Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
STAR Labs published a Linux kernel exploit for CVE-2026-53264 (CVSS 7.8), a use-after-free race condition in the network traffic-control subsystem that allows local privilege escalation to root on CentOS Stream 9. Researcher Lee Jia Jie used AI to discover the bug and accelerate exploit development.
STAR Labs has disclosed a Linux kernel vulnerability, CVE-2026-53264 (CVSS score: 7.8), which allows local privilege escalation to root on CentOS Stream 9. The flaw resides in the kernel’s traffic-control subsystem and involves a use-after-free race condition.
The APT group Mirage Kitten (also known as UNC1549, Smoke Sandstorm, or Nimbus Manticore) has been targeting aerospace, aviation, defense, and telecommunications sectors in the Middle East and Africa with a new malware toolkit. Their attacks involve spear-phishing campaigns using fake recruitment portals and impersonated videoconferencing pages to deliver malicious payloads.
Kaspersky identifies Mirage Kitten APT using previously undocumented malware for cyber-espionage. The group employs custom backdoors and tunnelers to maintain covert access and exfiltrate data.
Microsoft has introduced a new cybersecurity AI model called MAI-Cyber-1-Flash, integrated into its MDASH vulnerability identification and remediation system. The model, combined with GPT-5.4, achieved a 95.95% score on CyberGym Level 1, a known-vulnerability reproduction test, while reducing costs by 50% compared to Microsoft's previous MDASH configuration.