--- title: Januscape KVM escape goes cross-architecture, Accenture... description: A 16-year-old use-after-free in Linux KVM (CVE-2026-53359, dubbed Januscape) is now public with a DoS PoC, and it's the first guest-to-host escape confirmed... canonical: https://daily.dev/posts/januscape-kvm-escape-goes-cross-architecture-accenture-confirms-azure-devops-breach-w8khbztxh twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Januscape KVM escape goes cross-architecture, Accenture confirms Azure DevOps breach | daily.dev og:description: A 16-year-old use-after-free in Linux KVM (CVE-2026-53359, dubbed Januscape) is now public with a DoS PoC, and it's the first guest-to-host escape confirmed... og:url: https://daily.dev/posts/januscape-kvm-escape-goes-cross-architecture-accenture-confirms-azure-devops-breach-w8khbztxh og:image: https://api.daily.dev/og/posts/w8kHbzTXh.png og:image:alt: Januscape KVM escape goes cross-architecture, Accenture confirms Azure DevOps breach og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Januscape KVM escape goes cross-architecture, Accenture confirms Azure DevOps breach **[Security Digest](https://daily.dev/sources/security_digest)** · 5 min read · 0 upvotes · 0 comments ## Summary A 16-year-old use-after-free in Linux KVM (CVE-2026-53359, dubbed Januscape) is now public with a DoS PoC, and it's the first guest-to-host escape confirmed working across both Intel and AMD — anyone running multi-tenant cloud workloads needs to check their distro patch status now. Accenture confirmed a breach after threat actor '888' listed 35 GB of stolen data including RSA keys, SSH keys, and Azure PAT tokens for sale. XWayland 24.1.13 dropped to fix two new X.Org CVEs found with AI assistance, and GitHub's GitLost prompt injection flaw lets unauthenticated attackers leak private repo data with nothing more than a crafted issue. ## Content **TLDR:** A 16-year-old use-after-free in Linux KVM (CVE-2026-53359, dubbed Januscape) is now public with a DoS PoC, and it's the first guest-to-host escape confirmed working across both Intel and AMD — anyone running multi-tenant cloud workloads needs to check their distro patch status now. Accenture confirmed a breach after threat actor '888' listed 35 GB of stolen data including RSA keys, SSH keys, and Azure PAT tokens for sale. XWayland 24.1.13 dropped to fix two new X.Org CVEs found with AI assistance, and GitHub's GitLost prompt injection flaw lets unauthenticated attackers leak private repo data with nothing more than a crafted issue. --- ## CVE-2026-53359 (Januscape): first cross-architecture KVM guest-to-host escape, DoS PoC public A 16-year-old use-after-free in KVM's x86 shadow MMU emulation lets an attacker with root inside a guest VM execute arbitrary code on the host, taking over all co-tenant VMs or crashing the kernel. It's the first KVM escape confirmed on both Intel and AMD, which makes it relevant to essentially every x86 public cloud. The Linux kernel was patched in June (commit 81ccda30b4e8), but distro-level patches lag — RHEL exposes /dev/kvm world-writable, meaning unprivileged users inside a guest can trigger it. A DoS PoC is already public; the full escape exploit is being withheld for now. Check your distro's patch status and treat any unpatched multi-tenant host as compromised-adjacent. [Read more](https://daily.dev/feed-by-ids?id=GX1SCsPVh&id=pgTeQQQ1I) ## Accenture confirms breach: RSA keys, SSH keys, Azure PAT tokens, and source code listed for sale Threat actor '888' claimed to have cloned an Azure DevOps repository under an accenture.com hostname and is selling 35 GB of data including RSA keys, SSH keys, Azure Storage access keys, and configuration files. Accenture called it isolated and remediated with no operational impact, but declined to say how attackers got in or what was actually accessed. This is the same threat actor involved in a 2024 third-party breach against Accenture, and the third notable incident overall following the 2021 LockBit ransomware attack. If you're an Accenture customer with shared infrastructure or credentials, now is the time to audit. [Read more](https://daily.dev/posts/nsJor076e) ## GitLost: unauthenticated prompt injection in GitHub Agentic Workflows leaks private repo data Noma Security found that an unauthenticated attacker can open a GitHub Issue in any public repo and embed plain-English instructions that trick the AI agent — backed by Claude or Copilot — into exfiltrating data from the organization's private repositories. No credentials or code required. The root cause is the agent failing to maintain a trust boundary between system instructions and untrusted user content. GitHub reportedly updated its documentation rather than shipping a fix. Until there's a real patch, apply least-privilege access to any AI agent with repo access and logically isolate untrusted input from system prompts. [Read more](https://daily.dev/feed-by-ids?id=jTY8EOyaf&id=gKw3RHOdD) ## XWayland 24.1.13 patches two new X.Org CVEs found with AI assistance CVE-2026-55999 is a buffer overflow in GLAMOR font code and CVE-2026-56000 is a use-after-free in the GLX code path — both discovered by Trend Micro Zero Day Initiative with Claude Opus 4.6 assistance. X.Org Server 21.1.24 is expected shortly with the same fixes. If you're running XWayland in any desktop or embedded Linux environment, patch now; the GLX use-after-free in particular is the kind of flaw that tends to be exploitable. [Read more](https://daily.dev/posts/LjJYh4rji) --- ## Also notable - **CVE-2026-20896 (Gitea Docker, CVSS 9.8) under active probing 13 days after patch:** The default REVERSE_PROXY_TRUSTED_PROXIES wildcard in the official Gitea Docker image lets any attacker reaching the HTTP port impersonate any user via a forged X-WEBAUTH-USER header — Sysdig caught the first in-the-wild probe from a ProtonVPN exit node, with ~6,200 internet-facing instances on Shodan; update to 1.26.3 or 1.26.4 and restrict the trusted proxy setting to your actual proxy address. [Read more](https://daily.dev/posts/wHnIJN6Ok) - **Argo CD repo-server gRPC lacks authentication, enabling unauthenticated RCE and full Kubernetes cluster takeover:** Synacktiv disclosed an unpatched flaw reported in January 2025 where Argo CD's repo-server gRPC interface has no authentication, letting a compromised pod inject malicious KustomizeOptions for arbitrary code execution, Redis access, and arbitrary manifest deployment — apply strict Kubernetes network policies as a mitigation until a fix ships. [Read more](https://daily.dev/posts/kb2oEqMx0) - **Dialogflow CX 'Rogue Agent' flaw: single low-privilege permission enabled silent chatbot data exfiltration:** Varonis found that dialogflow.playbooks.update permission was enough to inject malicious Python into Code Blocks, silently exfiltrating conversation data across all agents sharing a GCP project — Google patched by mid-2026, but organizations should audit Playbook update logs and Code Blocks for unauthorized changes. [Read more](https://daily.dev/posts/4L8sv7gfV) - **ECB orders euro-area banks to submit AI cyber threat action plans by end-October 2026:** ECB supervisory board chair Claudia Buch cited Anthropic's Claude Mythos model — which reportedly found thousands of severe vulnerabilities in major OS and browser codebases — as a key driver, while the European Systemic Risk Board simultaneously elevated systemic cyber risk to 'severe' and flagged dependency on non-EU AI providers as a geopolitical vulnerability. [Read more](https://daily.dev/posts/aHgX3yQKL) - **CVE-2026-11405: hidden backdoor in Tenda router firmware grants admin access, no patch available:** Five Tenda models (FH1201, W15E, AC10, AC5, AC6 V2) have an undocumented fallback password in the login() function that accepts any username — Tenda hasn't responded to CERT/CC, so disable remote web management and change the default LAN IP as the only available mitigations. [Read more](https://daily.dev/posts/p9EISZQ9C) ## Similar posts on daily.dev - [16-year-old KVM flaw allows attackers to escape VMs and take over Linux servers](https://daily.dev/posts/16-year-old-kvm-flaw-allows-attackers-to-escape-vms-and-take-over-linux-servers-gx1scspvh) · CSO Online · 0 upvotes · 0 comments - [New Linux kernel flaw allows VM escape on Intel, AMD devices](https://daily.dev/posts/new-linux-kernel-flaw-allows-vm-escape-on-intel-amd-devices-pgteqqq1i) · BleepingComputer · 2 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#prompt-injection](https://daily.dev/tags/prompt-injection), [#azure-devops](https://daily.dev/tags/azure-devops) [View this post on daily.dev](https://daily.dev/posts/januscape-kvm-escape-goes-cross-architecture-accenture-confirms-azure-devops-breach-w8khbztxh) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"DiscussionForumPosting","mainEntityOfPage":"https://daily.dev/posts/januscape-kvm-escape-goes-cross-architecture-accenture-confirms-azure-devops-breach-w8khbztxh","headline":"Januscape KVM escape goes cross-architecture, Accenture confirms Azure DevOps breach","text":"A 16-year-old use-after-free in Linux KVM (CVE-2026-53359, dubbed Januscape) is now public with a DoS PoC, and it's the first guest-to-host escape confirmed working across both Intel and AMD — anyone running multi-tenant cloud workloads needs to check their distro patch status now. Accenture confirmed a breach after threat actor '888' listed 35 GB of stolen data including RSA keys, SSH keys, and Azure PAT tokens for sale. XWayland 24.1.13 dropped to fix two new X.Org CVEs found with AI assistance, and GitHub's GitLost prompt injection flaw lets unauthenticated attackers leak private repo data with nothing more than a crafted issue.","url":"https://daily.dev/posts/januscape-kvm-escape-goes-cross-architecture-accenture-confirms-azure-devops-breach-w8khbztxh","datePublished":"2026-07-08T04:18:46.962Z","dateModified":"2026-07-08T04:19:18.132Z","author":{"@type":"Organization","name":"Security Digest","logo":"https://media.daily.dev/image/upload/s--m4ZKB_C0--/f_auto,q_auto/v1779959612/logos/security_digest","url":"https://daily.dev/sources/security_digest"},"interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"isPartOf":{"@type":"WebPage","url":"https://daily.dev/sources/security_digest","name":"Security Digest"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Security Digest","item":"https://daily.dev/sources/security_digest"},{"@type":"ListItem","position":3,"name":"Januscape KVM escape goes cross-architecture, Accenture confirms Azure DevOps breach"}]} ```