Linux

Linux hardening is not the act of enabling every restrictive setting a distribution provides. It is the work of reducing

London, UK – August 25, 2026 – Following our initial collaboration announcement in March 2026, Canonical and Arduino (a subsidiary

Code merged for the Linux 7.3 development cycle changes the measured boot evidence produced by the Integrity Measurement Architecture, or

A Linux BPF patch posted on August 21, 2026, expands validation for program replacement across cgroup and Linux Security Module

A Linux TCP query can touch congestion-control memory after a concurrent BPF update has freed it. Two new use-after-free reports

A flaw in Kata Containers weakened container security in some Confidential Containers deployments. It allowed a malicious host operator to

Recent KVM work exposed a gap between what Linux says a TDX protection supports and what the TDX-specific code actually

eBPF security is often summarized in one sentence: Linux loads an eBPF program only after the kernel verifier accepts it

Confidential computing can protect sensitive workloads even when the cloud host cannot be fully trusted. Confidential virtual machines can shield