CVE-2026-98652

The Linux kernel contains a vulnerability in the KVM subsystem specifically affecting the s390 architecture. The issue is caused by a missing srcu (or slots lock) in the kvm_s390_set_irq_state() function during the Store status operation, similar to the requirement in kvm_s390_inject_vcpu(). The ...

“Sleeper” browser extensions woke up as spyware on 4 million devices

Researchers have unraveled a malware campaign that really did play the long game. After seven years of behaving normally, a set of browser extensions installed on roughly 4.3 million Chrome and Edge users’ devices suddenly went rogue. Now they can track what you browse and run malicious code insi...