Daily digest

New Linux 'pedit COW' Exploit Enables Root Access by Poisoning Cached Binaries

CVE-2026-46331, dubbed 'pedit COW,' is an out-of-bounds write in the Linux kernel's traffic-control packet-editing subsystem (act_pedit) that allows a local unprivileged user to corrupt shared page-cache memory and gain root. A public, working exploit appeared within one day of the CVE being assigned on June 16. Red Hat has rated the flaw as high severity.

Why it matters: Nutanix AHV runs on Linux; any local user or compromised container with host access on an AHV node could exploit this for full host root. Verify your AHV and underlying OS kernel versions are patched, and treat this as urgent given the public exploit.

New 'DirtyClone' Linux Kernel Flaw Lets Local Users Gain Root via Cloned Packets

CVE-2026-43503 (CVSS 8.8), called DirtyClone, is a Linux kernel privilege escalation in the DirtyFrag family that lets a local user corrupt file-backed memory through a cloned network packet to achieve root. JFrog Security Research published a working exploit walkthrough on June 25. A patch has landed in the mainline kernel.

Why it matters: A second simultaneous public Linux kernel LPE with a working exploit compounds the risk to your Nutanix AHV hypervisor hosts and any Linux-based AWS GovCloud EC2 instances. Patch kernel packages on all Linux nodes and verify AMI/AHV base image currency before end of week.

CISA Sets Urgent Deadline to Fix Cisco Flaw Exploited in Attacks

CISA added an actively exploited vulnerability in Cisco Unified Communications Manager Server to its KEV catalog and has given federal agencies until Sunday to apply the patch. The flaw is confirmed to be under active exploitation in the wild.

Why it matters: If your environment includes Cisco UCM for voice or collaboration services, the BOD 22-01 KEV deadline applies directly. Even as a DIB contractor, aligning to KEV timelines is a defensible CMMC IR/CM control posture — confirm whether UCM is in scope and patch immediately.

FBI and CISA Warn Russian Intelligence Hackers Now Target Signal Backup Recovery Keys

The FBI and CISA updated their March advisory on Russian intelligence phishing of Signal accounts to add a new tactic: attackers now socially engineer targets into surrendering their Signal Backup Recovery Key, which grants persistent access to the full account message history even after the initial compromise is discovered. The key remains valid indefinitely once obtained.

Why it matters: If personnel in your organization use Signal for any sensitive coordination outside of official GCC High channels, this represents a persistent exfiltration risk that survives account remediation. Brief staff on never sharing backup recovery keys and audit whether Signal usage policies need tightening under CUI handling requirements.

Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs

CVE-2026-12957 (CVSS 8.5) in Amazon Q Developer allowed a malicious code repository to execute arbitrary commands and steal a developer's AWS cloud credentials through a flaw in how the AI coding assistant handled Model Context Protocol (MCP) server configurations. The attack required only that a developer open and trust the repository workspace. Amazon has patched the vulnerability.

Why it matters: Developers using Amazon Q Developer against AWS GovCloud repositories are directly in scope. Even though Amazon patched this, verify your Q Developer extension is updated and audit whether any developer workstations opened untrusted repos during the exposure window — stolen GovCloud credentials are a serious CUI boundary risk.

Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain Attack

The Miasma/Mini Shai-Hulud malware family has expanded its supply chain attack campaign to compromise npm packages from LeoPlatform and RStreams, abuse GitHub Actions workflows, and spread into the Go ecosystem. Researchers characterize this as an ongoing, evolving campaign targeting developer toolchains across multiple package ecosystems.

Why it matters: If your Ansible playbooks, CI/CD pipelines, or containerized workloads pull npm or Go dependencies from public registries, audit your dependency trees and GitHub Actions workflows for indicators of compromise from this campaign. Supply chain compromise in build pipelines can silently introduce backdoors into production infrastructure.

CISA Adds Exploited PTC Windchill RCE Flaw to KEV as Web Shell Attacks Continue

CISA added a critical remote code execution vulnerability in PTC Windchill PDMLink and PTC FlexPLM product lifecycle management software to its Known Exploited Vulnerabilities catalog due to confirmed active exploitation. Attackers are using the flaw to deploy web shells on affected systems.

Why it matters: Defense contractors commonly run PTC Windchill for engineering data management. If your organization or a supplier in your CUI data flow uses Windchill, this is an active RCE-to-webshell threat requiring immediate patching and inspection of web-accessible Windchill instances.

Cybersecurity Firms Targeted by Fraudulent OpenAI Organization Invites

Threat actors are creating OpenAI tenant accounts impersonating legitimate organizations and sending employees invitations to join them. The apparent goal is to trick targets into submitting sensitive company information — including internal data and credentials — through chats and projects inside the fraudulent tenant.

Why it matters: If staff use OpenAI services and receive unexpected organization join requests, there is a risk of inadvertently submitting CUI or internal technical data to attacker-controlled tenants. Brief users to verify OpenAI organization invitations through out-of-band channels before accepting, and consider whether current AI usage policies address this vector.

Meeting Trump's 2030 Quantum Deadline Will Be Expensive, Complex

Analysis of the Trump administration's 2030 deadline for federal systems to migrate to post-quantum cryptography finds that achieving it will be technically and financially difficult, complicated by multivendor environments, misaligned update life cycles, and gaps in visibility into IT and OT systems. The piece draws attention to the challenge of comprehensive cryptographic inventory as a prerequisite.

Why it matters: CMMC Level 2 organizations handling CUI will face downstream pressure from this federal mandate as DFARS and NIST guidance evolve. Starting a cryptographic algorithm inventory now — across M365 GCC High, AWS GovCloud endpoints, and Nutanix cluster communications — positions you ahead of what will likely become a contractual requirement.

New Initiative Tackles Security for End-of-Life Open Source Software

The Open Source Sustainability Initiative has launched with the goal of helping enterprises manage and secure aging open source projects that no longer receive upstream security patches, while maintaining regulatory compliance. The initiative aims to provide a structured framework for enterprises depending on EOL open source components.

Secret Service Phone Security Lapses Put US Officials at Risk, Watchdog Says

A DHS Inspector General report found that Secret Service agents routinely used personal phones for official work, including during protective operations, because government-issued devices lacked key capabilities. The watchdog identified this as a significant security risk to sensitive government communications.

Why it matters: This is a concrete audit finding validating what CMMC SC.3.177 and the CUI program require: personally-owned devices must not process CUI. If your Intune MDM policy has gaps around BYOD, this report offers useful framing for tightening enrollment and conditional access enforcement before your next assessment.

Terraform MCP Server: Four Real-World AI Infrastructure Patterns

HashiCorp has published documentation and examples for its Terraform MCP Server, which allows AI agents to interact with Terraform to make infrastructure decisions using organizational context and policy guardrails. The post covers four practical patterns for integrating AI-driven infrastructure automation with existing Terraform workflows.