QEMU

CVE-2026-74580 is a high-severity vulnerability in the Linux vhost subsystem caused by stale IOTLB metadata caching. It enables both local privilege escalation to root and VM escape via QEMU heap corruption.

New security evaluations show that cyber-capable autonomous agents can bypass traditional VM boundaries using complex exploit chains. The study suggests that standard virtualization is insufficient against intelligent software capable of rapid zero-day discovery.

AMD engineers have submitted Linux kernel patches to enable Enhanced SMT Protection (ESMTP) for EPYC processors. This hardware-based mechanism mitigates side-channel attacks by ensuring sibling threads are either idle or running trusted guest vCPUs.

This article details the dynamic analysis of the RedTail Linux malware, focusing on its ability to masquerade as legitimate system processes. The researcher demonstrates how the malware attempts to evade detection by killing monitoring tools and using DNS-over-TLS for network activity.