[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fM7032a_mak-wccwBd8MdzR4TbVZkemb9mRStZOB-cAQ":3},{"article":4,"iocs":54,"watch_terms":59,"solutions":60,"lesson":146},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"16a6f01f-af1b-4095-8c74-c9f2c732236d","New Januscape Linux flaw allows VM escape on Intel, AMD devices","new-januscape-linux-flaw-allows-vm-escape-on-intel-amd-devices-541ee5","A 16-year-old Linux kernel vulnerability, dubbed Januscape, allows attackers to escape a virtual machine and execute arbitrary code on the host. [...]","A 16-year-old Linux kernel vulnerability, Januscape (CVE-2026-53359), has been discovered, enabling attackers with root access within a virtual machine to escape to the host and execute arbitrary code. This flaw affects both Intel and AMD processors and poses a significant risk to multi-tenant cloud environments. While a full exploit is not yet public, a proof-of-concept for host kernel panic exists, and administrators are urged to apply the June 2026 patch.","Januscape Linux flaw allows VM escape on Intel and AMD devices.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Flinux\u002Fnew-januscape-linux-kernel-flaw-allows-vm-escape-on-intel-amd-devices\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F05\u002F20\u002Flinux.jpg","2026-07-07T12:06:09+00:00","2026-07-07T14:00:10.226869+00:00",9,[17,20,23,25,27,29],{"name":18,"type":19},"KVM\u002Fx86","product",{"name":21,"type":22},"Intel","vendor",{"name":24,"type":22},"AMD",{"name":26,"type":22},"Google",{"name":28,"type":22},"Amazon Web Services",{"name":30,"type":19},"Red Hat Enterprise Linux","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":31,"icon":33,"name":34,"slug":35},null,"Vulnerabilities","vulnerabilities",[37,42,44,49],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"574f766a-fb3f-487c-8d2c-0720ae75471b","Zero-day","zero-day",{"category":43},{"id":31,"icon":33,"name":34,"slug":35},{"category":45},{"id":46,"icon":33,"name":47,"slug":48},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",{"category":50},{"id":51,"icon":33,"name":52,"slug":53},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[55],{"type":56,"value":57,"context":58},"cve","CVE-2026-53359","Januscape Linux kernel vulnerability",[26,28,21],{"controls":61,"vendors":145},[62,90,119],{"slug":63,"name":64,"problem":65,"products":66},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",[67,74,82],{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":63,"product_name":71,"url":72,"description":73},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","Privileged Access Management","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fprivileged-access-management","Gives elevated rights to specific applications only where needed, so users do not need local admin accounts.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-privileged-access-management","Idira Privileged Access Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fhuman\u002Fprivileged-access-management","Privileged access management from the former CyberArk portfolio: vaulting, rotation, just-in-time access and session monitoring.",{"vendor_slug":83,"vendor_name":84,"vendor_logo":85,"product_slug":86,"product_name":87,"url":88,"description":89},"beyondtrust","BeyondTrust","\u002Fvendor-logos\u002Fbeyondtrust.png","password-safe","BeyondTrust Password Safe","https:\u002F\u002Fwww.beyondtrust.com\u002Fproducts\u002Fpassword-safe","Privileged password and session management.",{"slug":91,"name":92,"problem":93,"products":94},"patch-management","Automated patch management","Known holes get closed in days, not months.",[95,103,111],{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":104,"vendor_name":105,"vendor_logo":106,"product_slug":107,"product_name":108,"url":109,"description":110},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":112,"vendor_name":113,"vendor_logo":114,"product_slug":115,"product_name":116,"url":117,"description":118},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"slug":120,"name":121,"problem":122,"products":123},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[124,132,140],{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":128,"product_name":129,"url":130,"description":131},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",{"vendor_slug":133,"vendor_name":134,"vendor_logo":135,"product_slug":136,"product_name":137,"url":138,"description":139},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":141,"product_name":142,"url":143,"description":144},"zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",[],{"slug":147,"title":148,"body":149,"framework_refs":150,"framework_notes":164},"16-year-old-linux-kernel-flaw-enables-vm-escape-on-intel-and-amd","16-Year-Old Linux Kernel Flaw Enables VM Escape on Intel and AMD","CVE-2026-53359 (Januscape) is a critical Linux kernel vulnerability that has existed undetected for 16 years, underscoring how long-lived flaws can lurk in foundational software. The vulnerability allows an attacker with root access inside a virtual machine to escape the VM boundary and execute arbitrary code on the host, directly threatening multi-tenant cloud environments where multiple customers share the same physical infrastructure. The extended window of exposure amplifies the risk, as the flaw may have been exploitable — or even exploited — long before its discovery. Prompt application of the June 2026 patch is essential, as even a partial proof-of-concept (host kernel panic) in the wild signals active attacker interest.",[151,152,153,154,155,156,157,158,159,160,161,162,163],"CIS Control 7 – Continuous Vulnerability Management","CIS Control 4 – Secure Configuration of Enterprise Assets","CIS Control 12 – Network Infrastructure Management","NIST SP 800-40 Rev. 4 – Guide to Enterprise Patch Management","NIST SP 800-125 – Guide to Security for Full Virtualization Technologies","NIST AC-6 – Least Privilege","NIST SI-2 – Flaw Remediation","NIST RA-5 – Vulnerability Monitoring and Scanning","NIST SC-39 – Process Isolation","ISO\u002FIEC 27001:2022 – A.8.8 Management of Technical Vulnerabilities","ITIL 4 – Change Enablement (emergency change procedures)","CSA CCM v4 – TVM-02 Vulnerability Management","GDPR Article 32 – Security of Processing (for cloud providers handling EU data)",{}]