Processes: How the Kernel Tracks Everything
Every running program on a Linux system is a process. The kernel represents each one as a single data structure containing everything it needs to manage,...
Articles
CVE-2026-20182: How a Trust Boundary Failure in Cisco SD-WAN Enables Full Fabric Compromise
A missing verification branch in the vdaemon control-plane service lets any unauthenticated attacker become a trusted SD-WAN peer — and from there, rewrite...
Virtual Memory: The Illusion of Private RAM
Every process on a Linux system believes it has the machine's entire address space to itself. That belief is constructed entirely by the kernel and the CPU's...
How OIDC Trusted Publishing Works — and Where Mini Shai-Hulud Found the Gap
OIDC trusted publishing was designed to eliminate the long-lived credentials that supply chain attackers steal. Mini Shai-Hulud bypassed it anyway. Here's how...
A Self-Replicating Worm Just Poisoned 170 npm and PyPI Packages
On May 11, 2026, a worm called Mini Shai-Hulud compromised 84 malicious package versions across the TanStack ecosystem in six minutes — without stealing a...
Privilege Rings: How the CPU Enforces the Boundary
The separation between user space and kernel space is not a software convention — it is enforced by the CPU in hardware. Here is the mechanism that makes it...
The Bootloader: Before the Kernel Exists
Before Linux can run, something else has to find it, load it into memory, and hand over control. That process starts with a CPU executing from a fixed address...
Signed, Delivered, Compromised
DAEMON Tools installers downloaded from the official website between April 8 and May 5 were backdoored — signed with the developer's own certificate,...
When the Firewall Is the Vulnerability
CVE-2026-0300 gives an unauthenticated attacker root-level code execution on PAN-OS firewalls — no credentials, no interaction required. Here's how the Captive...
Why a Linux Binary Won't Run on Windows
A program compiled for Linux won't run on Windows, and a macOS binary won't run on Linux. The reason isn't the code — it's what the binary expects the operating...
What Your Computer Is Doing Right Now
Your machine is running hundreds of processes right now. Memory is being translated, interrupts are firing, the scheduler is switching contexts faster than you...
Copy Fail: How a Nine-Year-Old Kernel Optimization Became a Universal Linux Root Exploit
A logic bug buried in the Linux kernel's cryptographic subsystem since 2017 now lets any unprivileged user become root — reliably, silently, and in 732 bytes of...
How Linux System Calls Work: The Kernel Crossing Explained
A program can't read a file, open a socket, or allocate memory without crossing into the kernel. Here's exactly how that crossing works — registers, privilege...