Menu

Latest articles

Active FreeSWITCH Exploitation Puts Linux VoIP Servers at Risk
CISA added a FreeSWITCH flaw to its list of bugs used in attacks on November 9, 2026. Tracked as CVE-2026-116779, the bug lets an accepted chat message [...]
OpenShift 5 Security Changes Linux Teams Should Check Before Upgrading
An AI assistant that can explain a cluster problem may also have permission to change it.
Debian Apache 2.4.71 Fixes Remote Code Execution and DoS
Ubuntu .NET Runtimes Updated Across Four Supported Releases
Mageia nginx 1.30.6 Fixes Five Issues Across Its Modules
Mageia chkconfig Update Fixes Listing With Leftover Config
Mageia MariaDB Update Fixes Crashes and Prevents Data Loss
Mageia Django Fixes Request Forgery and Data Exposure Issues
Mageia 10 vsftpd Startup Crash Fix – Troubleshooting Guide
Mageia 10 epour Update Fixes Startup Failure and Improves Reliability
Gentoo curl Security Advisory Addresses Multiple Security Flaws
Gentoo PCRE2 Flaws Could Enable Arbitrary Code Execution
Gentoo GLSA 202611-05 ImageMagick Code Execution Vulnerability Fix
Fedora 43 rsync Update Fixes Delta Transfer Denial of Service
Fedora 43 perl-HTTP-Parser-XS Fixes Encoded NUL Path Bypass
Fedora 43 php-getid3 Update Fixes QuickTime Memory Exhaustion
Fedora 43 Nokogiri 1.19.7 Fixes Multiple Security Issues
Fedora python-crate-ingredients Gets Updated Root Trust
Fedora 43 Java Runtime Receives the October CPU Security Update
Fedora 43 OpenJDK 25 Receives the October Java CPU Security Update
Debian LTS aodh Fixes OpenStack Telemetry Data Exposure
Fedora 43 pipx Update Addresses 24 Security Vulnerabilities
Fedora python-pillow Fixes Buffer Overflows and Image Decoder DoS
Fedora 43 tpm2-tss Update Fixes Issues in the TPM Stack
Fedora 43 perl-libnet 3.16 Fixes Unbounded Net–Cmd Buffering
Fedora 43 libsoup3 Fixes WebSocket and HTTP Security Flaws
Debian LTS watcher update addresses information disclosure
Debian LTS Octavia Fixes Disclosure and Authorization Flaws
Debian LTS dnspython Update Addresses Denial of Service
Firefox 160.0 Arrives in Fedora 44
Gentoo libheif Update Addresses Multiple Security Issues
Multiple vulnerabilities have been found in libheif, the worst of which could result in arbitrary code execution.
Fedora 44 fixes HTTP parser path truncation in perl-HTTP-Parser-XS
Fedora 44 udns 0.7 Fixes Crafted DNS Reply Buffer Overflow
Fedora php-getid3 1.9.28 Fixes QuickTime Memory Exhaustion
Fedora 44 Updates Nokogiri to Address Security Vulnerabilities
Fedora 44 OpenJDK 25 October Java CPU Update and Security Patches
SUSE psqlODBC Fixes Buffer Overflows and Addresses SQL Injection
SUSE psqlODBC 2026-5192-1 Fixes Buffer Overflows and SQL Injection
SUSE skopeo update fixes DoS and archive extraction issues
SUSE Pillow Update Addresses 34 Critical Security Issues
SUSE aliyun-cli Update Stops Decoder Crashes and DoS Attacks
SUSE OpenSSL 1.1.1d Important Update for DTLS and Timing Issues
SUSE OpenSSL Update Addresses DTLS and Timing Issues Across Systems
SUSE OpenSSL Livepatches Fix the Stale DTLS Buffer Offset Issue
SUSE BCEL 6.13.0 Fixes Stored XSS and Parser Recursion Issues
SUSE DPDK Update Addresses 14 Memory and Buffer Security Flaws
SUSE containerd Update 2026-5201-1 Fixes Five DoS Risks
SUSE distribution-registry Fixes Nine Security Vulnerabilities
SUSE Alloy Fixes Denial-of-Service and Authorization Issues
SUSE python-M2Crypto Resolves SSL Hostname Injection Vulnerability
SUSE OpenSSL Update Fixes DTLS and Timing Side-Channel Issues
SUSE OpenSSL Update Fixes DTLS and Timing Issues Across Systems
SUSE OpenSSL Live Patches Fix the DTLS Handshake Issue Quickly
SUSE openssl-1_1-livepatches Fixes DTLS Stale Buffer Issue
SUSE OpenSSL Fixes DTLS and Memory Security Flaws with Security Updates
SUSE OpenVPN Fix for Authenticated Certificate Impersonation
SUSE Linux Enterprise 16.0 Kernel Fixes 1,356 Security Issues
FreeRDP 3.33.1 Adds XDG Authentication Support on Fedora 45
Firefox 160.0 Arrives in Fedora 45 with New Features and Improvements
Fedora Xwayland 24.1.15 Fixes Seven Security Vulnerabilities
Fedora 45 perl-HTTP-Parser-XS Fixes Encoded NUL Path Truncation
Fedora 45 Python 3.9 Update Now Uses System Certificates
Fedora 45 udns 0.7 Fixes Crafted DNS Reply Heap Overflow
Fedora 45 Robot Framework Update Fixes Handlebars Injection
Fedora 45 php-getid3 Update Addresses QuickTime Memory Exhaustion
Fedora Epiphany 51.2 Fixes TLS and Permission Security Flaws
SUSE Important aliyun-cli Fixes Crafted Zstd Frame Crash
SUSE PCRE2 Important JIT Out of Bounds Write Vulnerability
SUSE 16.0 python-Pillow Update Fixes 39 Image Processing Issues
SUSE zchunk update fixes crash caused by a crafted file
SUSE rust-keylime Update Addresses Five Zip Security Issues
SUSE python-urllib3_1 Update Addresses HTTPS Proxy and DoS Risks
How to Clone a Git Repository Safely After Git’s Security Fix
Clone safely after the Git security fix with a patched Git client, verify the project’s source, and use git clone without –recurse-submodules to [...]
How Ubuntu 26.10 Checks Revoked Certificates in curl – A Closer Look
A certificate authority (CA) verifies a name or identity and then signs a digital certificate linking it to a public key.
Slackware 15.0 httpd 2.4.71 Fixes RCE and Memory Errors
Slackware Git Packages Updated to Fix Security Issues and Vulnerabilities
Slackware TigerVNC Update Fixes X.Org Errors and Related Issues
Update Chrome on Linux After an Actively Exploited XML Flaw Has Been Reported by Google
To update Chrome on Linux, use the package manager (e.g., apt, dnf, zypper) to update the Google Chrome package.
Oracle Node.js 22.23.2 Fixes Brotli Decoder Write Error
Oracle Linux 8 Vim Update Fixes NetRW Script Injection Vulnerability
Oracle libimobiledevice Fixes Double-Free Denial-of-Service Vulnerability
Oracle util-linux Important Fixes for Partition and Mount Issues
Oracle Go Toolset and Delve Updates for CVE-2026-111943
AWS Credentials on Linux: Moving to Short-Lived Access
Most cloud access keys don’t persist on a Linux server intentionally. Key pairs can simply get pasted into a file, and forgotten once the job runs.
MSSP Reporting: Which Cybersecurity Metrics to Track!
After scanning through the report of your managed security service provider (MSSP), you are faced with a huge number of blocked connections and hundreds of [...]
Social Media OSINT on Linux for Brand Impersonation and Phishing Enumeration
A customer tags your company in a complaint about a refund that they haven’t received yet. Below this post is another account posting with your company’s [...]
After a Linux Server Data Leak: Containing Public Exposure and Search Indexing
We must remember that exposing customer information in a database export left in a public folder, for example, or even worse, in a backup archive with [...]
AWS unveils local emulator service to help enterprises accelerate app development and testing
AWS launched a new local emulator service for its cloud services on Wednesday to help enterprises accelerate application development and testing. The [...]
Exchange for breakfast: Turla’s Cereal tricks are not for kids
ESET Research describes Turla’s Cereal toolset, featuring a novel Exchange email collection module, a unique C&C mechanism, and sophisticated .NET [...]
Criminal IP Launches New TI Feed App on Splunkbase for Automated Threat Detection
TinstaPorn Android Malware Poses as Casino App to Collect User Data
Rewriting less than 10 neurons in an LLM can turn it into a sleeper backdoor
Microsoft researchers have found that rewriting fewer than 10 rarely used neurons in an open-weight AI model can turn any agent built on it into a sleeper [...]
Shipping giant Maersk probes ‘IT security incident,’ data theft
Shipping behemoth A.P. Moller-Maersk says it is investigating “an IT security incident” involving the potential theft of data from a legacy [...]
Claude Code’s ‘don’t ask again’ button has a secrets-spilling problem
A configuration file meant to store local command permissions on Anthropic’s Claude Code is exposing thousands of API keys, database credentials and other [...]
Why a Linux Kernel Fix Matters for Side-Channel Attacks
A Linux security protection can appear to be available but still be switched off when a system needs it.
Kmorph Tests Linux Crash Recovery Without Rebooting
When a Linux server’s kernel crashes, applications can go offline until the machine starts again.
Azure Linux Updates and How to Tell If a Fix Is Running
Microsoft shipped Azure Linux 3.0.2022 on November 7.
Locking Down Linux Servers? Move Beyond the Baseline
Once their routing tables are filled, every cloud-based instance with a routable IP address operates in a hostile environment.
Software developers need an Agentic manifesto
I can’t decide whether Agile development is completely dead or about to make a huge comeback. Or maybe Waterfall will. Who knows?  Coding agents are [...]
MCP and A2A alone won’t scale AI agents
Two protocols define how AI agents connect to internal resources and collaborate with other AI agents. The Model Context Protocol (MCP) is well known [...]