Security Affairs newsletter Round 575 by Pierluigi Paganini - INTERNATIONAL EDITION

Here are the key points from the Security Affairs newsletter:

1. Major Linux vulnerability: A critical flaw affecting all major Linux distributions was discovered that could allow root access with just 732 bytes of code.

2. GitHub RCE vulnerability (CVE-2026-3854): Researchers uncovered a Remote Code Execution vulnerability in GitHub.com and GitHub Enterprise Server.

3. AI fueling cybercrime: The time to exploit vulnerabilities is rapidly shrinking due to the use of artificial intelligence by cybercriminals.

4. Malware targeting Minecraft players: A new malware called LofyStealer is specifically targeting users of the popular game Minecraft.

5. Firefox privacy vulnerability: Researchers found a way to link all private Tor identities in Firefox, compromising user anonymity.

6. GitHub supply chain attack: The Lightning Python package was compromised, infecting 8.3 million downloads in a Shai-Hulud supply chain attack.

7. Tennessee bans cryptocurrency ATMs: Due to concerns about scams and fraud, Tennessee has banned cryptocurrency ATMs statewide.

8. Meta potentially violating Digital Services Act: The EU Commission is investigating whether Meta (Facebook) violated the Digital Services Act by allowing users under 13 on Instagram and Facebook.

9. NC

Read the full article at Security Affairs

---

Want to create content about this topic? Use Nemati AI tools to generate articles, social posts, and more.