Active attack: Dirty Frag Linux vulnerability expands post-compromise risk

This collection of Microsoft Security Blog posts highlights multiple active and emerging threats: a newly disclosed Linux local privilege-escalation vulnerability family (“Dirty Frag”) impacting kernel networking/memory-fragment handling that enables reliable escalation to root post-compromise (Microsoft Defender providing detections); CVE-2026-31431 (“Copy Fail”), a high-severity Linux root escalation now with a working exploit in the wild affecting cloud and Kubernetes workloads; prompt-injection RCE risks in AI agent frameworks; a macOS ClickFix campaign delivering infostealers via fake “re