VIDEO BRIEFING ·
Daily Brief: Linux patch review, Webb and mobile spyware
A 3 minute 21 second news briefing on OpenAI’s Linux kernel audit, a known planet recovered in Webb data and a mobile spying campaign.
English captions and transcript. This briefing uses synthetic narration and labelled archive or context media.
Read the reporting
English transcript
Opening
Today, three stories about what a tool can find and what people still have to verify. Linux security fixes, a planet hiding in Webb’s data, and a mobile spying campaign.
OpenAI’s Linux kernel audit
OpenAI says its research pipeline produced working exploits for nine hundred and forty-eight distinct Linux kernel flaws. That was a controlled audit, with code already running under an ordinary user account. The exploits showed how a local user could gain administrator privileges under the test conditions. The team also generated candidate patches. Those patches still need review by people familiar with the affected code. A proposed fix can correct the test case and still cause problems in other parts of the kernel. A fix also has to reach the branch a distribution ships. Then the machine needs to boot into a kernel that contains it. For an administrator, the useful check is the vendor advisory for the system you operate. Compare the fixed package with the kernel that is actually running. The research total cannot answer that for you.
Webb recovers 51 Eridani b
A giant planet was hiding in an observation the Webb telescope made in twenty twenty-three. Astronomers already knew the planet, fifty-one Eridani b. Earlier processing missed it in one infrared band. A research team modeled how the telescope spread light from the host star across the image. With a better model of that glare, the planet’s signal came through at four point three microns. The team reports about four times better detection sensitivity at the planet’s position in that observation. That wavelength matters because it can help researchers study the planet’s atmosphere. Working out the atmospheric composition will take further analysis. The sensitivity gain applies to this observation. It is a reason to look again at old telescope data, where signals may have survived an earlier analysis.
Mobile spying reused patched flaws
Security researchers at Sekoia recovered three exploit chains aimed at iPhones and Android devices. The campaign reached visitors through compromised sites, imitation sites and a tampered website analytics script. The code checked which browser and device it was dealing with. It then selected a matching attack. The underlying flaws already had fixes. Older versions still gave the attackers a route in. The tools could steal browser cookies and, in some cases, other information stored on the phone. The researchers give no verified count of how many phones the campaign compromised. On iPhone, verify the system update that is installed. On Android, check the device security patch and the Chrome update separately. If you are investigating a suspected compromise, keep that response separate from patching. A patch closes a route in. It cannot recover data already taken.
Closing
Find the full reports and their sources at Lumacta News. This briefing uses a synthetic narrator. Thanks for watching.
Production and media credits
- Keyboard context footage by Alena Darmel / Pexels. Film date unavailable. · Clip · Pexels license
- Webb optics archive footage, released December 2016. NASA’s Goddard Space Flight Center. Clean-room engineering footage used for context. · NASA archive reel · NASA SVS reuse guidance
- Phone context footage by Mikhail Nilov / Pexels. Film date unavailable. · Clip · Pexels license
- Lumacta graphics, animated ident and original jingle. Synthetic English narration with local Kokoro Isabella.