Samsung KNOX Kernel UAF Exposes Millions of Galaxy Devices

Multiple high-impact security incidents reported June 2026: a Samsung KNOX kernel use‑after‑free (CVE-2026-20971) in PROCA/FIVE was patched in Jan 2026 and could allow kernel corruption on millions of Galaxy devices; Dify (open-source AI platform) has four vulnerabilities (two critical) enabling unauthenticated access and cross-tenant data exposure across ~1M apps; a ShapedPlugin Pro supply‑chain compromise (Apr–Jun 2026) backdoored plugin updates to steal credentials, 2FA secrets and grant full site access; Squidbleed (CVE-2026-47729) is a long-lived Squid memory overread leaking credentials;