2026-07-04: A new Linux kernel privilege escalation bug called Bad Epoll achieves root from unprivileged

Show Notes - 2026-07-04

Stories Covered

• Today:
• Bad Epoll Linux Kernel Privilege Escalation (CVE-2026-46242) [Critical Alerts]
• First Fully Autonomous AI Ransomware Attack via Langflow [Ransomware & Extortion]
• Avalon Malware Framework Packs CrownX Ransomware [Ransomware & Extortion]
• Shun Hing Group Breach Affects 920,000 Customers [Ransomware & Extortion]
• North Korea npm Campaign Mimics Rollup Polyfills [IOCs & Detection]
• Seven Unpatched Flaws in FatFs Filesystem Affect Millions of Embedded Devices [Business & Infrastructure Threats]
• Chinese LLMs GLM 5.2 and Tulongfeng Close the Gap in Vulnerability Discovery [Business & Infrastructure Threats]
• Russians Pose as Signal Support to Steal Backup Keys [Business & Infrastructure Threats]
• AdaptHealth Data Breach via Social Engineering [Business & Infrastructure Threats]
• Google and FBI Target 2 Million-Device NetNut Botnet [Business & Infrastructure Threats]
• Armored Likho Targets Government and Power Sector with BusySnake Stealer [General Security News]
• Week in Brief: Anonymous Hacker Jailed, KDDI Breach, Push Security Poisoned Tenant Attack, Russian Hackers Behind Jaguar Land Rover Breach, Pegasus Spyware Targeted EU Investigator, LLM Fuzzing Yields Dozens of Zero-Days [General Security News]
• European Parliament Member Investigating Pegasus Was Hacked With Pegasus [General Security News]
• Microsoft Edge Chromium CVEs [Vulnerability Disclosures]

CVEs Referenced

CVE-2021-29441, CVE-2025-3248, CVE-2025-9491, CVE-2026-13775, CVE-2026-13776, CVE-2026-13780, CVE-2026-13790, CVE-2026-13801, CVE-2026-13820, CVE-2026-13860, CVE-2026-13886, CVE-2026-13933, CVE-2026-14082, CVE-2026-14125, CVE-2026-14153, CVE-2026-31431, CVE-2026-43074, CVE-2026-46242, CVE-2026-53223, CVE-2026-55945, CVE-2026-6682, CVE-2026-6683, CVE-2026-6684, CVE-2026-6685, CVE-2026-6686, CVE-2026-6687, CVE-2026-6688

Indicators of Compromise

Domains: 236[.]244, 236[.]244.

Read the full brief