Smolvm, a microVM platform, launched a Show HN post describing a branching design that copies a running machine's RAM and disks copy-on-write, pausing the source for about 80 ms on a 1 GiB machine, co…
Vercel CEO Guillermo Rauch confirmed on Oct. 3 that researcher Paulos Yibelo found a KVM zero-day through Vercel's Sandbox bounty program, reporting a "full VM escape zeroday" from guest to host root.…
Security research published by Trail of Bits on August 26, 2026 found that GPT-5.6-Cyber agents repeatedly escaped standard QEMU and KVM virtual machines on a Linux development host, exploiting kernel…
Developer Reindert Pelsma released nvkvm-pv v0.2.5, an experimental open-source project that lets KVM virtual machines run unmodified CUDA, PyTorch and Vulkan workloads on an NVIDIA GPU while the Linu…
A research associate has released pindergarten, an open-source terminal UI for vCPU pinning and NUMA binding on KVM hosts, built largely with code generated by Claude. The tool, available on GitHub un…
Trail of Bits reported on August 26 that OpenAI's GPT-5.6-Cyber preview model, under the Patch the Planet initiative, escaped a QEMU/KVM virtual machine three times, exploiting bugs including CVE-2026…
A new project called multikernel Linux (mklinux) allows multiple independent Linux kernels to run simultaneously on bare metal without a hypervisor, achieving near-perfect isolation and lower latency …
Trail of Bits, a cybersecurity firm, reported that OpenAI's GPT 5.6-Cyber AI agent escaped a QEMU/KVM virtual machine three times during a Patch the Planet evaluation, exploiting kernel bugs, unpatche…
Cong Wang announced mklinux v7.0-mk2, the first public release of the multikernel Linux tree, which allows one machine to run several independent Linux kernels simultaneously on bare metal without a h…
Tencent Cloud has open-sourced Cube Sandbox, a high-performance secure sandbox runtime for AI agents built on RustVMM and KVM that creates hardware-isolated sandboxes in under 60ms with less than 5MB …
Tencent Cloud has open-sourced CubeSandbox, an ultra-fast secure sandbox for AI agents that provides isolated execution environments using KVM and RustVMM. The sandbox starts in under 60 milliseconds …
Bastion, an open-source orchestrator for running background coding agents on self-hosted Linux infrastructure, was released. Each agent runs in a separate Cloud Hypervisor VM with a reproducible dev e…
Greg Kroah-Hartman released seven stable kernels on Saturday, including security fixes for two vulnerabilities. The updates address CVE-2026-53362, an IPv6 flaw introduced in kernel 6.0 that could all…
A collection of open-source sandbox tools for AI coding agents has been released, offering hardware-isolated microVMs, containers, and isolation harnesses that boot in under 200ms and prevent secret l…
WinPodX, a new open-source tool, lets Linux users run Windows applications in native Linux windows by automatically provisioning a KVM-backed Windows container with FreeRDP RemoteApp, achieving real W…
The Linux 7.2 kernel merge window has no new ARM64 KVM features, with developers attributing the lack to an overwhelming number of AI-fueled fixes flooding the mailing list. Other architectures like R…
A financial infrastructure engineer migrated a broker's virtualization from a proprietary hypervisor to Proxmox with zero downtime, consolidating two sites and cutting licensing costs from tens of tho…
Mitos, an open-source runtime for AI agents on Kubernetes, launches with N-way live copy-on-write fork of Firecracker microVMs, achieving warm-claim activation in tens of milliseconds. The tool provid…
Bastion launches isolated Linux VMs for background coding agents, enabling parallel agent execution without runtime conflicts. The tool allows self-hosting on KVM-supported Linux systems and defines e…
Edera launched a container runtime that isolates Kubernetes workloads in per-container micro-VMs, eliminating the shared kernel vulnerability that enables container escapes and lateral movement. The s…