State-Sized Cyber Week: Kernel Flaws, Wipers, and the Stuxnet Backstory

This week’s security digest spans state-sponsored cyber activity from a widespread Linux kernel LPE (CopyFail) tied to IPSec, to Venezuela’s targeted wiper against PDVSA, and expanded US bans on consumer, SMB, and ISP routers. It also highlights a serious CPanel authentication bypass (CVE-2026-41940) with active exploitation, discusses AI prompt injection risks, and revisits pre-Stuxnet history with possible early state malware (Fast16) that predates the famous worm. Rounding out the week is a GitHub Enterprise remote code-execution flaw (CVE-2026-3854) quickly patched, plus observations from a security honeypot and a Google post on prompt-injection.