October 31, 2026
DSA-6598-1 thunderbird – security update
This month in security with Tony Anscombe – October 2026 edition
The PHP2Shell disclosure and other major cybersecurity news this month brought into relief the need for well-thought-out cyber-readiness plans
October 31, 2026
DSA-6597-1 dpdk – security update
October 30, 2026
DSA-6596-1 wordpress – security update
October 30, 2026
Debian Thunderbird Fixes Code Execution and Data Exposure
October 30, 2026
Crim spent $7K+ on AI services in extortion attacks, then left evidence for all to see
A n0n ransomware operator tried to break into 23 organizations across 14 countries, but couldn’t secure its own front door, leaving its server [...]
October 30, 2026
Debian LTS antiword Fixes Heap Writes and Divide by Zero
October 30, 2026
Amatera: How the prolific infostealer works and spreads
The malware that topped ESET’s infostealer detections in Latin America in the first half of 2026 is an example of how cybercrime has professionalized
October 30, 2026
GM cracks the petty cash box for multistate driver tracking settlement
General Motors is taking what looks like a light slap on the wrist from a coalition of 35 states and the District of Columbia after agreeing to settle [...]
October 30, 2026
Debian DPDK Fixes Packet Processing and Guest Request Risks
October 30, 2026
openSUSE ab-av1 Update Addresses a Moderate Local Security Issue
October 30, 2026
openSUSE Tumbleweed ImageMagick Update Fixes 21 Known Issues
October 30, 2026
openSUSE Tumbleweed PuTTY Update Fixes Three Security Issues
October 30, 2026
openSUSE PocketBase 0.40.5 Update Fixes Three Security Issues
October 30, 2026
openSUSE Roundcube 1.6.19 Update Fixes 16 Security Issues
October 30, 2026
openSUSE Tumbleweed Percona Toolkit Update Resolves 10 Issues
October 30, 2026
openSUSE Tumbleweed Kernel 7.2.11-1.1 Fixes 25 Known Issues
October 30, 2026
openSUSE Tumbleweed Hugo Update Fixes Six Security Issues
October 30, 2026
openSUSE Tumbleweed gh Update Addresses Seven Reported Issues
October 30, 2026
openSUSE crun 1.30.1-1.1 Resolves Three Security Issues
October 30, 2026
Anthropic: That Claude Code extension compromise… couldn’t be us
Anthropic has denied allegations that a malicious version of the official Claude Code extension published to Cursor’s marketplace was linked to any kind of [...]
October 30, 2026
Mageia libgit2 Update Addresses Memory and Command Risks
October 30, 2026
Ubuntu Brotli Update Fixes Remote Code Execution and DoS
October 30, 2026
Fake GitHub Repo Tricks AI Agents Into Installing SolanaCry Malware
October 30, 2026
SUSE Xen Update Resolves Five System Flaws and Security Issues
October 30, 2026
SUSE GnuTLS Update Fixes Certificate Resource Exhaustion
October 30, 2026
openSUSE Flatpak 1.16.6 Fixes Host Access and Escalation Flaws
October 30, 2026
SUSE Flatpak 1.16.6 Fixes Nine Security Vulnerabilities
October 30, 2026
SUSE Brotli Fixes a Decoder Write Flaw in Security Update
October 30, 2026
SUSE python311 Fixes Eight Security Issues in Advisory 2026-4946-1
October 30, 2026
openSUSE Leap 15.6 Python 3.11 Fixes Eight Security Issues
October 30, 2026
GitHub bets on multi-agent software development with Copilot overhaul
GitHub is expanding Copilot beyond code generation and developer assistance, launching a redesigned Copilot app and a new Projects capability that enables [...]
October 30, 2026
Binance Probes DevOps Engineer’s Hacked Laptop After $6.3B Theft
October 30, 2026
British intelligence agency misplaced ‘thousands’ of storage devices, years later still can’t say how many
Thousands of GCHQ storage drives containing sensitive data have been lost for years, and the British signals intelligence agency still cannot explain where [...]
October 30, 2026
Mistral open-sources AI model despite warning it could aid cyberattacks
A trillion-parameter AI model that its developer says could help attackers carry out real cyberattacks is now free to download, modify and run outside the [...]
October 30, 2026
openSUSE Chromium 156.0.8078.73 Fixes 52 Security Issues
October 30, 2026
AI agents are upending digital business processes
People have discovered AI agents running on cloud-based platforms, and suddenly, those agents are the answer to every bit of financial and operational [...]
October 30, 2026
Oracle Linux 10 BIND Addresses DNS Attacks ELSA-2026-92419
October 30, 2026
Oracle dogtag-pki Updates Fix RESTEasy and Jackson Issues
October 30, 2026
Oracle Linux 10 Ignition Important Advisory ELSA-2026-91720
October 30, 2026
Oracle Linux 10 Kernel 6.12 Fixes, Updates, and Improvements
October 30, 2026
Oracle Linux 10 Kernel Update Fixes Network and Memory Issues
October 30, 2026
Oracle cjose Fixes All-Zero Key Handling in JWE Encryption
October 30, 2026
Oracle Ignition 2.26.0 Update Addresses CVE-2026-111943
October 30, 2026
Oracle WebKit2GTK 2.54.2 Update for Six Security Issues
October 30, 2026
Oracle Linux libX11 Update Fixes Malicious X Server Heap Overflow
October 30, 2026
Oracle libXtst Update Addresses a DoS in the RECORD Parser
October 30, 2026
Oracle libXrender Update Addresses Heap Overflow Code Injection
October 30, 2026
Oracle Linux 9 Kernel Update ELSA-2026-86033 – Security Advisory
October 30, 2026
Oracle urllib3 Update Addresses Memory DoS and Proxy Interception
October 30, 2026
Oracle curl updates fix connection and cookie handling flaws
October 30, 2026
Oracle Linux 8 expat Fixes DoS and Information Disclosure
October 30, 2026
Oracle GCC Toolset 15 Fixes CVE-2026-102010 Security Vulnerability
October 30, 2026
Oracle Linux 7 PHP Update Addresses CVE-2026-109619 Vulnerability
October 30, 2026
In the year AI re-wrote the infosec rulebook, it’s comforting to know crypto exchanges still have bad security
Crypto exchange Binance has paused trading after discovering unknown parties cracked one of its workers’ laptops and used it to make massive trades. Late [...]
October 30, 2026
Ubuntu .NET Updates Fix Code Execution and Privilege Escalation
October 30, 2026
Binance Probes Suspected $5.8 Billion Crypto Hack, $3 Billion Frozen
October 30, 2026
Firefox 159.0 Arrives in Fedora 43 With Latest Upstream Update
October 30, 2026
Fedora 43 perl-Alien-Brotli Update Fixes Brotli Decoder Write
October 30, 2026
Fedora Brotli 1.2.1 Fixes a Decoder Write Issue in the Latest Update
October 30, 2026
Fedora 43 mingw-python-certifi Refreshes Certificate Trust
October 30, 2026
Fedora 43 Traffic Server Update Fixes HTTP and TLS Issues
October 30, 2026
Mageia libsolv Fixes Buffer Overflows in Repository Parsing
October 30, 2026
Mageia Tomcat Fixes Address HTTP/2, TLS, and Credential Issues
October 30, 2026
Mageia 10 CFITSIO Fixes Improve Crafted FITS Image Heap Reads
October 30, 2026
Mageia 10 xrdp Fixes Remote Code Execution and Access Flaws
October 30, 2026
Mageia 10 Guayadeque 1.0.2 Fixes Several Earlier Bugs and Issues
October 30, 2026
Fedora 44 certifi Update Distrusts eMudhra Certificates
October 30, 2026
Fedora 44 Knot DNS Update Delivers Important Security Fixes
October 30, 2026
Fedora 44 Traffic Server 10.2.1 Proxy Fixes and Improvements
October 30, 2026
Researchers find bugs in 5 AI developer tools, with OpenAI and Microsoft flaws still unpatched
Multiple vulnerabilities in five popular AI developer tools could allow attackers to execute code on a host machine, read and steal files, or spoof browser [...]
October 29, 2026
Fedora svgpart Update Fixes Crafted Folder Command Execution
October 29, 2026
Fedora 45 spectacle Update Fixes Crafted Folder Command Execution
October 29, 2026
Fedora step 26.08.2 Blocks Crafted Folder Command Execution
October 29, 2026
Fedora 45 KDE Portal Fixes Crafted Folder Command Execution
October 29, 2026
Fedora 45 zanshin Update Fixes Crafted Folder Command Execution
October 29, 2026
Fedora 45 Umbrello Fixes Crafted Folder Command Execution
October 29, 2026
Fedora 45 Yakuake Update Fixes Crafted Folder Command Execution
October 29, 2026
Fedora 45 Tokodon Update Fixes Crafted Folder Command Execution
October 29, 2026
Fedora Sweeper Fixes Crafted Folder Command Execution Issues
October 29, 2026
Fedora 45 Spacebar Update Fixes Crafted Folder Command Execution
October 29, 2026
Fedora 45 Skanpage Fixes Crafted Folder Command Execution
October 29, 2026
Fedora qqc2-breeze-style Fixes Crafted Folder Command Execution
October 29, 2026
Fedora 45 Skladnik Update Fixes Crafted Folder Command Execution
October 29, 2026
Fedora 45 qrca Update Fixes Crafted Folder Command Execution
October 29, 2026
Fedora Skanlite Fixes for Crafted Folder Command Execution
October 29, 2026
Fedora 45 poxml Update Fixes Crafted Folder Command Execution
October 29, 2026
Hetzner Warns PXE Boot Users Not to Restart Servers
Hetzner says customers using PXE boot should hold off on server restarts.
October 29, 2026
Kafka Security Flaw Could Let Attackers Fake a Login
Some Apache Kafka servers could accept a made-up identity and give an attacker access as that user.
October 29, 2026
DSA-6592-1 chromium – security update
October 29, 2026
DSA-6591-1 openjdk-25 – security update
October 29, 2026
DSA-6590-1 firefox-esr – security update
October 29, 2026
Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers
Suspected Chinese attackers chained PHP2Shell with a Linux kernel privilege-escalation exploit to root 25 servers, including Palo Alto Networks firewalls [...]
October 29, 2026