Security Saturday — the vulnerabilities, advisories, and incidents from the past week worth knowing about.
Security
- Unpatched Flaws Disclosed in Filesystem Bundled Into Millions of Embedded Devices (The Hacker News)
Security firm runZero has disclosed seven vulnerabilities in FatFs, a small filesystem library that lets a device read and write the FAT and exFAT formats used on USB drives and SD cards. The flaws matter because FatFs is nearly everywhere. - New "Bad Epoll" Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android (The Hacker News)
A newly disclosed Linux kernel flaw called Bad Epoll (CVE-2026-46242) lets an ordinary user with no special access take full control of a machine as root. It affects Linux desktops, servers, and Android, and a fix is out. Bad Epoll sits in - Flock Cameras Can Surveil Cars Without License Plates (Schneier on Security)
This is from a 2024 company presentation : Officers can also tap into data showing a car’s decals, bumper stickers, back and top racks—along with temporary and unique state tags. Flock calls it a “Vehicle Fingerprint” and it’s touted as a w - FBI Seizes NetNut Proxy Platform, Popa Botnet (KrebsOnSecurity)
The Federal Bureau of Investigation (FBI) said today it worked with industry partners to seize hundreds of domains associated with NetNut, a sprawling residential proxy service operated by the publicly-traded Israeli company Alarum Technolo - Cybersecurity Mission Creep in the US (Schneier on Security)
Interesting paper: “ Cybersecurity Mission Creep .” Abstract: Cybersecurity is experiencing mission creep. Policymakers are casting more and more problems as issues of cybersecurity. So reframed, wildly different policy issues, from misinfo
Enjoying these roundups?
Subscribe for daily follow-ups on AI news, trending open-source tools, and Security Saturdays.
Subscribe free →