News, guides and releases from the free software world
The developer of HyprBSD, a FreeBSD 15.1 system with a Hyprland desktop, has backported the VirtIO virtual graphics support that Daemonarchy, Jordan Hubbard's Omarchy for FreeBSD, already had on FreeBSD 16-CURRENT. The result: Hyprland inside Hyprland, with FreeBSD as the guest.
Read more →The first release candidate of Omarchy 4.5, DHH's distribution built on Arch Linux and Hyprland, brings an aarch64 ISO with support for Snapdragon X and NVIDIA N1X laptops, absorbs Omarchy Mac, translates the system into 50 languages and adds per-monitor workspaces, a dock and one-second boots.
Read more →OpenBSD 8.0, the system's 61st release, ships on 20 October 2026 with the amd64 kernel address space raised to 512 GB, initial Intel Arc support, arm64 hibernation, RISC-V vectors, OpenSSH 10.6 and LibreSSL 4.4. Version 7.8 stops getting patches.
Read more →Gentoo Linux has asked companies and organisations to help replace several sponsors that stopped providing infrastructure this year. It is looking for rack space, server hosting and hardware donations. It doesn't say who left or how much is missing, and no service is down. Here is what it is asking for, how to help, and what it has, or hasn't, to do with DigitalOcean ending its credits.
Read more →Proton OS is a new Linux distribution based on Debian 13 with KDE Plasma, aimed at small businesses moving away from Windows. It ships with the firewall and AppArmor enabled, LibreOffice, ONLYOFFICE, Brave and WinBoat to run Windows programs. It is two months old with a single person behind it, and its own repository pins the kernel, which clashes with the automatic security updates it promises. Here is what it offers and why it does not have a directory page yet.
Read more →How OpenBSD turned security into a philosophy: code audits, secure by default, OpenSSH, LibreSSL and mitigations like pledge and unveil that the whole internet now relies on.
Read more →The story of BeOS, the multimedia OS Apple nearly bought instead of NeXT, and Haiku, the open-source project that has recreated and kept it alive since 2001.
Read more →Learn how LineageOS and postmarketOS extend the life of an old phone with real updates, free software and up to 10 years of support, instead of landfill.
Read more →ChromeOS is Google's operating system built on the Linux kernel and originally on Gentoo. Explore its history, security model, Android apps, Crostini and ChromeOS Flex.
Read more →TacOS (Tecnología Abierta Comunitaria Operating System) is an experimental distribution made in Mexico by Iván Chavero on top of Fedora Rawhide. It swaps version numbers for channels (stable, unstable, custom), ships tacosctl, a Rust tool that tests updates in a microVM before touching the system, and an installer that writes a Btrfs snapshot to disk in 8.18 seconds. It is pre-alpha and less than three months old: here is what it offers and why it does not have a directory page yet.
Read more →A journey through the history of Windows: from MS-DOS to Windows 1.0, 95, NT, XP, 7, 10 and 11, the NT kernel, Windows Server and WSL alongside Linux.
Read more →Learn how Linux namespaces isolate processes and cgroups cap resources inside the kernel. The real foundation of Docker, Kubernetes and systemd, explained step by step.
Read more →Android runs on the Linux kernel across billions of devices, yet it is not GNU/Linux. Learn why, its history, and how it really relates to Linux.
Read more →vivo has unveiled OriginOS 7 at its developer conference in Shenzhen: the seventh version of the system on vivo and iQOO phones, now on Android 17. Liquid Glass interface with three modes, Blue River engine with Virtual GPU 4.0 (14% faster, vivo says), Atomic Workbench on regular phones, storage compression promising up to 20 GB freed, and the Blue Heart assistant with multi-turn dialogue. Beta already running in China; the stable build reaches flagships in October and budget phones in 2027.
Read more →HP-UX lost standard support in December 2025. Meanwhile z/OS, IBM i, AIX and an OpenVMS ported to x86 remain in production, and the community keeps Solaris's legacy running through illumos.
Read more →From BIOS/UEFI firmware to the kernel and systemd: understand what GRUB does at boot, the role of initramfs, dual boot, and lighter alternatives like systemd-boot.
Read more →AWS has opened the public preview of Amazon Linux 2027: Linux kernel 7.1, SELinux in enforcing mode, DNF5, RPM 6, systemd 260, GCC 16.1, Python 3.14 and the AWS-LC library alongside OpenSSL. Not for production, but the right moment to find out what breaks when moving from AL2023. Support planned until 2032.
Read more →FreeBSD 14.5-RELEASE is the sixth release of stable/14 and arrives late in a branch that is now legacy: bug fixes, driver updates and refreshed third-party software, no headline features. Supported until June 2027, it keeps what already runs on 14 going. For a fresh install, the project points at 15.1.
Read more →GentleOS/32 boots on a 386 with 1 MB of RAM and GentleOS/16 goes all the way down to an 8086 with a CGA display. Both are free software, written in plain C, and useless for anything practical. That's the whole point.
Read more →A journey through the history of Linux gaming: from Loki's ports in 1998 to Steam, Proton and the Steam Deck. Learn how to game on Linux today.
Read more →Eight systems where the root directory is read-only and updates arrive as whole images with rollback. What they solve, what they take away, and when each one is worth it.
Read more →What SELinux and AppArmor are, how Mandatory Access Control (MAC) hardens Linux beyond classic permissions, and how the two big process-confinement systems differ.
Read more →A practical guide to lightweight Linux desktops: XFCE, LXQt, Openbox and MATE. Low RAM usage and snappy performance on modest or aging hardware.
Read more →A practical guide to leaving vSphere for Proxmox VE: inventory, pilot, batches and final cutover. What you gain, what costs more than it looks, and the details that leave a VM booting slowly if you forget them.
Read more →We went through the entire Free Linux catalogue: it grows from 117 to 207 systems, with a new category for real-time ones. Along the way we found versions frozen since July and a handful of dates that were simply wrong.
Read more →Explore the history of KDE, the desktop environment born in 1996 from Matthias Ettrich, its famous Qt licensing controversy and its journey to Plasma 6.
Read more →How Kubernetes orchestrates Linux containers at scale: its Google Borg origins, kernel primitives, cluster nodes, and runtimes like containerd and CRI-O explained.
Read more →Explore the history of GNOME: its 1997 birth as a free alternative to KDE, the GNOME 2 era, the GNOME Shell revolution, the controversy, and where it stands today.
Read more →A clear comparison of the three most serious privacy distros: amnesic Tails over Tor, Qubes OS security by compartmentalization, and Tor-isolated Whonix.
Read more →A journey through the history of the Unix shell: from the 1971 Thompson shell to the Bourne shell, Bash, and modern alternatives like zsh and fish.
Read more →Explore the history of NixOS, the distribution built on Eelco Dolstra's Nix package manager: declarative configuration, isolated builds and atomic rollbacks.
Read more →Learn why containers aren't virtual machines and how Linux kernel namespaces, cgroups and capabilities make Docker, runc and the OCI standard possible.
Read more →How Alpine Linux went from an embedded distro to Docker's favorite base image: musl libc, BusyBox, apk and OpenRC packed into just 5 MB.
Read more →Linux runs most web servers, 100% of the TOP500 and 90% of cloud workloads. Discover why it won and which distributions make it the backbone of the internet.
Read more →Explore the history of Manjaro Linux since 2011: how it brought the power of Arch to less technical users through easy installation, its own repos and exclusive tools.
Read more →SysV, Upstart, systemd and OpenRC fought over Linux's PID 1. We trace the history, Debian's tense 2014 vote and the alternatives still standing today.
Read more →Explore the history of Kali Linux and BackTrack, from the 2006 merger of WHAX and Auditor to Offensive Security's Debian-based rolling release for ethical hacking.
Read more →GNOME vs KDE Plasma compared: philosophy, customization, performance and resources. We help you choose the right Linux desktop environment for you in 2026.
Read more →A practical guide to lightweight Linux distros for old hardware: antiX, Puppy, Bodhi, Lubuntu and Tiny Core, with real criteria and honest advice.
Read more →Explore the history of Linux Mint, from its 2006 origins under Clément Lefèbvre to becoming the favorite distribution for people switching away from Windows.
Read more →A clear comparison of ext4, Btrfs and ZFS: stability, snapshots, copy-on-write and the licensing conflict that keeps ZFS out of the Linux kernel.
Read more →How Fedora, RHEL, CentOS and the clones fit together, and the 2020 earthquake that gave birth to Rocky Linux and AlmaLinux. The full Red Hat family story.
Read more →The history of Gentoo Linux: from Enoch to the Portage manager. How Daniel Robbins built the distro that compiles everything from source with USE flags and total control.
Read more →Oracle ships VirtualBox 7.2.12, a maintenance release of the 7.2 branch: it fixes a kernel panic on Linux hosts, improves DX11 performance on Windows guests and resolves NASM build issues.
Read more →A real-world comparison of Flatpak, Snap and AppImage: sandboxing, size, dependencies and controversy. Learn which universal Linux package format to pick.
Read more →Yocto Project 6.0 «Wrynose» is an LTS supported until at least April 2030: Linux 6.18 LTS, GCC 15.2, Rust in the kernel, and SBOM and CVE-tracking improvements aimed at the EU CRA.
Read more →What systemd is, why nearly every Linux distribution adopted it, and why it still fuels one of the fiercest debates in the open source world.
Read more →Linux kernel 7.1 ships a rewritten NTFS driver with full write support, enables Intel FRED by default, drops 486 support and removes UDP Lite. A look at the current stable series.
Read more →A journey through SUSE and openSUSE history: from S.u.S.E. in 1992 to Leap, Tumbleweed, YaST and SLES. One of the oldest Linux distributions still going strong.
Read more →The fifth service release of OpenWrt 25.12 patches several vulnerabilities in network services enabled by default, including CVE-2026-53921, a critical buffer overflow in odhcpd.
Read more →A clear guide to apt, dnf, pacman, zypper and more: how Linux package managers work, with repositories, dependencies and signatures explained plainly.
Read more →A look at Apple's June 29, 2026 security updates: iOS, iPadOS and macOS 26.5.2 fix 37 CVEs, 31 of them in WebKit and WebRTC, plus four kernel flaws.
Read more →Debian releases 13.6, the sixth revision of the stable trixie branch. It bundles 84 security advisories and fixes for apache2, curl, qemu, samba and the kernel, plus fwupd changes for Secure Boot.
Read more →Why did Netflix, Sony and WhatsApp pick FreeBSD? The story of the free UNIX that quietly powers the internet at massive scale while almost nobody notices.
Read more →Slackware was created in 1993 by Patrick Volkerding. Explore its history, UNIX philosophy, pkgtool package management and why it remains the longest-living Linux distro.
Read more →X11 vs Wayland compared: history, architecture, security, performance and the NVIDIA problem. Find out why Wayland is already the present of the Linux desktop.
Read more →How the UNIX and BSD lineage reached macOS through NeXT and Steve Jobs: from NeXTSTEP to Darwin, the XNU kernel and official UNIX certification.
Read more →Explore the history of Arch Linux from its creation by Judd Vinet in 2002, its rolling release model, pacman, the AUR and the KISS philosophy that defines it.
Read more →A journey through the history of Red Hat Linux and Fedora: from Marc Ewing in 1994 to the RHEL and Fedora split, dnf, Btrfs by default and the IBM era.
Read more →Discover why Debian powers half the internet: its 1993 origins, its Social Contract, the apt system and the many distros built on top of it.
Read more →Learn what Richard Stallman's GNU project really is, the four freedoms of free software, and why so many people insist the system you use is called GNU/Linux.
Read more →We rebuilt LinuxGratis with Astro 7 and host it on Stackscale's private cloud: a faster operating system directory, always-fresh data and a brand new articles section.
Read more →How Linus Torvalds built the Linux kernel in 1991, the GPL license, the first distributions and why it now powers servers, phones and supercomputers.
Read more →The other great free-software lineage. How Berkeley turned UNIX into BSD and gave rise to the systems powering Netflix, the PlayStation and half the internet.
Read more →Before Linux, before BSD, before macOS there was UNIX. The story of the system born in 1969 that laid the foundations of almost every modern operating system.
Read more →Hundreds of distros, a single kernel. Explore the Linux family tree: where Debian, Red Hat, Arch and Slackware come from, and why all that variety is a real strength.
Read more →Hans de Goede proposes a DT-ACPI hybrid mode in the Linux kernel to leverage the ACPI tables on Qualcomm Snapdragon X laptops. It already works on a ThinkPad T14s Gen 6 with keyboard and touchpad via ACPI.
Read more →Linus Torvalds reluctantly merged the sched_ext changes for Linux 7.2 but slammed the loose ext_* files dropped into kernel/sched. Days later a pull request moved them into kernel/sched/ext/.
Read more →Canonical brings Livepatch to Arm64: critical kernel patches without rebooting, landing with Ubuntu 26.04 LTS and Ubuntu Core 26.
Read more →A campaign tricks macOS users into pasting a command into Terminal. It abuses curl and hdiutil to mount a hidden DMG and install the AMOS infostealer.
Read more →OpenNebula ships Slurm appliances in its Marketplace for GPU-based AI training, with PCI passthrough, InfiniBand over SR-IOV, and a preview of OneSlurm as a managed service layer.
Read more →The optional KB5095093 update for Windows 11 24H2 and 25H2 brings Point-in-Time Restore, a VSS-based recovery that rolls the whole PC back to a state from the last 72 hours.
Read more →XCP-ng ships its second June patch set for 8.3 LTS: it fixes XSA-491 and XSA-492, an SMB kernel driver flaw and an lldpd over-read, and bumps DRBD, XAPI, the Intel ice driver and the Windows Guest Tools.
Read more →What Hyper-V nested virtualization is, what it's good for, and its limitations according to Microsoft's documentation.
Read more →OpenNebula argues that moving to VMware Cloud Foundation 9.1 is a full infrastructure redesign rather than a simple upgrade, and proposes KVM as a lighter path ahead of the vSphere 8 end of support in 2027.
Read more →Canonical explains how Ubuntu supports RISC-V custom instructions, with PPAs for stateless cases and an image cookbook when you need your own kernel.
Read more →Debian shipped DSA-6360-1 to fix four Squid proxy vulnerabilities, among them Squidbleed (CVE-2026-47729), which can leak other users' HTTP headers. What it affects and how to update.
Read more →postmarketOS 26.06 'Alpen Avocado' moves to Alpine Linux 3.24, ships GNOME 50, Plasma Mobile 6.6.5 and Phosh 0.55, switches to Plymouth and systemd 261, and reaches 254 devices in testing.
Read more →PorteuX 2.7 arrives with the Linux 7.1 kernel, KDE Plasma 6.7, GNOME 50.2 and eight desktops as standalone flavors. NTFS-plus driver, a native cursor theme and more.
Read more →Ubuntu LTS versions get 5 years of support. We explain what LTS means, how often they ship and which one fits your case.
Read more →SparkyLinux 2026.06 arrives based on Debian Testing "Forky", with the Linux 7.0 kernel by default, support for Linux 7.1, and Calamares 3.4.2.
Read more →Microsoft starts moving Experimental channel devices to Windows 11 26H2 via an enablement package. Builds 26300.8697 and 26220.8690, the Dev channel shift, and why 26H1 machines are left out.
Read more →After its deal with CADE, Apple allows alternative app marketplaces and external payments on iOS in Brazil. The changes ship with iOS 26.5 and add Notarization plus safeguards for minors.
Read more →Ubuntu fixes several libheif vulnerabilities in advisory USN-8454-1. A crafted HEIF or AVIF image could cause denial of service or code execution. Here's who is affected and how to update.
Read more →A malicious MediaTek 5G modem can read up to 262140 bytes of kernel memory through the t7xx driver. What it affects, severity, and how to patch.
Read more →The three Hyper-V virtual switch types and when to use each one, with the Hyper-V Manager steps and the PowerShell cmdlets.
Read more →The latest Raspberry Pi OS image arrives with the 6.18.34 LTS kernel, Labwc 0.9.7, and desktop refinements on top of the Debian 13 Trixie base. Here's what changed.
Read more →Tails 7.9 is out: Tor Browser 15.0.16, updated firmware for newer hardware and a Secure Boot notification fix. Download the latest stable version.
Read more →Canonical integrates Golioth as a snap on Ubuntu Core to manage Nordic and STM32 microcontrollers running Zephyr: OTA with rollback, mutual TLS, and the Pouch protocol.
Read more →Anbox Cloud 1.30.0 adds virtualized Android, letting you run complete system images in lightweight VMs with their own kernel, alongside the existing container model.
Read more →Mishandling of large headers in nginx's proxy_v2 and gRPC modules can restart the worker and, without ASLR, lead to code execution. F5 fixes it in 1.31.2 and 1.30.3; Ubuntu ships USN-8458-1.
Read more →A use-after-free in NGINX's HTTP/3 module lets an unauthenticated remote attacker crash worker processes, and on systems without ASLR potentially run code. It affects 1.31.0 and 1.31.1; fixed in 1.31.2.
Read more →MATE's Atril document viewer carried a command injection (CVE-2026-46529) allowing one-click code execution. Debian fixed it in Trixie and Bookworm.
Read more →OpenNebula frames VMware-to-KVM migration as a three-phase process built around OneSwap, with delta migration cutting downtime from hours to minutes and a 90% automatic conversion rate in real projects.
Read more →Lech Sandecki lays out how Canonical handles the wave of flaws surfaced by AI models: security updates in 24 hours, coordinated disclosure and up to 15 years of support with Ubuntu Pro.
Read more →The first point release for Plasma 6.7 fixes a Discover crash on rpm-ostree distros, two Kickoff regressions, and several clipboard and KWin issues.
Read more →The KDE Project ships Plasma 6.7 with independent virtual desktops per monitor, a global push-to-talk shortcut, Wayland session restore and the return of KDE 4's Air theme.
Read more →Canonical walks through turning Ubuntu Core 26 into a local AI inference appliance using Multipass and the gemma4 snap, with an OpenAI-compatible API before touching real hardware.
Read more →VirtualBox 7.2.10 fixes a VMM bug that stopped CentOS 10 from booting, restores OS/2 boot under E1000, and solves startup of ARM machines with little RAM.
Read more →VirtualBox 7.2.10 adds initial Extended Data Control Protocol support for clipboard sharing with Plasma on Wayland guests, skips vboxvideo on kernel 7.0+, and restores OS/2 clipboard and shared-folder automount.
Read more →Oracle shipped VirtualBox 7.2.10 on June 16, 2026 with fixes across VMM, EFI, USB, storage, network and Guest Additions. It is the latest available release of the 7.2 branch.
Read more →Oracle ships VirtualBox 7.2.10 with initial Linux 7.1 support, better RHEL 9.8 compatibility, and several fixes for Linux hosts and guests.
Read more →VirtualBox 7.2.10 fixes USB attachment to headless VMs on Apple Silicon/macOS 26.4.1 and makes VIRTIO-SCSI report as an SSD to guests.
Read more →Oracle's April 2026 Critical Patch Update included CVE-2026-35248, a Core flaw in VirtualBox 7.2.6 rated CVSS 5.0. The current 7.2.10 branch already sits above the affected release.
Read more →The GNU Linux-libre project ships version 7.1 based on Linux 7.1, deblobbing new drivers for Lontium LT8713SX, Realtek 802.11be chips and Qualcomm SoCs.
Read more →Hyper-V on Windows 10 and 11 offers two checkpoint types: standard, which also saves the memory state, and production, which uses VSS or File System Freeze for a data-consistent copy. Here's when to use each.
Read more →Kernel 7.1 extends Landlock to UNIX sockets, turns on Intel FRED by default, and ships two networking changes (IPv6 and UDP-Lite) that can break custom kernel builds.
Read more →Linus Torvalds announces Linux 7.1 with a new NTFS implementation that supports full write, improved amd-pstate and intel_idle drivers, exFAT changes, and security hardening.
Read more →A bounds-checking flaw in virtio_blk_handle_scsi lets a VM with CAP_SYS_ADMIN corrupt the heap and take down the host QEMU process. CVSS 8.2. Update to QEMU 9.2.1.
Read more →The Devuan edition of Peppermint OS now builds on Devuan 6 Excalibur, with Xfce 4.20, kernel 6.12 LTS, three init systems and Calamares on Qt 6.
Read more →Microsoft ships new Insider builds with a Windows Update that bundles drivers, .NET and firmware into one monthly restart, more typo-tolerant search, and per-app release notes.
Read more →Cisco and Canonical publish a Cisco Validated Design for deploying AI at the edge with Ubuntu Server 24.04.3 LTS, Cisco Unified Edge hardware and an automated operator stack.
Read more →Proxmox Mail Gateway 9.1 ships on Debian 13.5 with Linux kernel 7.0, an improved spam quarantine interface and native encryption to Proxmox Backup Server.
Read more →Qubes OS 4.3.1 is now available: consolidated security updates, bug fixes and a Fedora 43 template in the most secure operating system based on compartmentalization.
Read more →An OWA XSS lets attackers run JavaScript just by getting a user to open an email in the browser. Microsoft had already mitigated it in May, and CISA listed it as actively exploited.
Read more →Hyunwoo Kim disclosed ITScape, a use-after-free in KVM/arm64's vGIC-ITS cache that lets a guest VM run code as root on the host. What it is, who it affects, and how to patch it.
Read more →Hyper-V Live Migration moves running virtual machines from one host to another with no perceived downtime. Since Windows Server 2016 it no longer requires Failover Clustering.
Read more →Alpine Linux 3.24 ships the Linux 6.18 LTS kernel, the GNOME 50, KDE Plasma 6.6, and COSMIC desktops, Sway 1.12, and Limine bootloader support with IPv6 in the installer.
Read more →Microsoft fixed a CVSS 9.8 flaw in the Windows DHCP Client Service in June 2026 that could allow remote code execution. It affects every Windows system with a DHCP client.
Read more →A malformed S/MIME message can free a BIO the application still owns during PKCS7_verify(). It affects OpenSSL 1.0.2, 1.1.1, 3.0, 3.4, 3.5, 3.6 and 4.0.
Read more →A flaw in the HTTP.sys kernel driver allows unauthenticated RCE through oversized HTTP requests. It hits IIS, WinRM and WCF, but only if you raised MaxRequestBytes.
Read more →A resource-consumption flaw in Windows' HTTP/2 implementation lets a remote attacker cause denial of service by sending very little data. CVSS 7.5, fixed in the June 2026 Patch Tuesday.
Read more →A flaw in the KTLS receive path lets an unprivileged user overwrite arbitrary files over loopback. Affected versions, the June 9, 2026 patch, and the mitigation.
Read more →An unprivileged local user could inject a library with LD_PRELOAD into a setuid Linux binary running under FreeBSD's Linuxulator and inherit its privileges. What breaks, who is affected, and how to patch.
Read more →A hardware flaw in Cortex-A, Neoverse and Ampere processors lets software write to memory after page permissions are revoked. FreeBSD ships a kernel mitigation for its 14.x and 15.x branches.
Read more →A clear breakdown of the three pieces behind virtualization in Red Hat Enterprise Linux: KVM in the kernel, QEMU as the emulator and libvirt as the management layer, with virt-manager, Cockpit and virsh.
Read more →OpenNebula Systems joins the Confidential Computing Consortium as a General Member and appears in the '3 Degrees of Confidential Computing' report. A look at confidential VM support over KVM with AMD SEV-SNP, Intel TDX and Arm CCA, plus what OpenNebula 7.2 adds.
Read more →Microsoft patches three Hyper-V remote code execution bugs that let an attacker escape a guest VM and run code on the host server, plus a host memory leak.
Read more →Microsoft fixes 198 vulnerabilities in June 2026, its biggest bulletin to date, with 32 critical flaws, three zero-days and a CVSS 9.8 RCE in the Windows kernel.
Read more →Canonical breaks down RDMA over Converged Ethernet: the difference between RoCEv1 and RoCEv2, why Ethernet needs PFC and ECN, and the kernel drivers Ubuntu ships for AI and HPC networking.
Read more →Alpine Linux 3.24.0 is here: it ships GNOME 50, KDE Plasma 6.6, the COSMIC desktop, plus Limine boot loader and IPv6 support in the installer.
Read more →Xen released four advisories on 9 June 2026. XSA-494 (CVE-2026-42488) allows memory corruption, privilege escalation and host crash; XSA-491 (CVE-2026-42487) lets a device model crash the hypervisor.
Read more →At WWDC26 Apple announced child accounts that are mandatory for kids under 13, expanded Communication Safety, Ask to Browse, and per-category time limits across iOS 27, iPadOS 27, and macOS 27.
Read more →Apple introduces Siri AI, a new version of the assistant powered by Apple Intelligence, with a dedicated app, personal context and on-device processing. It ships on iOS 27, iPadOS 27, macOS 27 and visionOS 27.
Read more →At the WWDC26 opening keynote Apple introduced iOS 27, iPadOS 27, macOS 27, watchOS 27, visionOS 27 and tvOS 27, with the next round of Apple Intelligence, Siri AI and performance gains. They ship free in fall 2026.
Read more →Google patched an out-of-bounds read/write in V8 in Chrome 149.0.7827.103 with an exploit in the wild. What's affected, severity, and how to update.
Read more →Debian fixes authorization bypass, privilege escalation and user impersonation bugs in Keystone for Bookworm and Trixie. Here's what to update.
Read more →Red Hat patches CVE-2026-37457 and CVE-2026-37459 in FRRouting: two ways to crash the bgpd daemon with a crafted BGP UPDATE. Update to FRR 10.4.4 on RHEL 10.
Read more →Red Hat fixes a denial of service in the PostgreSQL JDBC driver on RHEL 10. A hostile server forces a runaway PBKDF2 computation during SCRAM-SHA-256 authentication. CVSS 7.5.
Read more →Broadcom patches three stored XSS flaws (CVE-2026-41722, 41723 and 41724), CVSS 8.0, in VMware Cloud Foundation Operations. No workaround: you have to update.
Read more →Microsoft splits the Beta and Experimental channels for Windows 11 26H1 with new build series and lets Insiders switch branches without a clean reinstall.
Read more →What hardware Hyper-V needs according to Microsoft's documentation: a 64-bit processor with SLAT, VM Monitor Mode extensions, hardware-assisted virtualization (Intel VT / AMD-V) and DEP. How to check it with systeminfo.
Read more →GNOME 50.2 ships rate control for VA-API H.264 screencast pipelines, plus fixes across Mutter, Nautilus, GDM, GNOME Software, and Orca.
Read more →Canonical explains how Ubuntu 26.04 LTS installs CUDA and ROCm with a single apt install and integrates DOCA-OFED, with an eye on squeezing every watt of AI hardware.
Read more →CVE-2026-46243 lets an unprivileged user open a root shell by abusing the CIFS module's SPNEGO upcall. Red Hat, Ubuntu, Debian, SUSE, Oracle Linux and Amazon Linux are affected.
Read more →Canonical walks through compiling, packaging and deploying AI models on Renesas RZ/V microprocessors with Ubuntu Core 26 and the DRP-AI accelerator.
Read more →The HTTP/2 Bomb pairs HPACK compression with flow control to exhaust the RAM of nginx, Apache, IIS, Envoy and Pingora. Affected versions, impact and patches.
Read more →Hyper-V is Microsoft's type-1 hypervisor included in Windows Server and Windows. Here's its bare-metal architecture, what it's for and how it fits into a virtualization setup.
Read more →At Build 2026 Microsoft shows Microsoft Execution Containers, WSL Containers, post-quantum cryptography in TLS and WHCP-certified drivers by default for Windows.
Read more →OpenBSD 7.8 errata 037 fixes multiple vulnerabilities in the X server's dri2, sync, saver and Xkb extensions. What it affects and how to apply the patch.
Read more →A race condition in the Linux kernel's tls_sk_proto_close() lets one thread close a TLS socket while another changes options, triggering a use-after-free. Disclosed on oss-security, 2 June 2026.
Read more →Canonical brings Ubuntu and Ubuntu Pro to Microsoft's second-generation Arm silicon from day one of preview, with kernel Livepatch on Arm64.
Read more →Microsoft introduces Microsoft Execution Containers (MXC), a policy-driven execution layer to sandbox AI agents on Windows and WSL, with process isolation, session isolation and hypervisor micro-VMs.
Read more →XCP-ng ships its first June 2026 update for the 8.3 LTS branch: kernel patches against local root escalation, the end of ssh-rsa support, USB smartcard passthrough and a higher UEFI vCPU ceiling.
Read more →Google patches over a hundred Android vulnerabilities. CVE-2025-48595, a Framework privilege escalation, may already be under targeted exploitation.
Read more →libvirt 12.4.0 adds per-VM energy monitoring via resctrl, lifecycle events for virtio channels, bhyve improvements and the freezer controller in CGroupV2.
Read more →Canonical packages the NVIDIA OpenShell runtime as a snap on Ubuntu to sandbox AI agents. One command to install, and it runs on DGX Spark, DGX Station and RTX PRO.
Read more →A stack-based buffer overflow in the Windows Server Netlogon service lets an unauthenticated remote attacker run code on a domain controller. What it is, who it affects and how to protect yourself.
Read more →History, key versions and curiosities of ReactOS, the free operating system recreating Windows with binary compatibility for apps and drivers since 1998.
Read more →A double free in the error path of Btrfs create_space_info() can corrupt kernel memory. Here is who it affects, how serious it is, and how to patch it.
Read more →Canonical and Google Cloud ship certified Ubuntu images on TPU virtual machines, supporting Ironwood, Trillium, v5p and v5e with optimized access to JAX, PyTorch and TensorFlow.
Read more →Canonical publishes a guide for moving from Apache Spark 3 to Spark 4. Here are the Scala and Java requirements, the default ANSI SQL mode and the phased migration strategy.
Read more →Rocky Linux 10.2 arrives with OpenSSH ML-KEM, Flatpak for Firefox and Thunderbird, GCC 14.3, Podman with Sequoia-PGP and support until 2035.
Read more →Canonical introduces Workshop, an Ubuntu tool that spins up sandboxed dev environments defined in YAML, running on unprivileged LXD containers and built with AI agents in mind.
Read more →Canonical explains how to run agentic AI workloads on Arm and Ubuntu 26.04 LTS: CPUs with up to 136 Neoverse V3 cores, Arm64 kernel livepatching and 15 years of support with Ubuntu Pro.
Read more →AlmaLinux 10.2 ships with kernel 6.12, GNOME 49, PHP 8.4, PostgreSQL 18 and i686 support. Discover everything new in this stable release.
Read more →Ubuntu ships USN-8306-1 patching six Samba vulnerabilities, including two that allow arbitrary code execution in the SAMR server and the printing subsystem.
Read more →The story of webOS, Palm's groundbreaking operating system: cards multitasking, Synergy, its journey through HP and its rebirth on LG smart TVs.
Read more →MX Linux 25.2 «Infinity» arrives with a new text-mode TUI installer, kernel 6.12.90, a Debian 13.5 base and mesa 26.0.1 on AHS editions. What's new and download.
Read more →The history of BlackBerry OS: from RIM's 1999 pager to the reign of push email and physical keyboards, the famous BBM, and its fall to iOS and Android.
Read more →Google shipped Chrome 148.0.7778.178 to close a critical WebRTC use-after-free affecting Linux that runs code just from visiting a web page.
Read more →Eight PHP packages on Packagist, including devdojo/wave and devdojo/genesis, ran a Linux binary pulled from GitHub. Separately, hundreds of laravel-lang versions were republished with a credential stealer after a GitHub token leaked.
Read more →Canonical announces a fully managed Kubeflow MLOps platform on the Azure Marketplace: deployable in under an hour, running on AKS, with 24/7 management.
Read more →Canonical breaks down PinTheft, a Linux kernel bug that poisons the page cache. CVSS 7.8, Medium priority on Ubuntu, and why the default configuration isn't vulnerable.
Read more →Proxmox VE 9.2 arrives with dynamic load balancing in the resource scheduler, kernel 7.0, ZFS 2.4 and Ceph Tentacle by default. High availability can also be disarmed to run maintenance without surprises.
Read more →The setcred(2) syscall copied the supplementary group list into a fixed-size kernel stack buffer without checking its length, letting an unprivileged local user run code in the kernel and escalate to root on FreeBSD 14.3, 14.4 and 15.0.
Read more →Poor parameter validation in ptrace(PT_SC_REMOTE) let an unprivileged local user run code in the FreeBSD kernel. There is no workaround: you have to patch.
Read more →A logic bug in libcap_net treated an omitted restriction as 'allow any', so an application inside a Capsicum sandbox could gain network permissions instead of losing them. What breaks, who is affected, and how to patch.
Read more →Canonical shows how to bring cloud intelligence to the edge with Ubuntu Core 26, AWS and Azure runtimes delivered as snaps, and on-device AI deployment.
Read more →The history of Windows Mobile and Pocket PC: Windows CE roots, key versions, the stylus, and why they faded away against iOS and Android.
Read more →Ubuntu Core 26 ships on top of Ubuntu 26.04 LTS, with OTA updates up to 90% smaller, Livepatch on ARM64 and TPM-sealed keys.
Read more →Mozilla ships Firefox 151 with 27 fixes, including an Android sandbox escape, a use-after-free in DOM Bindings, and a same-origin bypass. Update now.
Read more →OpenBSD 7.9, released May 19, 2026, improves the kernel scheduler, expands arm64 support, hardens pledge and unveil, and enables IPv6 SLAAC by default.
Read more →RHEL 10.2 arrives with kernel 6.12, the Red Hat Lightspeed AI assistant, post-quantum cryptography and improved image mode. Discover all the new features.
Read more →A Linux kernel race condition let local users read sensitive files through ptrace. Ubuntu has patches out for Focal, Jammy, Noble, Questing and Resolute.
Read more →The history of Symbian OS: from Psion's EPOC to the operating system that dominated Nokia smartphones in the 2000s. Versions, S60, UIQ and trivia.
Read more →A logic flaw in the Linux kernel ptrace subsystem lets an unprivileged local user steal SSH host keys and password hashes. It has been there since 2016, and patches are out for Debian, Ubuntu, Fedora, SUSE, AlmaLinux and CloudLinux.
Read more →Canonical introduces Redhound, an AI auditing agent that found three critical zero-days in LXD that had gone unnoticed for years.
Read more →The history of Palm OS, the operating system behind the PalmPilot PDAs: origins, key versions, Graffiti handwriting and its legacy before smartphones.
Read more →skb_try_coalesce() drops the SKBFL_SHARED_FRAG marker and lets an unprivileged user write over page-cache pages to get root. AlmaLinux already shipped patched kernels.
Read more →A heap overflow in ngx_http_rewrite_module with a 9.2 CVSS leaves NGINX open to remote code execution. Red Hat already ships a fix for RHEL 9 in RHSA-2026:18029. What it is, who it affects and how to mitigate it.
Read more →Microsoft patched a Windows GDI heap overflow in May 2026 that lets an attacker run code when a crafted Enhanced Metafile is opened in Microsoft Paint. What it is, who it affects, and how to mitigate.
Read more →Microsoft patched four Word RCE vulnerabilities (CVSS 8.4) in May 2026. The Preview Pane is an attack vector and two of them are rated more likely to be exploited.
Read more →Microsoft patched CVE-2026-41096, a critical flaw in the Windows DNS Client that allows remote code execution through a specially crafted DNS response. It was fixed in the May 2026 Patch Tuesday.
Read more →A flawed SAML check in the Microsoft SSO Plugin for Jira and Confluence (CVSS 9.1) lets an unauthenticated attacker forge identities and log in as anyone. Affected versions and the fix.
Read more →A use-after-free during TLS shutdown in GnuTLS builds of Exim allows unauthenticated remote code execution when handling SMTP with BDAT. Affects Exim 4.97 to 4.99.2, fixed in 4.99.3.
Read more →Microsoft closes around 120 vulnerabilities in its May 2026 release, 17 of them critical, with no known zero-days at launch. Here's what got fixed and why you should patch now.
Read more →The story of Caldera OpenLinux, a pioneer of commercial Linux, its versions and its turn into SCO Group, the source of the 2000s lawsuits against Linux and IBM.
Read more →Apple ships iOS 26.5 and iPadOS 26.5 with over 90 security patches. CVE-2026-28951 is a kernel authorization flaw that could let an app gain root privileges.
Read more →Apple ships macOS Tahoe 26.5 with patches across more than twenty subsystems. CVE-2026-28954 lets a malicious disk image slip past Gatekeeper, and two kernel flaws allow tampering with privileged memory.
Read more →A write-what-where condition in ESP plus a privilege escalation flaw in RxRPC let an unprivileged local user reach root. Public PoCs exist and no universal patch shipped on 8 May 2026.
Read more →A flaw in the Linux kernel's memory management leaves stale pointers in page->private, opening the door to memory corruption or privilege escalation. It affects 5.18 onward and matters most for WSL2 and containers. What it is, who it hits, and how to patch it.
Read more →Canonical ships patches for Dirty Frag, two local privilege escalation flaws in the ESP/IPsec and RxRPC kernel modules. Affected releases run from Ubuntu 18.04 to 26.04 LTS.
Read more →The story of Knoppix, the first popular Live CD built by Klaus Knopper in 2000: key releases, its legendary hardware detection and surprising trivia.
Read more →USN-8245-1 fixes EntrySign (CVE-2024-36347), the microcode signature flaw in AMD Zen processors, along with more than a hundred kernel vulnerabilities. Here's who's affected and how to update.
Read more →The story of Mandrake Linux and Mandriva: born in 1998 from Gaël Duval, the lawsuit over its name, MandrakeSoft, its key versions and its legacy in Mageia and OpenMandriva.
Read more →Red Hat ships an Important kernel update for RHEL 8 that fixes six CVEs, including a KVM privilege escalation and a heap overflow in the NFSv4.0 LOCK replay cache.
Read more →A critical authentication bypass in cPanel/WHM lets attackers take over the panel with no credentials. It landed in CISA's KEV catalog and was exploited at scale to encrypt sites with the .sorry extension.
Read more →The history of Red Hat Linux: from version 1 to 9, the birth of RPM and the 2003 split into Fedora and Red Hat Enterprise Linux. Versions and trivia.
Read more →EndeavourOS Titan Neo arrives on May 1, 2026 with Linux kernel 6.19.14, Calamares 26.03.2.3 and improved Nvidia support for KDE Plasma.
Read more →Faulty packet validation in pf allows unbounded recursion when parsing SCTP chunks, leading to a kernel panic. FreeBSD 13.5, 14.3, 14.4 and 15.0 are affected. Here's how to fix it.
Read more →An operator precedence bug in the FreeBSD kernel lets an unprivileged account escalate to superuser. Fixed on 29 April 2026 in FreeBSD-SA-26:13.exec.
Read more →A journey through Debian's origins: from Ian Murdock in 1993 to the legendary 1.1 Buzz, the Toy Story codenames, and the birth of dpkg and apt.
Read more →Fedora Linux 44 arrives on April 28, 2026 with GNOME 50, KDE Plasma 6.6, Linux kernel 6.19, MariaDB 11.8 and improved Wine compatibility.
Read more →Discover the history of Slackware 1.0, released by Patrick Volkerding in July 1993. Its SLS origins, key versions, trivia and why it's still alive today.
Read more →Canonical releases Ubuntu 26.04 LTS 'Resolute Raccoon' with Linux kernel 7.0, GNOME 50, Python 3.14 and support until 2036. Here's everything that's new.
Read more →The story of Yggdrasil Linux/GNU/X, the 1992 distribution that brought Linux to CD-ROM with automatic hardware detection and live booting.
Read more →A 15-year-old OpenSSH flaw let a certificate with a 'deploy,root' principal bypass access control and authenticate as root. Fixed in OpenSSH 10.3.
Read more →Qualys found 11 CVEs in the Linux kernel AppArmor module. An unprivileged local user could load, replace or remove profiles, escalate to root, or escape a container. Ubuntu fixed it in USN-8201-1.
Read more →A regression in .NET 10.0.6 made ASP.NET Core Data Protection validate its HMAC over the wrong bytes. The result: forgeable auth cookies and escalation to SYSTEM. Microsoft shipped 10.0.7 out of band.
Read more →OpenBSD 7.7 and 7.8 patch an out-of-bounds read in libXpm triggered by crafted XPM files. What it affects, how serious it is, and how to apply the fix.
Read more →The story of Softlanding Linux System (SLS), the first Linux distro to bundle the kernel, GNU and X Window on floppies. Versions, trivia and its legacy in Slackware and Debian.
Read more →The history of the Linux 0.01 kernel from 1991: origins, its 10,000 lines of 386-only code, the Freax name, and curious facts about Torvalds' first Linux.
Read more →Zorin OS 18.1 ships with Linux kernel 6.17, LibreOffice 26.2, better Windows app detection and support until June 2029.
Read more →Update SUSE-SU-2026:1369-1 fixes two DNS resolution issues in glibc: a crafted server response that confuses the resolver and an invalid hostname returned by gethostbyaddr. Affected versions, severity and how to patch.
Read more →Microsoft patched a SharePoint zero-day (CVE-2026-32201) in April 2026 that was already under attack: an unauthenticated attacker can view sensitive data and alter information. What it affects and how to stay protected.
Read more →A double free in the Windows IKE extension (CVSS 9.8) allows unauthenticated remote code execution and is wormable. What it is, who it affects, and how to protect yourself.
Read more →An elevation-of-privilege bug in the Microsoft Defender antimalware platform, dubbed BlueHammer, lets an unprivileged user run code as SYSTEM on Windows 10 and 11.
Read more →A synchronization flaw in the Windows TCP/IP stack allows remote, unauthenticated code execution with no user interaction when IPv6 and IPSec are both enabled. CVSS 8.1, patched in the April 2026 Patch Tuesday.
Read more →The history, versions and curiosities of KolibriOS, the assembly-written operating system that fits on a 1.44 MB floppy disk and boots in just seconds.
Read more →April 2026's update patches 167 vulnerabilities across Windows, Office, SharePoint and Defender, with eight critical bugs and two zero-days: a SharePoint flaw under active attack and a Defender bug disclosed before the patch.
Read more →Red Hat updates the rhc client on RHEL 8 over an Important flaw: incorrect parsing of IPv6 host literals in net/url can mishandle URLs while connecting to Red Hat managed services.
Read more →Linus Torvalds released kernel 7.0 on 12 April 2026. Here are the changes that matter for security and robustness: Intel TSX auto mode and online XFS self-repair.
Read more →A prototype pollution bug in Acrobat Reader's JavaScript engine runs code when you open a malicious PDF. CISA added it to the KEV catalog and Adobe pushed an out-of-band patch.
Read more →The story of TempleOS, the operating system Terry A. Davis wrote entirely by himself over a decade: the HolyC language, 640x480 graphics and one of computing's strangest legends.
Read more →Debian fixes CVE-2026-3497, a flaw in its GSSAPI Key Exchange patch for OpenSSH that a remote attacker can use to crash SSH processes or, in the worst case, run code.
Read more →A look at Apple's April 2026 security updates: macOS Tahoe 26.4.1, iOS/iPadOS 26.4.1, 26.4.2 and 18.7.8, none of them with published CVE entries.
Read more →The history of IBM OS/360, the operating system of the System/360 (1964): its PCP, MFT and MVT options, its chaotic development and The Mythical Man-Month.
Read more →The 7 April 2026 OpenSSL update patches CVE-2026-28387 (DANE use-after-free) and CVE-2026-28386 (out-of-bounds read in AES-CFB128). Who is affected and how to update.
Read more →Mozilla ships Firefox 149.0.2 to fix several high-impact memory-safety bugs, some with signs of memory corruption. If you run Firefox or Thunderbird, update now.
Read more →A flaw in the Linux kernel DVB subsystem reads a function pointer past the end of a table and can invoke it. Present since 2.6.12. What happens and how to stay safe.
Read more →A flaw in the Linux kernel's SCTP connection tracking lets a local user read kernel memory because of missing netlink validation. CVSS 7.1. Who is affected and which versions fix it.
Read more →A race in sco_recv_frame() frees the socket too early and opens the door to a use-after-free in the kernel's Bluetooth code. CVSS 8.8. Here's what it affects and how to patch it.
Read more →The story of VMS and OpenVMS: born at DEC in 1977 for the VAX, famous for its clustering and legendary reliability, and still maintained today by VSI on x86-64.
Read more →OpenBSD 7.8 errata 027 fixes flaws in iked, the daemon that negotiates IPsec tunnels. A crafted packet could read out-of-bounds memory or crash the service.
Read more →The history, versions and curiosities of Multics, the ambitious MIT, GE and Bell Labs operating system whose complexity inspired the creation of Unix.
Read more →The story of AIX, IBM's Unix born in 1986 for POWER systems. Key versions, the SMIT tool and trivia about one of the longest-lived commercial Unix operating systems.
Read more →The history of HP-UX, Hewlett-Packard's Unix born in 1984: its key versions, the leap from PA-RISC to Itanium, VUE, SAM and its final shutdown in 2025.
Read more →A stack overflow in RPCSEC_GSS packet validation lets a malicious client run code with kernel privileges on FreeBSD NFS servers, no authentication required. Affected versions, impact and the March 26, 2026 patches.
Read more →macOS Tahoe 26.4 patches CVE-2026-20698, a kernel memory-handling bug that let an app crash the system or corrupt kernel memory.
Read more →Apple patches over 70 flaws in macOS Tahoe 26.4. The worst lets an app gain root through PackageKit. What it affects and how to update.
Read more →Mozilla ships Firefox 149 with 34 fixes, 17 rated high. Among them a WebRender use-after-free and several memory bugs showing evidence of exploitable corruption.
Read more →The history, versions and curiosities of IRIX, Silicon Graphics' Unix for high-end graphics workstations that powered movie effects like those in Jurassic Park.
Read more →Kali Linux 2026.1 arrives with Linux kernel 6.18, the annual visual refresh, the nostalgic BackTrack Mode for its 20th anniversary and eight new tools.
Read more →A memory overread in NetScaler ADC and Gateway configured as a SAML IdP leaks session tokens. Exploitation is already active and CISA has set a patch deadline.
Read more →An optimization in the kernel's AF_ALG crypto module lets a local user write 4 bytes into any cached file and become root. Nearly every distribution is affected.
Read more →Google ships Chrome 146.0.7680.164/165 with patches for a heap buffer overflow in WebGL and a use-after-free in Dawn, both reachable through a crafted web page.
Read more →OpenBSD 7.8 errata 024 fixes CVE-2026-32776, 32777 and 32778 in libexpat, which let malformed XML hang or crash applications that rely on the library.
Read more →The history of SunOS and Solaris: from the BSD workstation to Sun's System V Unix, with NFS, ZFS, DTrace, OpenSolaris and its legacy in illumos.
Read more →A critical flaw (CVSS 9.1) makes servlet apps using Spring Security lose headers like Content-Security-Policy and Strict-Transport-Security without warning. Affected versions and fix.
Read more →A flaw in net/sched/act_gate.c let a local user trigger inconsistent kernel memory access when the gate action was replaced while a timer or dump walked the schedule list. CVSS 7.8.
Read more →The history of Xenix, the Unix Microsoft licensed from AT&T in 1980: its origins, key versions, the handover to SCO and why it became the most widespread Unix of its era.
Read more →Apple uses Background Security Improvements for the first time to fix CVE-2026-20643, a WebKit Navigation API bug that bypassed the same-origin policy on iOS and macOS.
Read more →The history of the original Berkeley BSD: from 1BSD to 4.4BSD, 4.2BSD's TCP/IP, the CSRG group, the AT&T lawsuit and a legacy that lives on today.
Read more →Qualys reveals CrackArmor, a set of confused-deputy vulnerabilities in AppArmor present since 2017 that let a local user reach root, leak kernel memory and break container isolation on Ubuntu, Debian and SUSE.
Read more →Canonical split the CrackArmor fixes across three packages: kernel, sudo and util-linux. What each one patches, and why you need all three.
Read more →Debian ships DSA-6162-1 and fixes the CrackArmor AppArmor vulnerabilities found by Qualys in trixie. They allow local privilege escalation to root. Fixed version: 6.12.74-2.
Read more →Debian ships a Linux kernel update for Debian 12 Bookworm bundling 49 flaws, including the AppArmor bugs found by Qualys. Fixed version: 6.1.164-1.
Read more →The history of Bell Labs' Unix V6 (1975) and V7 (1979): the versions that escaped AT&T, conquered universities and shaped today's Linux and BSD systems.
Read more →Microsoft fixed an improper access control flaw in SQL Server in March 2026 that lets an authenticated user escalate to sysadmin over the database. CVSS 8.8.
Read more →A race condition in net/tls/tls_sw.c lets a worker touch already-freed memory. What it affects, which versions, and how it's fixed.
Read more →Microsoft rated this Excel information-disclosure flaw Critical. Chained with the Copilot agent, it can exfiltrate sensitive data with no user interaction. Fixed in the March 2026 Patch Tuesday.
Read more →March 2026's security rollup patches 79 vulnerabilities across Windows, Office, SQL Server, .NET and Azure, including two disclosed zero-days and four critical Office and Excel flaws.
Read more →RISC OS, Acorn's operating system for the Archimedes in 1987, was the cradle of ARM processors. Its history, key versions and real curiosities.
Read more →The story of GEOS, Berkeley Softworks' graphical OS that brought windows, a mouse and desktop publishing to the Commodore 64 and Apple II back in 1986.
Read more →A critical flaw in Cisco Catalyst SD-WAN Controller and Manager lets an unauthenticated remote attacker log in as a high-privileged account. Cisco confirms active exploitation tied to UAT-8616.
Read more →A Java deserialization bug in Cisco Secure Firewall Management Center (CVSS 10.0) lets an unauthenticated attacker run code as root. Interlock ransomware used it as a 0-day from January 2026.
Read more →The Linux kernel's smscufx framebuffer driver dereferenced a userspace pointer instead of copying it in first. A local user could corrupt kernel memory and crash the box. Here's who's affected and how to patch.
Read more →On 4 March 2026 Canonical released kernel patches for Ubuntu 25.10 and the 24.04, 22.04, 20.04 and 18.04 LTS branches, fixing CVE-2025-40214 and other flaws.
Read more →The history of OS/2: the operating system IBM and Microsoft built together, its Warp releases, why it lost to Windows, and how it lives on in ArcaOS.
Read more →Debian patches LXD over a newline injection (CVE-2026-23953, CVSS 8.7) that lets attackers add arbitrary hooks to lxc.conf and run commands as root on the host.
Read more →BeOS, the 1990s multimedia operating system from Be Inc. and Jean-Louis Gassée. Its history, key versions, Apple's rejection and its rebirth as Haiku.
Read more →The story of the Commodore 64 and its KERNAL: 1982 origins, the best-selling 8-bit computer in history, ROM revisions, legendary chips and real trivia.
Read more →Broadcom patches an unauthenticated command injection flaw in VMware Aria Operations (CVSS 8.1) that enables RCE during assisted migrations. Exploited in the wild and added to CISA's KEV catalog.
Read more →An unprivileged user can trigger a kernel panic on FreeBSD by exploiting a stack buffer overflow in rtsock_msg_buffer(). Here's who is affected, the severity, and how to patch it.
Read more →Mozilla ships Firefox 148 (MFSA 2026-13) with 45 CVEs, 28 of them high impact, including sandbox escapes and memory bugs that could allow code execution. Update now.
Read more →Ubuntu releases USN-8059-1 with Linux kernel fixes affecting the SMB subsystem. Here is what is fixed, who is affected, and how to update.
Read more →The story of the Apple II (1977) and its operating system: from Apple DOS 3.3 to ProDOS. Versions, VisiCalc, Wozniak's legacy and trivia of the 8-bit classic.
Read more →History of the classic Mac OS, from System 1 (1984) to Mac OS 9 (1999): key versions, the graphical interface that changed computing, and its quirks.
Read more →A synchronization flaw in the Linux kernel's in-kernel SMB3 server (ksmbd) allows a use-after-free in multichannel sessions. It affects kernels 6.3 through 6.19.0. We explain the risk, who is affected and how to mitigate it.
Read more →Debian patches dozens of Linux kernel vulnerabilities in trixie with version 6.12.73-1. Risks include privilege escalation, denial of service and information leaks.
Read more →The history of the Atari ST and its TOS operating system: Jack Tramiel's origins, Digital Research's GEM, its versions, and the MIDI ports that made it a legend.
Read more →Google ships an emergency fix for a use-after-free in Chrome's CSS engine (CVE-2026-2441), exploited in the wild. What it is, who is affected and how to update.
Read more →The story of AmigaOS and the Commodore Amiga: real preemptive multitasking in 1985, the Agnus, Denise and Paula chips, Workbench and the legendary Boing Ball.
Read more →Debian releases DSA-6131-1 to fix CVE-2026-1642 in nginx, a race condition that lets an attacker inject plaintext data into responses from proxied upstream TLS servers.
Read more →A memory corruption flaw in dyld, Apple's dynamic linker, allowed code execution and was used in sophisticated attacks. Fixed in iOS, macOS, watchOS, tvOS and visionOS 26.3.
Read more →Ubuntu ships USN-8028-1 for 24.04 LTS: numerous Linux kernel flaws and AMD issues, including CVE-2024-36331 in SEV-SNP. Who is affected and how to update.
Read more →In February 2026 Microsoft patched a security feature bypass in the MSHTML framework (CVE-2026-21513, CVSS 8.8) exploited as a zero-day by the APT28 group through malicious shortcuts and HTML files.
Read more →A security feature bypass in Microsoft Word, exploited as a zero-day, evades OLE and Mark-of-the-Web protections. What it is, who it affects and how to patch it.
Read more →A privilege-escalation flaw in Windows Remote Desktop Services, exploited as a zero-day, lets a local attacker reach SYSTEM by tampering with the registry. What it is, who is affected, and how to mitigate it.
Read more →A bug in FreeBSD 15.0's blocklistd(8) leaks one socket descriptor per event, exhausting resources and letting an attacker disable automatic IP blocking before their attack.
Read more →A critical improper access control vulnerability (CWE-284) in Azure Front Door allows privilege escalation without authentication. Learn who it affects, how severe it is, and what to do.
Read more →The history of CP/M, Gary Kildall and Digital Research's system that dominated 8-bit microcomputers before IBM chose DOS for its PC.
Read more →Microsoft's February 2026 Patch Tuesday fixes 58 vulnerabilities in Windows, including 6 actively exploited zero-days, 5 critical flaws and new Secure Boot certificates.
Read more →OpenBSD 7.7 and 7.8 ship errata 014 to fix a NULL pointer dereference and an integer overflow in libexpat that can cause denial of service when parsing XML.
Read more →Debian releases DSA-6126-1, a Linux kernel update that resolves over 170 CVEs with risks of privilege escalation, denial of service and information disclosure. Fixed in 6.12.69-1 for Trixie.
Read more →An unauthenticated stack-based buffer overflow in xrdp allows remote code execution (CVSS 9.8). Debian shipped fixes for bookworm and trixie. What's affected and how to mitigate.
Read more →The story of FreeDOS: how Jim Hall kept DOS alive since 1994 with a free system. Key versions, real trivia, and its enduring use for flashing the BIOS.
Read more →An unauthenticated command injection in BeyondTrust Remote Support and Privileged Remote Access allows remote code execution. Exploited as a zero-day and used in ransomware attacks. What it is, who is affected, and how to mitigate it.
Read more →A critical flaw in SmarterMail's ConnectToHub endpoint allows unauthenticated RCE. Actively exploited by the Storm-2603 group in ransomware attacks. CISA ordered patching.
Read more →An inverted condition in the kernel's nft_map_catchall_activate() leads to a use-after-free that lets an unprivileged user escalate to root. Who is affected, how severe it is, and how to mitigate it.
Read more →An integer underflow in vsock/virtio credit accounting can queue more data than the peer can handle. Affects a wide range of Linux kernel versions. CVSS 5.5.
Read more →A use-after-free flaw in the Linux kernel traffic control teql queueing discipline allows local privilege escalation. Affects 2.6.12 through several stable branches. CVSS 7.8.
Read more →Origins, key versions and curiosities of PC DOS, IBM's operating system for the PC. From PC DOS 1.0 to PC DOS 2000 after the split with Microsoft.
Read more →The OpenBSD project published errata 013 for 7.8, fixing a use-after-free in its httpd(8) web server when processing requests with chunked transfer encoding. Available via syspatch.
Read more →The story of DR-DOS, Digital Research's operating system that challenged MS-DOS: its versions, pioneering multitasking and the infamous AARD code.
Read more →The story of MS-DOS 6.22, the final standalone version of MS-DOS. The Stac lawsuit, the end of DoubleSpace and the birth of DriveSpace in 1994.
Read more →ShinyHunters claims the theft of roughly 10 million Match Group user records after compromising Okta SSO credentials through vishing. What leaked and how to protect yourself.
Read more →OpenSSL fixes a flaw in the MAC verification of PBMAC1-protected PKCS#12 files that can cause a stack buffer overflow or denial of service. Affected versions, severity and patches.
Read more →A root user inside a FreeBSD jail with allow.mount.nullfs can escape the chroot and reach the entire host filesystem. Analysis of advisory FreeBSD-SA-26:02.jail.
Read more →A flaw in Xen's tracing code lets an HVM guest in shadow paging mode overrun per-CPU buffers, risking privilege escalation, information disclosure or denial of service on x86.
Read more →A TOCTOU race condition in varstored, the Xapi toolstack component that manages UEFI variables, lets an attacker with kernel-level access inside a VM run code and escalate privileges. Here is who is affected and how to mitigate it.
Read more →An incomplete IBPB during Xen vCPU context switches lets a guest process leak data private to other tasks on the same CPU. It affects x86; ARM is not impacted.
Read more →The story of MS-DOS: from QDOS and Seattle Computer Products to Microsoft, its key versions, its 1980s reign and lesser-known curiosities.
Read more →The story of Windows XP: the 2001 OS that unified the NT branch, popularised the Luna interface and lasted until 2014. Editions, the Bliss wallpaper and fun facts.
Read more →ISC patches a denial-of-service flaw in BIND 9 (CVSS 7.5) that lets a remote, unauthenticated attacker abort the named daemon with malformed DNS records. What it is, who is affected and how to patch it.
Read more →The history of Windows NT, the 32-bit OS built by Dave Cutler in 1993: origins, key versions and curiosities of the kernel that still powers Windows today.
Read more →A new Linux variant of the Qilin (Agenda) ransomware encrypts VMware ESXi, FreeBSD and Linux servers, deleting snapshots and shutting down virtual machines to hinder recovery.
Read more →A critical flaw (CVSS 9.8) in SmarterMail's force-reset-password endpoint lets attackers hijack the system administrator account. Over 6,000 servers were exposed.
Read more →The story of Windows Millennium Edition: the last of the 9x line, new features like System Restore and Movie Maker, and the reputation for instability it earned.
Read more →A path traversal flaw in the Gogs file editor allows code execution through symbolic links. CISA added it to its KEV catalog after confirming active exploitation.
Read more →OpenBSD 7.8 errata 012 fixes a NULL pointer dereference and a memory exhaustion in rpki-client that can be triggered by a malicious RPKI CA or Trust Anchor.
Read more →A look back at Windows 98: its 1998 release, Internet Explorer integration, USB and FAT32 support, the Second Edition update and the famous blue screen demo.
Read more →In the January 2026 Patch Tuesday, Microsoft removed the third-party Agere Soft Modem driver from Windows over a previously exploited elevation-of-privilege flaw (CVE-2023-31096). What it is, who is affected, and how to respond.
Read more →Microsoft patched CVE-2026-20805, an information-disclosure flaw in DWM exploited as a zero-day that helps defeat ASLR. Affects Windows 10, 11 and Server.
Read more →Microsoft fixes a use-after-free in LSASS (CVSS 7.5) that allows code execution over the network. Affects Windows 11 24H2/25H2 and Windows Server 2025.
Read more →Critical RCE (CVSS 8.4) in Microsoft Office exploitable just by previewing a malicious document. Who is affected, how severe it is, and how to mitigate it.
Read more →Two critical remote code execution vulnerabilities in Microsoft Excel fixed in the January 2026 Patch Tuesday. What they are, who is affected and how to stay protected.
Read more →Microsoft disclosed CVE-2026-21265, a Secure Boot bypass caused by the expiration of its 2011 UEFI certificates. We explain who it affects, its severity and how to mitigate it.
Read more →The first Patch Tuesday of 2026 fixes 114 vulnerabilities across Windows, Office and Azure, including one actively exploited zero-day and two publicly disclosed.
Read more →Linux Mint 22.3 "Zena" arrives with Cinnamon 6.6, improved Wayland support, new XSI icons and long-term support until 2029. Here's what's new.
Read more →MongoBleed lets unauthenticated attackers read MongoDB server memory and steal credentials, keys and tokens. Here is what the flaw is, who it affects and how to mitigate it.
Read more →History, versions and trivia of Windows 95: the Start menu, Plug and Play and the Rolling Stones' Start Me Up campaign that defined an era of computing.
Read more →Ubuntu's USN-7940-2 advisory fixes VMSCAPE, a branch predictor isolation flaw in the Linux kernel that could let a malicious guest expose host information. What it is, who is affected, and how to mitigate it.
Read more →History of Windows 3.0 and 3.1 (1990-1992): Microsoft's first big hit, Program Manager, 386 protected mode, TrueType fonts, multimedia and curiosities.
Read more →Insufficient policy enforcement in Chrome's WebView component (CVSS 8.8) lets malicious extensions bypass security boundaries. Google fixed it in Chrome 143.
Read more →A use-after-free in WebKit (CVSS 8.8) allows code execution when opening a malicious web page. Apple patched it and CISA set a remediation deadline of January 5, 2026.
Read more →The history of Windows 2.0, released in 1987: overlapping windows, keyboard shortcuts, the /286 and /386 editions, Apple's lawsuit, and the first Word and Excel.
Read more →Manjaro 26.0 'Anh-Linh' ships with Linux 6.18 LTS kernel, KDE Plasma 6.5 and GNOME 49 on Wayland, Xfce 4.20, and support for COSMIC.
Read more →Windows 1.0 (1985), Microsoft's first graphical environment over MS-DOS: its history, versions, tiled windows and the lesser-known curiosities behind it.
Read more →Debian released advisory DSA-6092-1 to fix two flaws in smb4k that can lead to local denial of service or privilege escalation. What it is, who it affects and how to apply the patch.
Read more →elementary OS 8.1 is here: Wayland-based Secure Session by default, first ARM64 builds, Linux kernel 6.14 and over 1,100 improvements.
Read more →Pop!_OS 24.04 LTS is now stable: it debuts COSMIC, its new desktop written in Rust, with kernel 6.17, advanced tiling and native applications.
Read more →FreeBSD 15.0-RELEASE is out: install the base with pkg, OpenZFS 2.4, OpenSSH 10 with post-quantum crypto and native inotify support.
Read more →NixOS 25.11 'Xantusia' arrives with GNOME 49, LLVM 21, Docker 28, PostgreSQL 17 by default and thousands of updated packages. Discover all the news.
Read more →openSUSE Leap 16.0 is here: kernel 6.12, the new Agama installer, SELinux by default, PipeWire and 24 months of support built on the SUSE Linux Enterprise base.
Read more →Debian 13 "trixie" is now stable: Linux kernel 6.12 LTS, GNOME 48, KDE Plasma 6.3, riscv64 support and 5 years of maintenance.
Read more →Proxmox VE 9.0 jumps to Debian 13 Trixie with kernel 6.14 and ZFS 2.3.3. It finally brings snapshots on thick-provisioned shared LVM —the iSCSI and Fibre Channel array case— plus affinity rules for high availability.
Read more →Void Linux ships its 20250202 image set with Linux kernel 6.12, Xfce 4.20 and ARM64 UEFI support for Apple Silicon, ThinkPad X13s and Pinebook Pro.
Read more →NetBSD 10.1 is now available. Discover what's new: AMD Zen 5 support, RAID improvements, ZFS on Xen and key security patches.
Read more →Proxmox VE 8.0 arrives on Debian 12 Bookworm with kernel 6.2, QEMU 8.0.2 and ZFS 2.1.12. The substantial change is resource mapping for PCI and USB devices, which finally allows offline migration of VMs with passed-through hardware.
Read more →Slackware 15.0 ships with Linux kernel 5.15 LTS, KDE Plasma 5, PAM, Wayland and UTF-8 support. Discover what's new in the oldest Linux distro.
Read more →
