Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes

The Hacker News - Oct 22, 2026

Linux servers running KSMBD, the kernel's built-in SMB server, are exposed to two publicly reported remote code execution flaws rated 9.0 by Trend Micro's Zero Day Initiative, with no fix yet in the mainline kernel. One of them, ZDI-CAN-33774, can be triggered before any network authentication. The other, ZDI-CAN-33549, requires the SMB Direct transport and an RDMA-capable network

Read full article
More News
Combatting online scams in the age of AI

Combatting online scams in the age of AI

One in four Europeans has fallen victim to an online scam, from identity fraud to fake romances. The rise of artificial intelligence is ushering in new risks. Minh Nguyen, Chief Product Officer at security solutions provider Entrust, says both online platforms and governments can play a role in protecting consumers and businesses.

Read more
Unitree developing AI system to let humanoid robots improve themselves

Unitree developing AI system to let humanoid robots improve themselves

Unitree Robotics is developing a “self-evolving” feedback loop designed to allow humanoid robots to write code, run simulations and improve their real-world performance independently, founder Wang Xingxing said, in a move that mirrors a broader push towards “self-improving” artificial intelligence. Speaking on Thursday at a physical AI conference hosted by Unitree in Hangzhou, Wang unveiled the project, dubbed “Unitree Rehearsal”, which he called the company’s most important initiative of the...

Read more
Websites go dark worldwide after critical flaws are exposed, leaving up to 70% of sites open to attack

Websites go dark worldwide after critical flaws are exposed, leaving up to 70% of sites open to attack

An urgent warning has been issued to millions after a software used by more than half of the world's websites was found to have critical flaws that could let hackers take over servers.

Read more
‘Jensen’s nightmare’: Huawei, DeepSeek narrow AI chip ecosystem gap with Nvidia: report

‘Jensen’s nightmare’: Huawei, DeepSeek narrow AI chip ecosystem gap with Nvidia: report

Deepening “symbiosis” with artificial intelligence model start-up DeepSeek is helping Chinese tech champion Huawei Technologies catch up with Nvidia’s chip hardware and software ecosystem in a scenario that could mean Jensen Huang’s “nightmare is starting to come true”, according to a new report. DeepSeek’s latest software releases, on top of its increased experimentation with Huawei’s powerful Ascend 950PR chips, reveal that the technological gap with the US is closing, as the two firms...

Read more
I.U.C.N. Red List Classifies Most Shallow Coral Reefs as Critically Endangered

I.U.C.N. Red List Classifies Most Shallow Coral Reefs as Critically Endangered

If climate change continues apace, 96 percent of shallow coral reef ecosystems may collapse within 50 years, including in Australia’s Great Barrier reef.

Read more
WhatsApp, Telegram SIM binding rules from January 1, 2027: Who will be affected in India?

WhatsApp, Telegram SIM binding rules from January 1, 2027: Who will be affected in India?

WhatsApp, Telegram and other messaging apps may have to remain linked to registered, active SIM cards under India's new SIM-binding rules from January 1, 2027. The DoT has set December 31, 2026, as the compliance deadline, aiming to curb cyber fraud and the misuse of Indian mobile numbers.

Read more
The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest Insider Threat

The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest Insider Threat

Right now, there is probably an AI agent running on a laptop somewhere in your network. It stores API keys and database passwords, can access your internal systems, and works without anyone watching. Nobody reviewed its access. Nobody owns it. If an employee had that much reach with that little oversight, you would call it an insider risk. So why do we still call the agent a productivity tool?

Read more
Google Eyes Large ‘Virtual Power Plant’ for Data Centers

Google Eyes Large ‘Virtual Power Plant’ for Data Centers

The tech giant is funding one of the nation’s largest “virtual power plants,” which would pay homes and businesses to adjust their energy use when grids are strained.

Read more
Elon Musk's Mars colonization dream faces reality check from Nobel laureate

Elon Musk's Mars colonization dream faces reality check from Nobel laureate

Elon Musk’s Mars colonization dream faces reality check from Nobel laureateFor years, Elon Musk has patronized the idea of expanding human consciousness and colonization of the Mars planet as he thinks humans of inter-planetary species. Now Musk's plan of colonising the Red planet within 100...

Read more
At least four dead after storm brings flooding to southern France

At least four dead after storm brings flooding to southern France

The deaths include two women found drowned in a cellar in the Bouches-du-Rhône region.

Read more
What is PHP and why did it spark a global cyber-security scramble?

What is PHP and why did it spark a global cyber-security scramble?

AI uncovered long-hidden programming flaws, triggering a rare global cyber-security response.

Read more
Railway Says Intruder May Have Accessed Customer Secrets, Urges Credential Rotation

Railway Says Intruder May Have Accessed Customer Secrets, Urges Credential Rotation

Platform-as-a-Service (PaaS) provider Railway on Wednesday disclosed "anomalous activity" related to systems that store customer environment variables. Upon further investigation, the company found that an unauthorized third party may have gained access to encrypted environment variables, and, in some cases, obtained the decrypted contents. The impact, it said, is limited to a "subset of users,

Read more

About Us

Delivering news from all over the globe, StarJournal keeps you abreast with the greatest minds in science, be it researchers, theorists or even popularizers.