Cyber Security News

Hacking Editorial Brief — October 14, 2026

AI-Discovered Linux Kernel Vulnerability Enables Root Escalation and VM Escape

Tencent's Corvus AI has identified CVE-2026-74580 (Vghost), a critical Linux kernel vulnerability enabling local privilege escalation to root and guest-to-host escape in virtualized environments. The flaw affects nearly a decade of kernel versions, representing significant risk to cloud infrastructure and containerized deployments. The discovery marks a notable development in AI-assisted vulnerability research, demonstrating machine learning systems' capability to identify complex kernel flaws that span multiple subsystems and affect hypervisor isolation boundaries.

South Korean Financial Sector Breach Expands to 16 Institutions with 100,000 Records Compromised

South Korean authorities have confirmed data breach incidents across 16 financial institutions with approximately 100,000 customer records leaked. The campaign represents a coordinated effort targeting the financial sector, though attribution and specific attack vectors remain under investigation. Separately, threat actors compromised a European bank through stolen VPN credentials accessing a misconfigured third-party gateway, conducting months of reconnaissance before detection.

Cryptocurrency and Consumer Technology Under Active Attack

Ledger SAS is reviewing its hardware wallet sales policies following a $90 million spyware attack involving compromised devices. In a separate corporate espionage incident, Saudi national Abdulrahman Alfozan, an OpenAI engineer, was arrested for planting an audio recording device in an executive conference room to capture sensitive internal meetings. Additionally, two iOS exploit kits—Coruna and DarkSword—have been observed chaining vulnerabilities to fully compromise outdated iPhones through single malicious web visits without requiring app installation.

Sources: The Hacker News · Channel News Asia · Bloomberg · Cybersecurity News · Cybersecurity News · GBHackers