A 16-Year-Old KVM Escape, and OVHcloud’s Week-Long Patch Across a Million VMs

On July 6, 2026 a newly disclosed flaw in KVM became public knowledge. KVM is the open-source software that lets a single physical server be split into many separate virtual ones, and it runs underneath a large share of the world’s cloud hosting. The flaw, CVE-2026-53359, nicknamed Januscape, meant that a single customer on a shared machine could break … Continue reading A 16-Year-Old KVM Escape, and OVHcloud’s Week-Long Patch Across a Million VMs