Aug 18, 2026

The biggest platform news was Linux 7.2, released on 16 August 2026, bringing cache-aware load balancing, a CFS-style GPU job scheduler, memory reclaim gains up to ~30% in MongoDB/YCSB workloads, and USB4STREAM support. In the database world, pgColumnar 1.0-alpha2 added read-only Apache Iceberg support via metadata path, REST catalog, or a new foreign-data wrapper, including position and equality deletes and deletion vectors; its Parquet readers and export functions now work over s3://, http://, and https:// URLs.

Security researchers detailed Operation CameraSwarm, an active campaign that compromised more than 14,000 Dahua cameras across Ukraine and Russia through credential brute-forcing, an authentication bypass using CVE-2021-33044/33045, and Dahua P2P relay abuse that reaches cameras by serial number without authentication.

A critical unauthenticated SQL injection in GeoServer/GeoTools' jsonArrayContains function (GHSA-mqjf-5f49-2fjh, CVSS 9.8) was confirmed as a regression of CVE-2023-25158, reachable through public WFS/WMS OGC endpoints via CQL_FILTER. Separately, New API's CVE-2026-71479 showed user-controlled quantity fields overflowing signed 64-bit billing math to turn a $0.10 balance into $16.9 trillion after settlement.

The Linux kernel bridge had a use-after-free in Spanning Tree Protocol timer management when an administratively down bridge with kernel STP enabled transitions a port into LEARNING, arming timers without an IFF_UP guard because teardown paths differ.

For AI systems, Agent Control Plane separates authorization from LLM execution so a compromised model can request but never authorize actions, and research on mind viruses demonstrated self-propagating ideas in multi-agent LLM systems, finding the risk limited but real.

On the tooling side, SoLo lets fully static musl-linked Linux binaries dlopen() glibc GPU drivers through its own ELF loader and glibc ABI shim, while Rataflow brings interactive node-based UIs to the terminal on top of Ratatui.