Patching at Fleet Scale, Twice: How DigitalOcean Closed Januscape and the AMD Safe RET Issue Without Customer Impact
From the source: DigitalOcean Blog
Setting the stakes In early July, security researcher Hyunwoo Kim discovered Januscape (CVE-2026-53359), a flaw in KVM’s handling of nested virtualization that could allow a malicious guest to escape into the host hypervisor. It was disclosed publicly on July 6 via the Linux oss-security mailing list . For a cloud provider, a guest-to-host escape is the most serious class of vulnerability there…
Read the full story on DigitalOcean BlogAsk the square
The story is what was announced. If it raises a question for your team, ask the people who run this technology day to day. Your post links back to this story, so the next reader finds it too.
Recent threads in Cloud Infrastructure
What is the one cloud architecture decision you would undo if you could?
Account structure, networking, region choice, managed-service lock-in: the lessons that cost the most are the most useful to others.
Primary cloud strategy for FY27?
Which best describes your organisation’s direction for the next 12 months?
Something wrong or out of date? Suggest a correction. We reply within 5 business days.
More from DigitalOcean
Recent updates from DigitalOcean, so you can tell whether this is a one-off or part of a pattern.
More in Cloud Infrastructure
What other companies in Cloud Infrastructure are doing. The category page shows who’s active, side by side.
