https://www.msbiro.net/tags/ai-security-research/ Recent content in Ai-Security-Research on Cloud Native & Open Source: A Team Lead’s Working Journal https://www.msbiro.net/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E https://www.msbiro.net/%3Clink%20or%20path%20of%20image%20for%20opengraph,%20twitter-cards%3E Hugo -- 0.164.0 en-us Sun, 09 Aug 2026 09:00:00 +0000 https://www.msbiro.net/posts/sctphantom-cve-2026-64564-threat-modeling/ Sun, 09 Aug 2026 09:00:00 +0000 https://www.msbiro.net/posts/sctphantom-cve-2026-64564-threat-modeling/ CVE-2026-64564 (SCTPhantom) is a critical Linux kernel use-after-free in SCTP ASCONF with a high CVSS score and a demonstrated container escape. A DevSecOps threat-modeling walkthrough of when to care, who is actually at risk, and how to prioritize patching without panic, accounting for attacker-creatable SCTP associations.