Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes

The Hacker News - Oct 22, 2026

Linux servers running KSMBD, the kernel's built-in SMB server, are exposed to two publicly reported remote code execution flaws rated 9.0 by Trend Micro's Zero Day Initiative, with no fix yet in the mainline kernel. One of them, ZDI-CAN-33774, can be triggered before any network authentication. The other, ZDI-CAN-33549, requires the SMB Direct transport and an RDMA-capable network

Read full article

MORE NEWS

Combatting online scams in the age of AI

Oct 22, 2026

Combatting online scams in the age of AI

One in four Europeans has fallen victim to an online scam, from identity fraud to fake romances. The rise of artificial intelligence is ushering in new risks. Minh Nguyen, Chief Product Officer at security solutions provider Entrust, says both online platforms and governments can play a role in protecting consumers and businesses.

Unitree developing AI system to let humanoid robots improve themselves

Oct 22, 2026

Unitree developing AI system to let humanoid robots improve themselves

Unitree Robotics is developing a “self-evolving” feedback loop designed to allow humanoid robots to write code, run simulations and improve their real-world performance independently, founder Wang Xingxing said, in a move that mirrors a broader push towards “self-improving” artificial intelligence. Speaking on Thursday at a physical AI conference hosted by Unitree in Hangzhou, Wang unveiled the project, dubbed “Unitree Rehearsal”, which he called the company’s most important initiative of the...

Websites go dark worldwide after critical flaws are exposed, leaving up to 70% of sites open to attack

Oct 22, 2026

Websites go dark worldwide after critical flaws are exposed, leaving up to 70% of sites open to attack

An urgent warning has been issued to millions after a software used by more than half of the world's websites was found to have critical flaws that could let hackers take over servers.

‘Jensen’s nightmare’: Huawei, DeepSeek narrow AI chip ecosystem gap with Nvidia: report

Oct 22, 2026

‘Jensen’s nightmare’: Huawei, DeepSeek narrow AI chip ecosystem gap with Nvidia: report

Deepening “symbiosis” with artificial intelligence model start-up DeepSeek is helping Chinese tech champion Huawei Technologies catch up with Nvidia’s chip hardware and software ecosystem in a scenario that could mean Jensen Huang’s “nightmare is starting to come true”, according to a new report. DeepSeek’s latest software releases, on top of its increased experimentation with Huawei’s powerful Ascend 950PR chips, reveal that the technological gap with the US is closing, as the two firms...

I.U.C.N. Red List Classifies Most Shallow Coral Reefs as Critically Endangered

Oct 22, 2026

I.U.C.N. Red List Classifies Most Shallow Coral Reefs as Critically Endangered

If climate change continues apace, 96 percent of shallow coral reef ecosystems may collapse within 50 years, including in Australia’s Great Barrier reef.

WhatsApp, Telegram SIM binding rules from January 1, 2027: Who will be affected in India?

Oct 22, 2026

WhatsApp, Telegram SIM binding rules from January 1, 2027: Who will be affected in India?

WhatsApp, Telegram and other messaging apps may have to remain linked to registered, active SIM cards under India's new SIM-binding rules from January 1, 2027. The DoT has set December 31, 2026, as the compliance deadline, aiming to curb cyber fraud and the misuse of Indian mobile numbers.

The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest Insider Threat

Oct 22, 2026

The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest Insider Threat

Right now, there is probably an AI agent running on a laptop somewhere in your network. It stores API keys and database passwords, can access your internal systems, and works without anyone watching. Nobody reviewed its access. Nobody owns it. If an employee had that much reach with that little oversight, you would call it an insider risk. So why do we still call the agent a productivity tool?

Google Eyes Large ‘Virtual Power Plant’ for Data Centers

Oct 22, 2026

Google Eyes Large ‘Virtual Power Plant’ for Data Centers

The tech giant is funding one of the nation’s largest “virtual power plants,” which would pay homes and businesses to adjust their energy use when grids are strained.

Elon Musk's Mars colonization dream faces reality check from Nobel laureate

Oct 22, 2026

Elon Musk's Mars colonization dream faces reality check from Nobel laureate

Elon Musk’s Mars colonization dream faces reality check from Nobel laureateFor years, Elon Musk has patronized the idea of expanding human consciousness and colonization of the Mars planet as he thinks humans of inter-planetary species. Now Musk's plan of colonising the Red planet within 100...

At least four dead after storm brings flooding to southern France

Oct 22, 2026

At least four dead after storm brings flooding to southern France

The deaths include two women found drowned in a cellar in the Bouches-du-Rhône region.

What is PHP and why did it spark a global cyber-security scramble?

Oct 22, 2026

What is PHP and why did it spark a global cyber-security scramble?

AI uncovered long-hidden programming flaws, triggering a rare global cyber-security response.

Railway Says Intruder May Have Accessed Customer Secrets, Urges Credential Rotation

Oct 22, 2026

Railway Says Intruder May Have Accessed Customer Secrets, Urges Credential Rotation

Platform-as-a-Service (PaaS) provider Railway on Wednesday disclosed "anomalous activity" related to systems that store customer environment variables. Upon further investigation, the company found that an unauthorized third party may have gained access to encrypted environment variables, and, in some cases, obtained the decrypted contents. The impact, it said, is limited to a "subset of users,

RECOMMENDED

Science Thread

Science Thread delivers quality and fascinating science and technology content that matters on a daily basis and makes it go viral.

ABOUT US
Sign Up

Copyright © 2015 - 2026 Science Thread. All Rights Reserved.