Linux

Cybersecurity researchers have identified QuimaRAT, a Java-based remote access trojan (RAT) capable of targeting Windows, Linux, and macOS systems. The malware is offered as a malware-as-a-service (MaaS) model with subscription tiers ranging from $150 per month to $1,200 for lifetime access.

GIMP 0.54, the 1996 version of the GNU Image Manipulation Program, has been revived as a Flatpak for modern Linux systems, allowing it to run without outdated dependencies. The article highlights its historical significance, including the transition from Motif to gtk/gdk toolkits and recent GIMP 3.x releases.

Cryptographic keys securing computer boot sequences for Windows and Linux systems will begin expiring on June 24. This deadline affects the security mechanisms protecting these operating systems during startup.

The article compares Epoll and Io_uring, two I/O multiplexing mechanisms in Linux, discussing their performance and use cases. It includes a link to the full analysis and Hacker News comments.

Linux has removed the strncpy API after six years of development work, involving 360 patches. The change was reported by Phoronix and discussed on Hacker News with 4 comments.

SteamOS Linux 3.8 has been released as a stable version. The release is available on Steam's official store page.

System76, a Linux-first PC vendor founded by Carl Richell with $1,500, has grown into a vertically integrated company producing hardware and software in Denver. The company prioritizes open-source principles, avoids venture capital, and targets business clients with Linux-based systems for engineering and research.

The Logitech MX Master 3S wireless mouse is discounted to $89.99 at Amazon, featuring a second scroll wheel, cross-platform compatibility, and customizable buttons. It is praised for comfort and functionality, with a newer MX Master 4 model available at a higher price.

A GitHub issue requests an official Claude Desktop application for Linux by Anthropic, with the article receiving 50 points and 25 comments on Hacker News.

Microsoft has released coreutils, a Rust-built multi-call binary for Windows that includes over 75 Unix commands like grep, ls, and cat, aiming to standardize user commands across platforms. The tool, derived from the MIT-licensed uutils project, allows Linux commands to function in Windows CMD and PowerShell, benefiting developers and Linux users.

A GitHub project named nbd-vram allows Linux users to utilize their Nvidia GPU's VRAM as swap space. The article provides a repository link and Hacker News discussion thread for further details.

Microsoft announced the release of Coreutils for Windows at its Build 2026 developer conference, bringing commonly used Linux command-line utilities to Windows as native applications.

Microsoft announced new Linux tools for Windows developers and introduced the Surface RTX Spark Dev Box, a compact PC featuring Nvidia's RTX Spark chip with up to 128GB memory. The company also highlighted AI advancements like Microsoft Scout and Codename MDASH during its Build conference.

Microsoft is introducing a developer-optimized Windows 11 experience at its Build conference, featuring enhanced Linux integration through tools like command line utilities, Linux containers, and a new Intelligent Terminal. The update focuses on performance, reliability, and a streamlined setup for developers.

AMD is reintroducing Linux support for the BASIC version of Vivado, a tool used for FPGA development. The move addresses user demand for cross-platform compatibility.

Acer is launching the Nitro Blaze Link, a Linux-based handheld designed for streaming PC games rather than local play. It features a 7-inch display, Wi-Fi 6, 1GB RAM, and 8GB storage, with a Q4 2026 release. The device is compared to Logitech's underperforming G Cloud handheld.

AMD altered Vivado's licensing terms, restricting Linux users from accessing the tool, leading to accusations of bait-and-switch. The change affects developers who relied on Vivado for FPGA design on Linux systems, sparking backlash in tech communities.

California's Digital Age Assurance Act (AB 1043) may exempt open-source operating systems like Linux and FreeBSD from age verification requirements. Proposed amendments, including AB 1856, define 'open source' to exclude entities requiring age checks, potentially freeing Linux vendors from compliance. The Electronic Frontier Foundation and others criticize the law for stifling digital liberties and entrenching major OS providers.

California is moving to exempt Linux from its upcoming age-verification law following backlash over requiring operating systems to collect user ages. The amendment, proposed by the original law's author, aims to address concerns about the law's impact on open-source software.

AMD's Vivado 2026.1 is removing Linux support from its free tier, affecting developers relying on open-source platforms. The change has sparked questions about AMD's strategy and potential impacts on cross-platform development.

A coordinated supply chain attack has compromised eight packages on Packagist, injecting malicious code that executes a Linux binary hosted on GitHub Releases. The attack targeted JavaScript projects by inserting malicious content into package.json, bypassing composer.json in Composer packages.

Cybersecurity researchers have disclosed a new Linux malware called Showboat that has been targeting a Middle East telecommunications provider since mid-2022. The malware is a modular post-exploitation framework capable of spawning remote shells, transferring files, and functioning as a SOCKS5 proxy backdoor.

Chinese hackers have launched a cyber-espionage campaign targeting telecommunications providers using two newly discovered malware variants: Showboat for Linux systems and JFMBackdoor for Windows systems. This attack represents a significant threat to critical infrastructure in the telecom sector.

Flipper Devices has unveiled a new Linux-powered networking gadget designed for hackers and tinkerers. The device is currently in development with a base model priced under $350.

A security bulletin highlights emerging threats including Linux rootkits, router zero-days, AI-based intrusions, and scam kits. The report warns that attackers are increasingly exploiting trusted system components like updates, applications, and cloud services rather than breaking in through traditional means.

Flipper Devices, creator of the Flipper Zero pentesting tool, is seeking community assistance to develop Flipper One, an open-source Linux platform designed for connected devices. The project represents an effort to create an open alternative platform in the IoT and pentesting space.

Rmux is a new terminal multiplexer written in Rust that provides both a tmux-compatible CLI and a typed async Rust SDK for programmatic terminal automation. The tool addresses the limitations of tmux by offering Playwright-style automation capabilities with features like stable pane IDs, structured snapshots, and locator-style waits, while maintaining native support across Linux, macOS, and Windows.

Cybersecurity researchers have disclosed a 9-year-old Linux kernel vulnerability (CVE-2026-46333) with a CVSS score of 5.5 that enables unprivileged local users to execute arbitrary commands as root on major Linux distributions. The flaw involves improper privilege management and affects default installations across several major distros.

The Software Freedom Conservancy has been fighting for eight years to force Vizio to release the complete source code for its Linux-based smart TV operating system. A California jury will decide in August whether Vizio must provide the code to SFC and any Vizio TV owner who wants it. The case centers around users' right to tweak smart TV software.

A proof-of-concept exploit has been released for the PinTheft Linux privilege escalation vulnerability, allowing local attackers to gain root privileges on Arch Linux systems. The vulnerability was recently patched. This exploit allows attackers to escalate their privileges.

Firefox version 151 has been released with new features, including a fresh new look and feel for the New Tab page, improved handling of Firefox Backup, and the ability to merge multiple PDFs into one. The release also includes over 30 security fixes and improvements to multi-monitor handling and macOS integration. Thunderbird 151 has also been updated with new features.

A proof-of-concept exploit code has been released for a Linux kernel vulnerability known as DirtyDecrypt, which could allow for local privilege escalation. The vulnerability was discovered by the Zellic and V12 security team on May 9, 2026. It was found to be a duplicate of a previously known vulnerability.

A Linux kernel flaw, CVE-2026-46333, allows local unprivileged users to access root-only files, including SSH keys. The bug affects multiple LTS kernel lines from 5.10 upward, but a fix has already been implemented. The issue was reported by security consultancy Qualys and has been addressed by Linus Torvalds.

Linux founder Linus Torvalds stated that the Linux security list is becoming unmanageable due to a flood of AI-generated bug reports, resulting in significant duplication. This issue does not apply to specific exploits like the Copy Fail exploit, which was detected with AI assistance. The Linux security list is struggling with manageability.

Linux security mailing list has become almost unmanageable due to AI-powered bug hunters, according to Linus Torvalds. The Linux security mailing list is struggling to keep up with the volume of reports. This has led to concerns about the effectiveness of the list in addressing security issues.

A proof-of-concept exploit is available for a recently patched local privilege escalation vulnerability in the Linux kernel's rxgk module, allowing attackers to gain root access on some Linux systems. The vulnerability is a DirtyDecrypt Linux root escalation flaw. This exploit poses a security risk to affected Linux systems.

Linus Torvalds stated that the Linux security mailing list has become almost entirely unmanageable due to duplicate bug reports from AI-powered tools. He emphasized the need for productive use of AI tools and adding real value beyond automated reports. The situation highlights the challenges of leveraging AI in software security.

The asp-classic-emulator allows users to run ASP Classic on macOS, Linux, and BSD operating systems. The project is hosted on GitHub and has been shared on news.ycombinator.com. The emulator has received 3 points but no comments so far.

The article discusses the Linux kernel startup process, providing an in-depth understanding of the Linux kernel. It covers the key aspects of the startup procedure, aiming to educate readers on the internal workings of the Linux operating system. The discussion is centered around the technical aspects of the Linux kernel.

A Linux kernel local privilege escalation flaw called Fragnesia has been discovered, allowing unprivileged users to gain root access by corrupting page cache memory. The bug is tracked as CVE-2026-46300 and has public proof-of-concept exploit code available. Linux vendors have started pushing out advisories and mitigation guidance to patch the vulnerability.