Zero Day Initiative
Zero Day Initiative business and news from across the web.
Latest coverage
A public outing of severe and unfixed Linux kernel vulnerabilities should have you thinking of updating your SteamOS or…
A significant number of unpatched Linux kernel vulnerabilities, some scoring as high as 9.0 on the CVSS scale, were accidentally disclosed on a public mailing list. These vulnerabilities, including remote code execution and privilege escalation flaws, were reported by Trend Micro's Zero Day Initiative and have been jumped on by kernel maintainer Greg Kroah-Hartman. While some patches are in testing or queued for beta branches, many remain unaddressed, leaving Linux systems potentially exposed.
It's probably time to update 7-Zip as the app has just been patched to fix a pretty big vulnerability
A significant vulnerability in the file compression application 7-Zip has been patched, requiring users to manually update to version 26.02 or later. The vulnerability allows for arbitrary code execution if a user interacts with a malicious file or webpage. This fix was reported by Lunbun LLC and released by 7-Zip after a few weeks.
