Menu

Latest articles

Rocky Linux 8 ca-certificates Update Blocks eMudhra Trust
Rocky Linux 8 Firefox Update Fixes Sandbox Escapes and Memory Flaws
Rocky Linux 9 Firefox Fixes Sandbox Escapes and Memory Flaws
Rocky Linux 9 Thunderbird Fixes Use After Free and Sandbox Escape
Rocky Linux 10 Firefox Fixes Sandbox Escapes and Memory Flaws
Thunderbird Update Fixes Multiple Issues in Rocky Linux 10
Debian libheif Fixes Address Risks in Crafted Image Processing
Debian DLA-4856-1 Fixes the xdg-dbus-proxy Filter Bypass
Mageia bluez Update Addresses AVRCP and Stack Overflow Issues
Debian LTS Brotli Fixes DoS and Potential Code Execution
Debian Brotli Update Addresses DoS and Code Execution Risk
DSA-6582-1 brotli – security update
SPECTER Attack Uses USB Power Signals to Leak Data From Air-Gapped PCs
Autonomous attack agent in ‘Skynet mode’ hijacks other models to carry out its evil deeds
Threat actors built an AI agent designed to hijack exposed AI models to run autonomous attacks, with instructions allowing it to carry out up to 100,000 [...]
Debian Unbound Update Addresses DNSSEC and Emerging DNS Threats
How to Get Started With Linux Server Monitoring
Start Linux server monitoring with the checks you would otherwise make by hand.
How to Plan Linux Log Management for Incident Response
Plan Linux log management around the records needed to investigate a break-in or an unauthorized change.
DSA-6583-1 libheif – security update
DSA-6578-1 aide – security update
There’s a third PHP2Shell bug, but it won’t get an emergency fix
As the PHP2Shell chaos continues, researchers have found a third PHP vulnerability that could allow attackers to take over websites or remotely run malware [...]
Red-team report found OpenAI utterly failed to monitor its agents during Hugging Face attack
An independent evaluation of OpenAI’s internal misalignment monitoring system revealed that the system was not fit for purpose during a period when [...]
GoDaddy Revokes 404,607 SSL Certificates After Policy Errors
Debian tzdata 2026e Adds Changes to Canadian Time Zones
Overlord RAT Uses Fake Legal Notices to Infect Windows PCs in New Campaign
MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaboration
ESET researchers uncover MythicRatatoskr – a previously unknown Go-based backdoor hiding its C&C server inside the Yggdrasil mesh network – that paved [...]
SUSE Kernel Live Patch 17 Fixes Six Security Vulnerabilities
SUSE Kernel Live Patch 19 Fixes Five Security Vulnerabilities
SUSE Enterprise 15 SP6 Kernel Live Patch Fixes Three Issues
openSUSE Kernel Live Patch 30 Fixes Three Security Issues
SUSE Enterprise 15 SP7 Kernel Live Patch 20 Fixes Two Flaws
Rocky Linux 10 ca-certificates Update Distrusts eMudhra Certificates
Rocky Linux 10 Buildah Fixes File Write and HTTP DoS Risks
Rocky Linux 10 pgvector Update Fixes IVFFlat Code Execution
Rocky Linux 10 Expat Fixes Denial of Service and Data Exposure
Rocky Linux 10 grafana-pcp Fixes HTTP/2 and TLS Attacks
Rocky Linux 10 ipp-usb Important HTTP and TLS Security Update
Rocky Linux 10 pgvector Update Fixes Index Build Code Execution
Rocky Linux 10 iperf3 Update Fixes UDP Denial of Service
Podman 5.8.2 Fixes DoS and Certificate Attacks on Rocky Linux 10
Oracle ca-certificates Update for Certificate Trust Changes
Oracle Linux 10 Podman Update Addresses Security Issues
Oracle grafana-pcp Important Update for Three Reported Issues
Oracle ipp-usb Important Update for Four Reported Issues
Oracle expat update fixes XML parsing risks in Linux 10
Oracle iperf3 Important UDP DoS Fix for ELSA-2026-88207
Oracle Podman 5.8.2 Important Security Update and Fixes
Oracle grafana-pcp Critical Update Resolves Three Issues
Oracle Expat 2.5.0 Addresses Denial of Service and Data Exposure
Oracle httpd 2.4.62 Important Fixes for DoS and Code Execution
Oracle cockpit-machines Update for Three Reported Issues
Oracle Linux 8 OpenSSH 8.0p1 Update Addresses Five Security Issues
Oracle Linux 8 grafana-pcp Important Update for Three Security Issues
Oracle Grafana 9.2.10 Update Adds Email Verification for Improved Security
Oracle Linux 8 Go Toolset and Delve Updates ELSA-2026-86203
Oracle ca-certificates Update Adds and Blocks Root Certificates
openSUSE cpupower Update Fixes Daemon Pidfile Handling Issues
openSUSE ca-certificates-mozilla 2.92 Certificate Store Update
Go 1.27 Update Fixes Certificate Authority Issue on openSUSE
openSUSE Go 1.26 Update Fixes HTTP/2 and Certificate Issues
openSUSE Leap 16.0 php8 Update Fixes Memory Corruption and RCE
openSUSE CairoSVG 2.9.1 Update Fixes Remote Service Disruption
openSUSE Tumbleweed libxls-devel Update Fixes Two Security Issues
openSUSE Tumbleweed Guava 33.7.2 Fixes Remote Denial-of-Service Attacks
openSUSE Tumbleweed libvpx-devel Update for CVE-2026-2447
openSUSE Tumbleweed Django 6.1.2 Fixes Four Security Issues
openSUSE Tumbleweed FFmpeg 7.1.5 Fixes Seven Security Issues
Xwayland 24.1.13-2.1 Fixes 12 Issues on openSUSE Tumbleweed
openSUSE xorg-x11-server 21.1.24 Fixes 11 Security Issues
openSUSE Tumbleweed amazon-ecs-init Update Fixes Remote DoS
openSUSE Tumbleweed iscsiuio Update Fixes Five Security Issues
OpenClaw creator spent $10 million on AI tokens last month
OpenClaw, the AI digital assistant, is looking to establish itself as an essential tool for users — but if it is as profligate in its use of tokens as its [...]
When It Makes Sense to Replace a Legacy Virtualization Stack
Trivy Update Fixes Three Security Issues on openSUSE Backports
Google targets AI agents’ idle-time costs with new compute service
As enterprises scale AI agents, Google is betting that idle infrastructure costs could become a major barrier to adoption. To address that challenge, the [...]
426 Android and iOS Apps Linked to PHP2Shell Backend Risks
Hacker leaks 281 GB of data from Germany’s far-right AfD party
Debian’s Chromium Update Fixes Code Execution and Data Exposure
Torvalds: AI is fine for competent devs, but spare us the ‘drive-by’ patches
Linus Torvalds is embracing AI to write Linux kernel code, and some people are having fits. He has a message for them. So do I. Roy Schestowitz, editor of [...]
CA shutdown puts Java, containers, and security appliances in the certificate crosshairs
A certificate authority’s decision to abandon the global SSL/TLS market is exposing a weakness many organizations rarely examine: their dependence on [...]
Rocky Linux 9 PHP 8.2 Fixes SOAP DoS and Memory Corruption
Rocky Linux 10 Go Update Fixes HTTP Denial-of-Service Vulnerability
Debian LTS ClamAV Update Addresses Malicious File Risks
UK threatens subsea cable saboteurs with 14 years behind bars
Britain is threatening subsea cable saboteurs with up to 14 years in prison and unlimited fines, having apparently decided that Victorian-era laws [...]
Don’t assume resilience from your cloud provider
The recent Google Cloud incident in London is the kind of event that should force enterprises to rethink what cloud resilience really means. Google said [...]
Mageia 10 Go Update Addresses Certificate Authority Concerns
Mageia 10 perl-Mozilla-CA Fixes Compromised Certificate Chain
Mageia 10 jq Update Addresses Multiple Memory Flaws and Vulnerabilities
Mageia 10 open-isns Fixes a Double-Free in the iSNS Decoder
Mageia 10 msgpack Fixes Integer Overflow in Buffer Expansion
Mageia 10 Roundcube 1.7.5 Fixes Mail Injection and Other Attacks
Fedora PHP 8.5.12 Fixes Two Remote Code Execution Flaws
Fedora 45 ca-certificates Update Removes emSign Root CS CA
Debian Erlang Fixes Authentication Bypass and TLS Impersonation
Debian Roundcube Fixes IMAP Injection and Other Security Issues
Debian LTS aide Update Blocks Local Malicious File Bypass
Fedora 44 Removes emSign Root CS CA G3 from ca-certificates
NTPsec 1.2.6 Fixes Four Security Issues on Fedora 44 — Security Update
Fedora golang-x-mobile Update for Mobile Go Development
Fedora BIND 9.21.26 Fixes DNSSEC and Resolver Security Risks
Fedora MaraDNS Fixes DNS Service Disruption and Memory Exposure