Active attack: Dirty Frag Linux vulnerability expands post-compromise risk

This Microsoft Security Blog feed highlights multiple active threats and security developments: a newly disclosed Linux local privilege escalation dubbed “Dirty Frag” (affecting kernel networking/memory-fragment handling like esp4, esp6, rxrpc) that enables reliable escalation from unprivileged users post-compromise and is being monitored in the wild; research showing prompt-injection in AI agent frameworks can lead to remote code execution; a macOS ClickFix campaign using fake utilities to deliver infostealers; a multi-stage phishing/AiTM token compromise campaign; and a high-severity Linux “