You're listening to Tech Beat, your daily look at the stories shaping our digital world.
A critical vulnerability in the Linux kernel is raising alarms across the cloud computing industry. The flaw, nicknamed PwnEscape and tracked as CVE two thousand twenty six, ninety nine thousand nine hundred ninety nine, allows code running inside a virtual machine to read memory belonging to the host system. A researcher demonstrated the exploit against Vercel's live cloud environment, and Vercel confirmed the breach. Because the flaw lives in the kernel's networking code rather than any single provider's configuration, the exposure is widespread.
On the security front, attackers are actively exploiting a separate critical vulnerability in Collabora Online, a document editing tool built into Nextcloud servers. The flaw, tracked as CVE two thousand twenty six, one hundred ten thousand four hundred forty seven, enables remote code execution and has been used to plant backdoors on affected systems. Organizations running Nextcloud should treat patching this as urgent.
And in Russia, the central bank has confirmed that peer-to-peer Bitcoin trading will be banned starting July first, two thousand twenty seven. Until then, Russians can still trade directly with one another, but after that date every transaction must flow through a Bank of Russia approved broker or exchange. It is a significant tightening of state control over how ordinary people access cryptocurrency.
Stay curious, stay skeptical. Tech Beat out.
