Menu

Latest articles

Important: libcap security update
Important: sudo security update
Important: libcap security update
Update to version 0.6.0. Addresses RUSTSEC-2026-0109.
Fix CVE-2026-6846.
This update provides various security fixes. Buffer overflow in scanf %mc (CVE-2026-5450) ns_sprintrrf buffer overreads (CVE-2026-6238) ns_sprintrrf buffer overflow in TSIG record processing (CVE-2026-5435) Memory corruption in ungetwc (CVE-2026-5928)
https://security-tracker.debian.org/tracker/DSA-6245-1
https://security-tracker.debian.org/tracker/DSA-6246-1
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. For Debian 11 bullseye, these problems have been fixed in version 6.1.170-1~deb11u1.
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. For Debian 11 bullseye, these problems have been fixed in version 5.10.251-3.
Brace for the patch tsunami: AI is unearthing decades of buried code debt
This update provides various security fixes. Buffer overflow in scanf %mc (CVE-2026-5450) ns_sprintrrf buffer overreads (CVE-2026-6238) ns_sprintrrf buffer overflow in TSIG record processing (CVE-2026-5435) Memory corruption in ungetwc (CVE-2026-5928)
Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356) Add upstream patches to build against openssl 4.0 Make configure.ac work with autoconf 2.73
Fixes security defects GHSA-rpm5-65cw-6hj4, GHSA-x2qx-6953-8485, GHSA-7545-fcxq-7j24, and GHSA-v87r-6q3f-2j67.
oxenstored keeps quota related use counts across domain destruction [XSA-483, CVE-2026-23556] Xenstored DoS via XS_RESET_WATCHES command [XSA-484, CVE-2026-23557] grant table v2 race in status page mapping [XSA-486, CVE-2026-23558] x86: Floating Point Divider State Sampling [XSA-488, CVE-2025-54505]
https://security-tracker.debian.org/tracker/DSA-6244-1
https://security-tracker.debian.org/tracker/DSA-6238-1
This month in security with Tony Anscombe – April 2026 edition Warnings about helpdesk impersonation scams and Iran-linked hackers targeting critical sectors in the US, plus the most damaging scams of 2025 – here’s some of what made the headlines this month
Enterprise Spotlight: Transforming software development with AI
Seccomp, AppArmor, SELinux: Where Linux Security Controls Fall Short
Ubuntu Copy Fail High Local Privilege Escalation Threat Advisory 2026-31431
First reports come in of victims of critical cPanel vuln as ‘millions’ of sites potentially exposed
Why Memory Safety Is Becoming a Core Requirement in Modern Software
Three security vulnerabilities were discovered in libexif, a library to reads and writes EXIF metainformation from and to images files, that can causes crashes or information leaks. CVE-2026-32775 If the exif_mnote_data_get_value function in MakerNotes gets passed
Important: libtiff security update
Important: xorg-x11-server-Xwayland security update
Important: yggdrasil-worker-package-manager security update
Important: yggdrasil security update
Important: vim security update
OpenAI locks GPT-5.5-Cyber behind velvet rope despite slamming Anthropic for doing exactly that
Pro-Iran crew turns DDoS into shakedown as Ubuntu.com stays down
Passport to £££: Home Office adds £216M to travel doc contract before a single bid’s been placed
Running AI in the cloud is easy – and expensive
Are we ready to give AI agents the keys to the cloud? Cloudflare thinks so
https://security-tracker.debian.org/tracker/DSA-6239-1
https://security-tracker.debian.org/tracker/DSA-6197-3
https://security-tracker.debian.org/tracker/DSA-6240-1
https://security-tracker.debian.org/tracker/DSA-6242-1
https://security-tracker.debian.org/tracker/DSA-6243-1
The never-ending supply chain attacks worm into SAP npm packages, other dev tools
Bot her emails: most modern phishing campaigns are AI-enabled
FBI cyber boss: China’s hacker-for-hire ecosystem ‘out of control’
Google’s fix for critical Gemini CLI bug might break your CI/CD pipelines
French prosecutors link 15-year-old to mega-breach at state’s secure document agency
Redefining security data: Red Hat’s new VEX experience heading to Red Hat Summit 2026
Important: vim security update
Important: PackageKit security update
Important: xorg-x11-server security update
Nearly half of UK businesses pwned last year as phishing keeps doing the job like it’s 2005
What type of ‘C2 on a sleep cycle’ do they leave behind? Novel Chinese spy group found in critical networks in Poland, Asia