1.2 million.

sshhole Explained: How Four Sensible Decisions Opened SSH on Alpine Linux

An OpenSSH password bypass affecting Alpine Linux systems on musl without PAM is explained, including how it works and who is affected.

Critical Apache Flaw: Who Updates the Server Behind Your Website?

Apache released version 2.4.71 of its web server, and the article discusses a critical flaw and the difficulty of getting servers updated.

How whatRust Reached 300 GitHub Stars

The article describes how the open-source whatRust WhatsApp desktop app for Linux, Windows, and macOS reached 300 GitHub stars.

Your reverse proxy makes the internet look like localhost

Explains how a reverse proxy can make home-server services appear to be on localhost and the networking implications of 127.0.0.1 binding.

Flush a bcache writeback cache in seconds, not days

A guide on flushing a bcache writeback cache quickly before reboots, kernel upgrades, or SSD removal.

Least Privilege, Most Drama: What Two Short Stories Get Right About Access Control

A piece on how fiction portrays access control and hacking, contrasting realistic security practices with dramatic portrayals.

FunOS: The new lightweight system based on Ubuntu without Snap packages

Overview of FunOS, a lightweight Ubuntu-based Linux distribution that drops GNOME and Snap packages.

Claude Code Security Warning: Your Password Could Be Leaked Through settings.local.json

A Claude Code permission setting can expose database passwords through a settings.local.json file.

Linux for Data Engineers: From the Terminal to the Operating System

A guide to using Linux terminal and operating system tools for data engineering work.

Oracle Secure Backup leaves a small public signal, so internal inventory matters more

Oracle Secure Backup exposes a small public signal, prompting the case for internal infrastructure inventory.

Concurrent Shell Command Queues

A blog post explains a design for running shell commands from concurrent queues.

DDBD: free and open source database on Linux and macOS

DDBD, the database behind Skapi, is now available as free and open source software on Linux and macOS.

I Broke xv6’s exec() by Using the Wrong Page-Table Checks

A debugging account of an exec() bug in the xv6 teaching operating system caused by incorrect page-table boundary checks.

Lonewolf 0.3 – A standalone XMPP server written in Rust

Lonewolf 0.3 is released as a standalone XMPP server written in Rust.

Live-migration support in FreeBSD and bhyve coming

FreeBSD and bhyve are gaining live-migration support, as described in an RFC post.

Gnomon. Git for Postgres data, built for agents

A GitHub project introduces Git-style version control for Postgres data designed for agents.

PostgreSQL 18.7 Fixes 52 CVEs. Your Old Extensions Still Load, Without the CVE-2026–6460 Fix.

PostgreSQL 18.7 minor release fixes 52 CVEs and changes how C extensions interact with the server.

"LibreOffice works 365 days a year. Just saying."

A Hacker News thread discusses LibreOffice's continuous year-round development and release cadence.

Kildall's algorithm

A developer describes building a new Common Lisp compiler called Cleavir and its design.

What we found scanning vibe-coded apps for leaked API keys

Researchers scanned vibe-coded apps and found many leaking API keys, illustrating a common security weakness in quickly shipped applications.

The Domain Separation Trick That Could Save Your Platform

The article explains how domain separation, such as github.io versus github.com, can protect platforms from security risks.

NPM NodeSerial CTF Walkthrough: Exploit, Hack & Capture the Flag

A hands-on walkthrough of a Node.js capture-the-flag challenge that exploits npm vulnerabilities.

Kubernetes Is Retiring kube-proxy’s IPVS Mode. Canary nftables First

Kubernetes is retiring its IPVS mode for kube-proxy, with nftables proposed as the replacement.

Show HN: Reflota – Open-source data recovery for NTFS/FAT disks with phased copy

Reflota is an open-source tool for recovering data from NTFS and FAT disks using phased copying, shared on Hacker News.

Developer's $300 Embroidery Machine Required a Subscription, So They Built This Open Source Tool

ZigZag is an open source tool that converts SVG art into embroidery stitches and exports several file formats, built to avoid a machine's subscription requirement.

Microsoft says November security updates cause printing issues

Microsoft warned that the November 2026 security updates are causing printing issues for some customers.

Hackers plant GSocket on Linux servers for persistent access

Multiple threat actors are abusing GSocket, a legitimate open-source remote access tool, to maintain persistent access on Linux servers.

Implementing linux daemon that listens for new filesystems. Issues with floppy and optical drives.

A Rust developer describes writing a Linux daemon to detect new filesystems and reports issues with floppy and optical drives.

Beyond AI Applications: How openEuler Is Rethinking the Agentic Infra OS

openEuler is presented as an operating system reworked for agentic AI infrastructure, with secure execution and caching features.

The Company Behind GameOS is Now Building an AI Desktop OS Based on Linux

The company behind GameOS plans KORA, an AI desktop OS based on Linux, due in 2027 for Snapdragon PCs.

Agent Name Service is Now Part of The Linux Foundation

The Linux Foundation now hosts the Agent Name Service, which lets AI agents verify their identity using a domain-style naming and certificate system.

Linux 7.5 To Improve Support For Old ASUS Transformer Hybrid Laptops/Tablets

Linux 7.5 is set to add improved support for older ASUS Transformer hybrid laptops and tablets.

I'm Working on a FOSS Linux Pinbal Simulation Engine

Announces an open source Linux pinball simulation engine project.

Learn Linux and Cybersecurity Skills With Hands-on Interactive Labs

LabEx is an AI-assisted platform offering hands-on interactive labs for learning Linux and cybersecurity skills.

eBPF Rootkits: Why Underground Actors Are Taking Notice

Underground actors are increasingly adopting eBPF-based rootkits that can hide malicious activity on Linux systems and evade traditional detection tools.

Greg Kurtzer's Ginux is now a userspace kernel

Greg Kurtzer has released Ginux, a project described as a userspace kernel, shared on GitHub.

Renaming a GitHub Repo? Some Systems May Still Trust the Old Name.

Explains how renaming a GitHub repository can leave some systems trusting the old name, with implications for npm trusted publishing.

Bringing Rust into Ubuntu at Scale: Interview with Jon Seager

Canonical's Jon Seager explains how Rust utilities were brought into Ubuntu at scale after uutils broke builds.

Ubuntu 26.10 ships with initial support for rustls/upki

Darling Development Update – Q4 2026

Darling, a macOS compatibility layer project, publishes its Q4 2026 development update.

The Command Line Explained: Terminal, Shell, and Why Text Beats Clicking

An introduction to the command line covering terminal, shell, and why typed text beats clicking.

Open-Source PDF Screen Capture & Archival Tool -- rebuilds searchable PDFs from view-only, export-locked documents by capturing the rendered output

Presents an open-source tool that rebuilds searchable PDFs from view-only, export-locked documents by capturing rendered output.

Malware found disguised as 3rd party Plasma Extension: Neonova wallpaper

Malware was found disguised as a third-party KDE Plasma extension for wallpapers.

Help testing Goverlay 2.0 RC1

A Reddit call for testers of Goverlay 2.0 RC1, a Linux gaming overlay tool.