LIVE · cybersecurity feed
Live wire
Living off the coding agent: Two tales of tunnels and LaunchAgentsMetabase SQLi zero-day exploited in customer data-theft attacksEx-NSA Chief Urges Disconnecting Water Controllers from InternetMIT boffins' TONTOU attack slips through Spectre defenses on Intel and AMD CPUsReal emails, hijacked payments: Two H1 2026 attack chainsCVE-2026-64638 · New WordPress Pre-Auth XSS Could Lead to PHP Code Execution - Patch ASAPAgentic AI for Cyber Defenders: What Security Teams Built at Black Hat USA 2026CVE-2021-44228 · Growing Up The Hard WayCVE-2026-64564 · 18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape ContainersCVE-2026-63078 · AI-Assisted HTTP Terminator Finds Novel HTTP Desync Techniques and Apache Zero-Day

sctp

CVE-2026-64564high

18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containers

An 18-year-old use-after-free vulnerability in Linux's SCTP networking code, tracked as CVE-2026-64564 and named SCTPhantom, has been patched. The flaw, present since 2008, could allow local users to gain root privileges and escape containerized environments. Researchers from Tencent successfully demonstrated root access and container escape on several Linux distributions.