Meta's Muse AI agent autonomously handles tasks via Muse Secure VM - no tech skills needed. Free in the US on iOS, Android, and web.
Related Posts:
Google Overhauls European Search Engine Results
OpenAI Launches ChatGPT Images 2.5 with 50% Lower Latency and Precision Editing
Chrome Moves to a Two-Week Release Cycle Starting with Chrome 153
The post Meta Launches Muse: A Personal AI Agent That Acts on Your Behalf appeared first on Daily CyberSecurity.
Developer JPRX launched Darwin-VM to emulate Apple Silicon systems. This QEMU-based tool assists security researchers with XNU kernel debugging and analysis.
Related Posts:
Apple OpenAI Lawsuit Escalates Over AI Trade Secrets
Chrome Manifest V2 Removal: Legacy Extensions Are Now Gone
Anthropic Bolsters Security After Claude AI Escapes
The post Darwin-VM Enables Apple Silicon Security Research appeared first on Daily CyberSecurity.
Developer JPRX launched Darwin-VM to emulate Apple Silicon systems. This QEMU-based tool assists security researchers with XNU kernel debugging and analysis.
A critical balance accounting error in Cosmos EVM enabled attackers to steal millions of dollars across multiple blockchain networks between August 20 and 25.
Related Posts:
CVE-2026-81934: Redis RCE PoC Exploit Now Public
CVE-2026-78319: SAUTER Controller RCE Flaw Disclosed
CVE-2026-82329 Exploited: JFrog Artifactory Admin Takeover
The post Cosmos EVM Flaw Triggers Multi-Chain Heist appeared first on Daily CyberSecurity.
A critical balance accounting error in Cosmos EVM enabled attackers to steal millions of dollars across multiple blockchain networks between August 20 and 25.
A newly disclosed Linux kernel vulnerability, CVE-2026-53359, dubbed Januscape, has exposed a critical weakness in the Linux Kernel-based Virtual Machine (KVM) hypervisor. The flaw resides in the shadow MMU code and allows attackers to escape a virtual machine (VM), compromise the underlying host, and potentially execute arbitrary code.
Security researchers warn that the issue poses a serious risk to multi-tenant x86 public cloud environments running untrusted guests with nested virtualizati
A newly disclosed Linux kernel vulnerability, CVE-2026-53359, dubbed Januscape, has exposed a critical weakness in the Linux Kernel-based Virtual Machine (KVM) hypervisor. The flaw resides in the shadow MMU code and allows attackers to escape a virtual machine (VM), compromise the underlying host, and potentially execute arbitrary code.Security researchers warn that the issue poses a serious risk to multi-tenant x86 public cloud environments running untrusted guests with nested virtualization enabled.
Januscape Flaw Affects KVM Shadow MMU Code
Discovered by security researcher Hyunwoo Kim (@v4bel), CVE-2026-53359 is described as a use-after-free vulnerability in the KVM/x86 shadow MMU code. According to Kim, the flaw can be triggered entirely from within a guest VM to corrupt the host kernel's shadow page state, ultimately breaking guest-to-host isolation.Kim demonstrated Januscape as a zero-day during Google's KVMCTF bug bounty program, which offers rewards of up to $250,000 for complete VM escape vulnerabilities. The researcher noted that this is the first publicly known KVM guest-to-host exploit research that can be triggered on both Intel and AMD systems, rather than being limited to a single architecture.
CVE-2026-53359 impact and affected systems
Successful exploitation of Januscape can result in complete compromise of the host. Kim explained, "An attacker who has rented just a single instance on a public cloud could panic the host kernel to take down every other tenant VM on the same physical machine (DoS), or run code with root privilege on the host to take over the host and all the guests on it (RCE)."In addition to VM escape, CVE-2026-53359 can enable local privilege escalation on certain Linux distributions. On systems such as Red Hat Enterprise Linux (RHEL), where /dev/kvm is world-writable (0666), unprivileged users may escalate privileges to root.The vulnerability requires root privileges inside the guest VM, which public cloud users typically receive by default. If root access is unavailable, Kim said attackers could chain the flaw with another privilege escalation vulnerability, such as Dirty Frag.
Patch availability and disclosure timeline
According to the official GitHub advisory, Januscape remained hidden in the Linux kernel for roughly 16 years. The affected code spans the commit from 2032a93d66fa (August 1, 2010) through 81ccda30b4e8 (June 16, 2026). The issue was patched in the mainline Linux kernel on June 19, 2026, when commit 81ccda30b4e8 was merged.The advisory states that a proof-of-concept (PoC) executed inside a guest VM can reliably trigger a host's kernel panic within seconds or minutes. While a full VM escape exploit exists in a controlled environment, it has not been publicly released. Following coordinated disclosure through linux-distros@vs.openwall.org and the end of the agreed embargo, the exploit details were published on oss-security along with technical documentation.The advisory also clarifies that CVE-2026-53359 affects only Intel and AMD-based KVM hosts, not arm64 systems. It further notes that the vulnerability exists within KVM's in-kernel MMU code, making it independent of QEMU's emulation and potentially impacting cloud providers using custom virtualization stacks. Administrators running multi-tenant x86 KVM hosts with nested virtualization are advised to ensure the 81ccda30b4e8 patch has been applied.
Entrar
