Tech
US government warns of severe CopyFail bug affecting major versions of Linux
A severe security vulnerability affecting almost every version of the Linux operating system has caught defenders off-guard and scrambling to patch after security researchers publicly released exploit code that allows attackers to take complete control of vulnerable systems.
The U.S. government says the bug, dubbed “CopyFail,” is now being exploited in the wild, meaning it’s being actively used in malicious hacking campaigns.
The bug, officially tracked as CVE-2026-31431 and discovered in Linux kernel versions 7.0 and earlier, was disclosed to the Linux kernel security team in late March, and patched after about a week. But the patches have yet to fully trickle down to the many Linux distributions that rely on the vulnerable kernel, leaving any system running an affected Linux version at risk of compromise.
Linux is widely used in enterprise settings, running the computers that operate much of the world’s data centers.
The CopyFail website says that the same short Python script “roots every Linux distribution shipped since 2017.” According to security firm Theori, which discovered CopyFail, the vulnerability was verified in several widely used versions of Linux including Red Hat Enterprise Linux 10.1, Ubuntu 24.04 (LTS), Amazon Linux 2023, as well as SUSE 16.
DevOps engineer and developer Jorijn Schrijvershof wrote in a blog post that the exploit works on Debian and Fedora versions, as well as Kubernetes, which relies on the Linux kernel. Schrijvershof described the bug as having an “unusually big blast radius” as it works on “nearly every modern distribution” of Linux.
The bug is called CopyFail because the affected component in the Linux kernel, the core of the operating system that has virtually complete access to the entire device, does not copy certain data when it should. This corrupts sensitive data within the kernel, allowing the attacker to piggyback the kernel’s access to the rest of the system, including its data.
If exploited, the bug is particularly problematic because it allows a regular, limited-access user to gain full-administrator access on an affected Linux system. A successful compromise of a server in a data center could allow an attacker to gain access to every application, server, and database of numerous corporate customers, and potentially gain access to other systems on the same network or data center.
The CopyFail bug cannot be exploited over the internet on its own, but can be weaponized if used in conjunction with an exploit that works over the internet. Per Microsoft, if the CopyFail bug is chained together with another vulnerability that can be delivered over the internet, an attacker could use the flaw to gain root access to an affected server. A user operating a Linux computer with a vulnerable kernel could also be tricked into opening a malicious link or attachment that triggers the vulnerability.
The bug could also be injected by way of supply chain attacks, in which malicious actors hack into an open source developer’s account and plant the malware in their code in order to compromise a large number of devices in one go.
Given the risk to the federal enterprise network, U.S. cybersecurity agency CISA has ordered all civilian federal agencies to patch any affected systems by May 15.
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.
Tech
As workers worry about AI, Nvidia’s Jensen Huang says AI is ‘creating an enormous number of jobs’
When it comes to the specter of AI’s labor-displacing potential, Jensen Huang thinks that the American worker has nothing to fear. During a conversation Monday night with MSNBC’s Becky Quick hosted by the Milken Institute — an economic policy think tank, the jovial Nvidia CEO said that AI was an industrial-scale generator of jobs, not the harbinger of mass unemployment that so-called “AI doomers” have often accused it of being.
A number of different topics were broached during the talk, but a central theme that kept coming back was the ongoing economic anxiety surrounding the AI industry and whether it was something Americans should be legitimately worried about. At one point Quick noted: “This is happening so quickly. Is there a bigger dislocation than we’ve seen in the past that leads to greater inequality? And what do we do about that?”
Throughout the night, Huang struck an optimistic note. “AI creates jobs,” Huang asserted during the discussion, adding that “AI is [the] United States’ best opportunity to re-industrialize” itself. Huang noted that the AI industry is powered by a new breed of industrial factories—the kinds producing the hardware that acts as critical infrastructure for the AI business. (Huang’s company notably sells a lot of that hardware.) Those factories necessarily need workers, as does the rest of the blossoming AI industry.
Just because a specific task is automated, that doesn’t mean that a person’s entire job is going to be replaced, Huang reasoned. People who believe this “misunderstand that the purpose of a job and the task of a job are related” but not ultimately the same thing, he said. In other words, Huang’s argument is that even when AI takes over a discrete task within a role, the broader function that employee serves in an organization is likely to remain.
Relatedly, Huang was critical of people who allege AI will dominate humanity or that it will wipe out huge sectors of the economy. “My greatest concern is that we scare…people—all the people that we’re telling these science fiction stories to, to the point where AI is so unpopular in the United States, or people are so afraid of it, that they don’t actually engage it,” he said.
Ironically, much of the “doomer” rhetoric has been generated by the AI industry itself, and critics maintain that such hyperbole has been used as a marketing gimmick designed to gin up buzz and excitement for products that aren’t anywhere near the capabilities that such rhetoric suggests.
It remains to be seen what kind of long-term impact AI will have on the overall economy. That said, reputable financial and academic organizations have suggested that as much as 15% percent of jobs in the U.S. will be eliminated over the next several years as a result of AI.
Techcrunch event
San Francisco, CA
|
October 13-15, 2026
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.
Tech
Moment Energy raises $40M to meet ‘infinite demand for power’ with EV batteries
Moment Energy CEO Edward Chiang believes demand for power in North America is infinite — and that his startup has the solution.
The company, which has headquarters in Canada and the United States, takes a novel approach to repurposing electric vehicle batteries, Chiang told TechCrunch. The company’s approach is special, he said, because of its dual focus on safety and modularity.
Investors apparently agree. On Tuesday, Moment Energy announced it has raised a $40 million Series B funding round, bringing its total funding to more than $100 million. The round was led by Canadian VC firm Evok Innovations, with additional funding from grocery retailer fund W23, joining existing investors like Amazon’s Climate Pledge Fund and In-Q-Tel, the CIA-funded VC firm.
In Chiang’s view, the electric grid in North America is in a losing race to keep up with this demand for power, driven by an increasingly extreme climate, the rise of electric vehicles, and the data center boom. So far, he says mostly Chinese companies have filled this demand — to the tune of about 72% of the global market, according to BNEF — adding a national security wrinkle to the picture.
Moment Energy is tackling this by taking battery packs from electric vehicles, ripping out the automakers’ battery management systems, and writing its own software to manage the packs. It then packages the battery modules into larger grid-scale storage solutions that can host a wide mix of battery chemistries, allowing customers to benefit from future advances in the technology while also reducing downtime if a particular module fails.
Crucially, Chiang said, Moment Energy is doing this all with UL Certification, making it the first company to repurpose batteries with a stamp of approval from the safety organization.
Chiang said other companies working on repurposing EV batteries for long-term storage often claim that they test their products against UL certification standards, but that they don’t actually obtain the certifications, which requires the use of certain components.
Techcrunch event
San Francisco, CA
|
October 13-15, 2026
“What most other second life [battery] companies are now trying to say is, let’s just lobby to make second life UL certification easier, because it is impossible to get UL certification, as it stands,” he said. “But at Moment, we say that’s not true. We got it.”
UL certification may sound boring, but Chiang said it can make a difference not only when it comes to safety, but also in how these energy storage products are insured.
He claimed (without naming them) that other energy storage companies will leave an automaker’s battery management system in tact on the re-used batteries, and essentially trick the pack into thinking it’s still on the road to coax the right amount of discharge.
This could make these storage solutions either uninsurable or too costly to insure, Chiang said. He pointed to Liberty Mutual’s venture arm participation in Moment Energy’s Series B as proof that his company’s solution is above board.
“Maybe as engineers, or as consumers, we think that’s kind of interesting,” he said. “In reality, fire inspectors don’t think that’s interesting. Automakers don’t think that’s interesting. You can imagine if — I really hope this never happens — but if a battery catches fire, the fire inspector will say, ‘Oh, hey, there’s a Tesla battery management system in here, or there’s a Nissan battery management system in here,’ and the automaker will say: ‘I’ve never given permission for anybody to hack and bootleg my safety systems.’”
Chiang’s confidence seems to come from a number of places. Despite being small — Chiang said Moment Energy has around 72 employees — the company has signed supply deals with Mercedes-Benz and Nissan. It secured a $20 million loan from the Department of Energy. And it’s building a gigawatt-scale factory in Austin, Texas.
Moment also has a growing book of diverse customers, from utilities, to industrial companies, and — yes — data centers.
But Chiang said he also thinks a lot of Moment Energy’s approach comes from the fact that it’s a Canadian company at heart, removed from some of the most base impulses of Silicon Valley.
While Chiang said “all the data center companies have been reaching out to us,” he also stressed that his company didn’t want to walk into a trap by fundraising against promises that can’t be met.
“What we’ve been really thinking about as a whole is just staying focused overall in what we know, and what we’re building, and serving real customers, versus trying to sign up deals that are five years or 10 years down the road just to fundraise. And unfortunately, we see that a lot of Bay Area startups are less so trying to deliver product, but they’re trying to raise the next round,” he said.
“But for us, I think because we had roots up in Canada, a lot of Canadian companies focus on building a tangible business and a real, profitable business, as well as a high-growth business, and we’re pretty realistic when it comes to deployment.”
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.
Tech
Coinbase to lay off 14% of staff as part of broader restructuring
Crypto exchange Coinbase said on Tuesday it is laying off about 700 employees, or 14% of its staff, as part of a broader restructuring aimed at addressing market volatility and increasing the use of AI tools to improve efficiency.
The restructuring would see the company flattening its organizational structures to just five layers below the CEO and COO levels, according to an internal email that the company’s CEO Brian Armstrong posted on the company blog.
The reorg would implement new requirements for managers to contribute more, and leaders could now have more than 15 direct reports. The company is also focusing on putting together small teams that use AI tools, and will experiment with “one-person teams” that would combine engineering, design and product management roles.
Coinbase expects to incur approximately $50 million to $60 million in severance costs, it said in an SEC filing.
In the email, Armstrong cited the volatility of crypto markets as a reason to reexamine the company’s cost structure.
“While we’ve managed through that cyclicality many times before and come out stronger on the other side, we’re currently in a down market and need to adjust our cost structure now so that we emerge from this period leaner, faster, and more efficient for our next phase of growth,” he wrote.
He also highlighted the need to make the most of AI tools: “AI is changing how we work. Over the past year, I’ve watched engineers use AI to ship in days what used to take a team weeks. Non-technical teams are now shipping production code and many of our workflows are being automated. The pace of what’s possible with a small, focused team has changed dramatically, and it’s accelerating every day […] This is a new way of working, and we need to leverage AI across every facet of our jobs.”
Techcrunch event
San Francisco, CA
|
October 13-15, 2026
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.
