Menu

Latest articles

Microsoft releases emergency .NET security fixes for Google Brotli bug
To address a vulnerability in Google’s Brotli compression technology that could allow attackers to corrupt process memory, Microsoft is urging .NET [...]
UK pentester ‘killa’ claims $2K Bitcoin prize in PHP2Shell capture-the-flag contest
A UK-based developer and pentester has claimed a $2,000 Bitcoin prize for demonstrating the exploitability of the PHP2Shell vulnerabilities that melted the [...]
Trumpets blare and skies part as AI hypefest culminates in Anthropic IPO filing
Anthropic has filed for an IPO that could rank among Wall Street’s biggest ever, revealing an $80.7 billion half-year loss, a startlingly complex [...]
We shouldn’t be surprised about the PHPocalypse, as the internet is built on sticks and glue
We’ve spent the past several decades using duct tape, string, and chewing gum to chain the world’s computers together into this thing we call [...]
PhantomTac Attack Tricks Robots Into Dropping or Crushing Objects
UK Biobank back online soon, months after someone tried to sell 500k people’s data on Alibaba
UK Biobank (UKB) says its platform is now “secure” and that academics will soon regain access, months after a major data leak of volunteer [...]
Oracle adds a semantic layer to ground AI agents in the business context
Oracle is expanding its Autonomous AI Lakehouse with a Business Semantic Layer designed to give AI agents a consistent understanding of enterprise data, a [...]
Security Teams and AI Tools: Why Executives Won’t Adopt What They Can’t Control
StealC Malware Returns as Stadia RAT After Operation Endgame Takedown
Britain bets big on AI to defend against the threats AI is helping create
The UK government is throwing £130 million at AI-powered cyber defenses, including plans to deploy autonomous AI agents across critical infrastructure to [...]
How malicious downloads can trick AI coding agents into compromising themselves
Malicious instruction files planted in a computer’s Downloads folder can trick AI coding agents into executing harmful code or exposing authentication [...]
Debian varnish Fixes Cache Poisoning and Worker Crashes
Firefox 158.0.1 Update for Fedora 45 – Latest Release and Features
Debian Trixie Varnish Fixes Two Security Issues in Latest Update
Mageia 10 kernel-linus 6.18.55 Security Update – Kernel Security Update
Mageia 10 BIND 2026-0541 Fixes DNS Attack Vulnerabilities
Mageia iperf Update Addresses Remote DoS and Memory Errors
Mageia 10 mgarepo 1.14.9 Update and Safety Fixes – Security Improvements
Mageia 10 rootcerts Update for Trusted Certificate Lists
Fedora 43 Updates .NET SDK and Runtime to Fix Reported Issues
Fedora 43 perl-HTML-Query Update Addresses RT Security Flaws
Fedora 43 perl-Text-Markdown-Discount Fixes RT Security Issues
Fedora 43 perl-Markdown-Render Update Fixes RT Security Issues
Fedora 43 RT 5.0.10 Security Update Addresses Seven Flaws
Fedora 43 RT 5.0.10 Update Resolves Multiple Security Exploits
Fedora 43 RT Update Fixes Authentication and Injection Flaws
Fedora 43 perl-CLI-Simple Update Addresses RT Security Flaws
Fedora 43 Perl Badger Update Addresses RT Exploits and Security Risks
Fedora JFrog CLI Fixes Host Command Execution and Denial of Service Risks
Fedora 44 dotnet8.0 Update Fixes Dozens of Security Issues
Fedora 44 perl-Encoding-FixLatin Fixes RT Access and Injection Issues
Fedora 44 perl-Markdown-Render Update Addresses RT Exploits
Fedora 44 perl-CSS-Inliner Fixes RT Access and Injection Flaws
Fedora perl-Badger Update Fixes RT Access and Injection Issues
Fedora 44 Request Tracker 5.0.10 Addresses Multiple Exploits
Fedora 44 Perl HTML Query Update Addresses RT Security Issues
Fedora 44 perl-Text-Markdown-Discount Update Fixes RT Issues
Fedora 44 perl-CLI-Simple Update Addresses RT Security Issues
Stop building agents that can’t change models
No one can predict which AI provider will win the next benchmark cycle. The smarter approach is to build an architecture that can adapt as models change. [...]
How to make enterprise APIs agent-ready
Enterprises spent the last decade building API programs. A large organization now runs thousands of internal APIs, each with a spec, owner, authentication [...]
Your npm install was safe. What happens when the package runs?
For years, one of the first questions we asked about a suspicious npm package was whether it ran a pre-install or postinstall script. Those hooks can [...]
PHP2Shell: No login, no app code, no warning. What next?
If you run PHP anywhere in your environment, patch to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35 now. Two critical flaws disclosed last week, CVE-2026-109618 and [...]
Debian LTS OpenSSL Update Fixes DTLS and Signature Timing Issues
Work to protect DNS from quantum decryption attacks is speeding up
Internet governance bodies are likely to accelerate work to prepare the domain name system (DNS) so it can remain secure once quantum computers can [...]
Fedora 43 Nix 2.31.6 Fixes High- and Moderate-Severity Issues
Fedora 44 MuPDF Update Fixes PDF Signature Denial-of-Service
Fedora 44 libindi Update Fixes a Malformed XML DoS Vulnerability
Fedora 44 Nix Update Fixes High and Moderate Security Issues
Fedora 44 lxml Cleaner URL Bypass Fixed in mingw-python-lxml
Fedora 44 LibRaw Update Fixes Numeric Conversion Denial-of-Service
Fedora 44 Updates mingw-libpng for a libpng Use After Free
Fedora PoDoFo Patch for PDF Disclosure and Denial of Service
Debian LTS ImageMagick Fixes Flaws in Image Processing
Debian Thunderbird Update Addresses Code Execution and Data Exposure
openSUSE Kernel Update Fixes 129 Security Issues and Vulnerabilities
openSUSE Tumbleweed Kernel Update Fixes 220 Security Issues
openSUSE Helm 4.3.0 Update Addresses Remote Denial-of-Service
openSUSE Tumbleweed JFrog CLI Fixes Vulnerability CVE-2026-92892
openSUSE elemental3 3.0.4-1.1 Fixes Remote Availability Issue
openSUSE Tumbleweed Python 3.15 Update Fixes Two Integrity Issues
openSUSE Tumbleweed Ghostscript Update Addresses Two Security Issues
openSUSE Aspell Moderate Local Flaw Update 2026-12126-1
openSUSE Python 3.14.8 Update Addresses Three Security Issues
openSUSE Tumbleweed Python 3.13.16 Update Fixes Four Issues
openSUSE Tumbleweed python312 Update Fixes Three Security Issues
Debian Varnish Cache Fixes for Cache Poisoning and Service Disruption
Rocky Linux 8 ca-certificates Update Blocks eMudhra Trust
Rocky Linux 8 Firefox Update Fixes Sandbox Escapes and Memory Flaws
Rocky Linux 9 Firefox Fixes Sandbox Escapes and Memory Flaws
Rocky Linux 9 Thunderbird Fixes Use After Free and Sandbox Escape
Rocky Linux 10 Firefox Fixes Sandbox Escapes and Memory Flaws
Thunderbird Update Fixes Multiple Issues in Rocky Linux 10
Debian libheif Fixes Address Risks in Crafted Image Processing
Debian DLA-4856-1 Fixes the xdg-dbus-proxy Filter Bypass
Mageia bluez Update Addresses AVRCP and Stack Overflow Issues
Debian LTS Brotli Fixes DoS and Potential Code Execution
Debian Brotli Update Addresses DoS and Code Execution Risk
DSA-6582-1 brotli – security update
SPECTER Attack Uses USB Power Signals to Leak Data From Air-Gapped PCs
Autonomous attack agent in ‘Skynet mode’ hijacks other models to carry out its evil deeds
Threat actors built an AI agent designed to hijack exposed AI models to run autonomous attacks, with instructions allowing it to carry out up to 100,000 [...]
Debian Unbound Update Addresses DNSSEC and Emerging DNS Threats
How to Get Started With Linux Server Monitoring
Start Linux server monitoring with the checks you would otherwise make by hand.
How to Plan Linux Log Management for Incident Response
Plan Linux log management around the records needed to investigate a break-in or an unauthorized change.
DSA-6583-1 libheif – security update
DSA-6578-1 aide – security update
There’s a third PHP2Shell bug, but it won’t get an emergency fix
As the PHP2Shell chaos continues, researchers have found a third PHP vulnerability that could allow attackers to take over websites or remotely run malware [...]
Red-team report found OpenAI utterly failed to monitor its agents during Hugging Face attack
An independent evaluation of OpenAI’s internal misalignment monitoring system revealed that the system was not fit for purpose during a period when [...]
GoDaddy Revokes 404,607 SSL Certificates After Policy Errors
Debian tzdata 2026e Adds Changes to Canadian Time Zones
Overlord RAT Uses Fake Legal Notices to Infect Windows PCs in New Campaign
MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaboration
ESET researchers uncover MythicRatatoskr – a previously unknown Go-based backdoor hiding its C&C server inside the Yggdrasil mesh network – that paved [...]
SUSE Kernel Live Patch 17 Fixes Six Security Vulnerabilities
SUSE Kernel Live Patch 19 Fixes Five Security Vulnerabilities
SUSE Enterprise 15 SP6 Kernel Live Patch Fixes Three Issues
openSUSE Kernel Live Patch 30 Fixes Three Security Issues
SUSE Enterprise 15 SP7 Kernel Live Patch 20 Fixes Two Flaws
Rocky Linux 10 ca-certificates Update Distrusts eMudhra Certificates
Rocky Linux 10 Buildah Fixes File Write and HTTP DoS Risks
Rocky Linux 10 pgvector Update Fixes IVFFlat Code Execution
Rocky Linux 10 Expat Fixes Denial of Service and Data Exposure