Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
CVE-2026-64600, known as the RefluXFS vulnerability, is a critical Linux kernel flaw that allows local privilege escalation to root. The issue stems from a race condition in the XFS filesystem’s copy-on-write path, enabling an unprivileged local attacker to overwrite protected files on disk.
This advisory highlights RefluXFS, a Linux kernel vulnerability caused by a race condition in XFS copy-on-write handling. An unprivileged local attacker can abuse concurrent O_DIRECT writes to corrupt on-disk data and gain root privileges.
AhnLab's ASEC team published a threat trend report for June 2026, focusing on domestic Advanced Persistent Threat (APT) attacks in South Korea. The report provides classification and statistics on these covert attacks, detailing the capabilities of each APT type targeting the country's infrastructure.
The second quarter of 2026 saw significant shifts in the email threat landscape, largely influenced by Microsoft’s Digital Crimes Unit’s disruption of the Tycoon2FA phishing-as-a-service (PhaaS) platform in March. Phishing volumes linked to Tycoon2FA plummeted by 92% compared to pre-disruption levels, with QR code phishing and CAPTCHA-gated phishing tactics experiencing notable declines.
AhnLab's June 2026 threat trend report details domestic APT attacks monitored via their infrastructure. It provides classification, statistics, and capabilities of various APT attack types.
AhnLab's May 2026 APT Threat Trend Report compiles statistics and analysis of advanced persistent threat attacks monitored against South Korean targets using AhnLab's detection infrastructure. The report categorizes attack types and highlights the persistent, covert nature of APT operations targeting the country.