Skip to content

Sam's News — tech — 2026-08-30

Security

7.5 Omarchy: Linux privilege escalation vulnerability allows users to gain root access

Omarchy Linux fixed a critical privilege escalation vulnerability (Omarchy) in versions prior to 4.0.1 that allowed any user process to gain root access without authentication. The flaw arose from default inclusion of user accounts in the docker group, enabling access to the Docker socket and root-level command execution.

  • Vulnerability affected all Omarchy versions prior to 4.0.1
  • Any user process could escalate to root without password or sudo prompt
  • Root cause: default docker group membership granting Docker socket access
  • Introduced June 1, 2025; removed from defaults August 24, 2026
  • Affected entire user session since supplementary groups inherited by child processes

Sources: 0xcc.io AI Web Searched, Hacker News (front page) RSS

7 Critical arbitrary code execution vulnerability discovered in QubesOS

QubesOS released a critical security patch (QSB-118) for a code execution flaw in the qvm-copy-to-vm tool that allows attackers to inject commands into the system's trusted domain (dom0). The vulnerability exists in error reporting that unsafely processes filenames from compromised qubes, requiring the attacker to have already compromised a qube and for a user to initiate a copy operation to that qube.

  • QSB-118 fixes arbitrary code execution in qvm-copy-to-vm
  • Affects dom0 via unsafe filename handling in error reporting
  • Requires pre-compromised qube and user-initiated copy operation
  • Patches available through normal system updates

Sources: Qubes OS AI Web Searched, Hacker News (front page) RSS

7 European Commission pushes encryption backdoors in ProtectEU strategy

The European Commission announced ProtectEU, a security strategy that revives efforts to mandate encryption backdoors for law enforcement access to data. The initiative includes expanded intelligence sharing and enhanced powers for EUROPOL, though critics warn any backdoor would be accessible to hostile actors.

  • ProtectEU strategy announced April 2025
  • Proposes 'lawful and effective access' to encrypted data via backdoors
  • Calls for roadmaps for 'technological solutions' to access encrypted data
  • Includes increased intelligence sharing through EU's Single Intelligence Analysis Capacity (SIAC)
  • Expanded EUROPOL powers for cross-border and large-scale investigations

Sources: Reclaim the Net AI Web Searched, Hacker News (front page) RSS

7 Massive 12TB Steam leak includes abandoned Half-Life 2: Episode 3 assets

A 12-terabyte leak of Steam data spanning 2003–2013 has exposed builds of thousands of games, including canceled Half-Life 2: Episode 3 assets and unreleased content from Portal 2 and other major titles. The archive's full contents remain unknown due to its size, with discoveries still ongoing.

  • 12 terabytes of Steam data from 2003–2013 leaked
  • Includes canceled Half-Life 2: Episode 3 assets and Weaponizer tool
  • Contains deleted Portal 2 dialogue and alternative GlaDOS sequences
  • Early builds of Call of Duty, Resident Evil, Mirror's Edge, Batman: Arkham Asylum, Dragon Age: Origins discovered
  • F-Stop (unreleased Portal universe game) found in archive

Sources: The Verge AI Web Searched, Engadget RSS

Physics

7 Scientists create microscopic quark-gluon plasma to study early universe

Researchers have produced an extreme state of matter in smaller atoms than previously thought possible, revealing new insights into the universe's origins.

Sources: Wired RSS

Environment

7 Europe's extreme summer drought threatens desertification

Europe faces an unprecedented summer drought in 2026 threatening desertification, with Hungary hit hardest—99% of its land under severe or extreme drought conditions. Fish farms across the region suffered devastating losses, with Hungary alone losing nearly 280 metric tons of fish worth an estimated €4.2 million.

  • Danube River water levels severely dropped; fish confined to ponds exceeding 30°C (86°F)
  • Hungary: ~99% of land under severe or extreme drought
  • Hungary: 1,588 hectares of fish ponds dried out across 20 farms
  • 280 metric tons of fish deaths in Hungary; revenue loss ~1.3 billion forints (~$4.2 million)
  • Affects energy, water supplies, crops, river traffic, and trade across multiple countries
  • Scientists link extreme weather to human-induced climate change

Sources: Fortune AI Web Searched, Hacker News (front page) RSS

AI

6.5 China advances in robotics and AI amid intensifying U.S.-China technology race

China is making rapid progress in robotics development as the broader U.S.-China AI and technology competition accelerates.

Sources: The Verge RSS

Australia's Fair Work Commission criticized AI-generated legal advice as fundamentally incorrect and unreliable.

Sources: Hacker News (front page) RSS

AI & Automation

6.5 Meta Tests Robots in Data Center Operations

Meta is testing robots to automate tasks traditionally performed by human technicians in its data centers.

Sources: Ars Technica RSS

Surveillance & Policy

6.5 Texas Governor Abbott freezes state funding for Flock surveillance cameras

Governor Greg Abbott halted Texas state spending on Flock artificial intelligence surveillance cameras following a Tribune investigation revealing $30 million in prior expenditures and growing public backlash.

Sources: The Verge RSS