Active attack: Dirty Frag Linux vulnerability expands post-compromise risk

Feed highlights multiple active threats and security developments: newly disclosed Linux local privilege escalation issues (notably “Dirty Frag” and the high-severity Copy Fail vulnerability) that enable reliable escalation to root across cloud and Kubernetes environments with evidence of in-the-wild exploitation; prompt-injection driven RCE risks in AI agent frameworks; a macOS ClickFix campaign delivering infostealers via fake utilities; and a large multi-stage AiTM credential-theft phishing campaign. Microsoft Defender is monitoring activity and provides detection coverage for exploitation.