August 21, 2026
DSA-6455-1 chromium – security update
Homeland security cybercops say patch TrueConf (Russia’s Zoom) if you’re using it
CISA has ordered US federal agencies to patch two exploited flaws in TrueConf, a Russian-built video conferencing platform, after compromised servers were [...]
August 21, 2026
Hackers poison popular Rust crates to steal developers’ credentials
Hackers slipped malware into several popular Rust packages this week, turning routine software builds into a route onto developers’ machines. The [...]
August 21, 2026
Salesforce wants to move AI coding into a shared workspace with Slack Code
Software development is rarely a one-person job. A request or an idea may begin with a product manager or another employee, before moving through [...]
August 21, 2026
Oracle perl-Date-Manip Important DoS Fix ELSA-2026-56971
August 21, 2026
Oracle Linux PHP 8.4 Important Bug Fix Advisory ELSA-2026-56969
August 21, 2026
Oracle Kernel Important Advisory ELSA-2026-38492 CVE-2026-43163
August 21, 2026
Oracle Python3 Important CVE-2026-11940 Advisory ELSA-2026-56219
August 21, 2026
Oracle Linux 9 bind9 Important DNS Fixes ELSA-2026-55442
August 21, 2026
Oracle Linux 9 glib2 Moderate Security Update ELSA-2026-55440
August 21, 2026
Oracle curl Important Fix for ELSA-2026-55439 in Oracle Linux 9
August 21, 2026
Oracle Linux 8 ELSA-2026-56130 sg3_utils Important Bug Fix
August 21, 2026
Oracle Linux 8 ELSA-2026-55446 libXfont2 Important CVE Fix
August 21, 2026
Slackware Mozilla-Firefox Critical Security Fix SSA-2026-231-01
August 21, 2026
Gentoo acl attr Multiple Vulnerabilities GLSA-202608-20
August 21, 2026
Rocky Linux 9 RLSA-2026-56973 MySQL Important Performance Issues
August 21, 2026
Gentoo Emacs High Arbitrary Code Execution Risk GLSA-202608-18
August 21, 2026
Rocky Linux mysql Important Security Patch RLSA-2026-56936
August 21, 2026
Ubuntu nginx USN-8563-4 Regression Denial of Service Advisory
August 21, 2026
Ubuntu libpng Critical DoS Threats Addressed USN-8639-1
August 21, 2026
Debian DSA-6451-1 Firefox-esr Critical Code Execution Issues
August 21, 2026
Backdoored Rust packages hit crates.io, exposing developers to malware at build time
Malicious versions of three Rust packages, including the widely used arrayref, were published to the crates.io registry on August 20, carrying a backdoor [...]
August 21, 2026
Go hands-on with Python 3.15
Python can’t stop, won’t stop evolving. Python 3.15, due in fall 2026 but available now in its first release candidate, abounds with useful new features [...]
August 21, 2026
Neoclouds become AI’s new power brokers
The reported $10 billion deal between Anthropic and AI cloud startup Volta is more than just another big-number headline in the AI infrastructure race. [...]
August 21, 2026
Cisco bug severity warning reads like Olympic gymnastics scores: 10, 10, 9.9, 9.6, and 7.5.
Cisco has revealed its Secure Workload Software, a micro-segmentation tool formerly known as Tetration that is supposed to stop attackers moving laterally [...]
August 21, 2026
Russian snoops add OAuth abuse to targeted phishing campaigns
Google is tracking three distinct suspected Russian cyber-spy groups that are targeting individuals in academia, aerospace, defense, government agencies, [...]
August 21, 2026
DSA-6456-1 spip – security update
August 21, 2026
Canonical and UK’s University of Bristol partner to investigate automated C to Rust translations
Rust is slated to play a huge part in Ubuntu’s future. As a language that allows programmers more control over resource use and performance as well as [...]
August 20, 2026
DSA-6452-1 designate – security update
August 20, 2026
US Bank investigates LockBit’s claims as ransomware crims set pay-or-leak deadline
US Bank says that it’s investigating ransomware crew LockBit’s claims that it breached the financial institution and stole data, which the crims [...]
August 20, 2026
Researcher tricks Apple’s Find My into sharing location data with Linux
A young security researcher figured out a way to enroll a Linux device into Apple’s Find My network and read live location data from it. Find My is Apple’s [...]
August 20, 2026
Ransomware crook poses as recovery firm to steal payments from fellow extortionists
A ransomware affiliate appears to have found a new way to squeeze victims for cash: pose as the good guy and undercut the criminals it was working with. [...]
August 20, 2026
Grok chat duped into swallowing injected instructions
xAI’s Grok web chat agent is currently vulnerable to a novel form of prompt injection, according to security researchers with Adversa AI. The [...]
August 20, 2026
TrueFoundry debuts open-source AI agent harness, claiming up to 75% lower costs
TrueFoundry has launched TrueForge, an open-source agent harness that lets developers build and run AI agents using models from different providers, [...]
August 20, 2026
French tax authority says break-in exposed data of 600K, including some private messages
France’s tax authority says attackers may have stolen the contents of messages exchanged with hundreds of taxpayers during the data raid it confirmed [...]
August 20, 2026
openSUSE openssl-3-livepatches Important DoS Patch 2026-3651-1
August 20, 2026
Anthropic’s Opus language problems may be creating a hidden cost for AI coding
AI coding assistants are supposed to reduce the work required to turn a developer’s intent into working software. But some users of Anthropic’s Opus 4.8 [...]
August 20, 2026
The five walls standing between a demo agent and a deployed one
Building an AI agent that looks impressive in a demo is now a weekend project. Building one that an enterprise will actually let touch its CRM, its data [...]
August 20, 2026
Introducing G#: A Go-like language for .NET
Microsoft’s open sourcing of .NET not only has sped up the development of the platform, but also has allowed new languages and features to be built on top [...]
August 20, 2026
Nobody’s agent fleet fails the way the vendors say it will
I run 49 scheduled AI agents on one laptop. Another 24 sit beside them, deliberately switched off. That distinction matters more than it sounds. After [...]
August 20, 2026
AI agent suggested installing a malware package. Engineer almost took its advice
PWNED Welcome back to PWNED, the column where we make fun of those who are security self-owned, so hopefully you don’t do the same. This week, we have a [...]
August 20, 2026
DSA-6454-1 sabnzbdplus – security update
August 20, 2026
DSA-6453-1 libgit2 – security update
August 20, 2026
Smashing Security podcast #481: Never say this to a robot dog
August 19, 2026
‘Not a theoretical risk,’ feds warn as attackers use AI-made code to hack critical infrastructure controllers
Attackers are using AI-generated exploitation scripts to break into internet-exposed Siemens S7 Series programmable logic controllers (PLCs) at water, [...]
August 19, 2026
DSA-6450-1 srt – security update
August 19, 2026
DSA-6449-1 swift – security update
August 19, 2026
Linux Identity, Privilege & Administrative Access
Access to a Linux system involves several connected decisions. The system must determine who or what is requesting access, verify that identity, decide [...]
August 19, 2026
ICE boss to agents: Leave the Meta spy glasses at home
Some ICE employees seemingly needed a reminder not to wear their Meta pervert glasses to work. Because only ICE can spy on ICE. Meta smart glasses are [...]
August 19, 2026
Flock surveillance backlash mounts as fiendish Halloween plans circulate
Surveillance tech company Flock has struggled with its public image for years, but the problem has become particularly acute in recent weeks. Its network [...]
August 19, 2026
Mageia 10 lsp-plugins Bug Fix Advisory Release 2026-0101 Update
August 19, 2026
Comcast gives its Wi-Fi motion detector a security makeover
Comcast has folded its Wi-Fi-based intruder detection feature into Xfinity Shield, a repackaged bundle of physical and cybersecurity offerings. The US [...]
August 19, 2026
Decoding Origin: Cursor’s GitHub rival that was launched during the latter’s outage
AI coding tools are increasingly becoming the place where developers write and modify software. SpaceX-owned Cursor now wants to bring code hosting into [...]
August 19, 2026
Fix for Test Failure in Debian LTS ruby-grape DLA-4706-2 Update
August 19, 2026
Rocky Linux 8 attr Medium Symlink Traversal Fix RLSA-2026-56133
August 19, 2026
Rocky Linux 8 RLSA-2026-56219 Python3 Important Security Issue
August 19, 2026
Rocky Linux 9 RLSA-2026-55856 .NET 9.0 Important Security Update
August 19, 2026
AI inference: Five best practices for successful AI applications
While some organizations are still getting started with their AI strategies, others are in pilot purgatory, with few experiments or proofs of concept [...]
August 19, 2026
Coding agents make mistakes. So what?
Regular readers will probably have figured out that I’m generally an optimist. I think things are always getting better, and the future of the human race [...]
August 19, 2026