It’s getting cheaper and easier for cybercriminals to research potential victims. Here’s what’s still in your control.
August 28, 2026
AI-assisted reconnaissance: Why everyone could be a viable target for fraud
US government snitch-finder pleads guilty to leaking state secrets to foreign spies
The former Defense Intelligence Agency (DIA) IT specialist previously accused of trying to pass secret and top-secret information to foreign spies has [...]
August 28, 2026
CISA: Most exploited vulnerabilities should have been eradicated decades ago
CISA is still crying out for software vendors to adopt Secure by Design (SBD) development practices, and says in its latest review that longstanding [...]
August 28, 2026
Streamlining container security: Red Hat Hardened Images now supported in AWS InspectorScan API and ECR Basic scanning
Software security teams can face an overwhelming influx of vulnerability alerts, often stemming from non-essential packages bundled inside traditional [...]
August 28, 2026
Preparing OpenStack for the post-quantum era: A systematic approach to crypto-agility
OpenStack powers clouds used by some of the most security-sensitive organizations on the planet: government agencies, telecommunications providers, [...]
August 28, 2026
Industry that built the problem offers to sell you the solution
OpenAI has gathered more than 100 of the world’s biggest tech and infosec companies to warn that cyber defense is in trouble – a reassuring [...]
August 28, 2026
Why enterprise AI projects keep failing
Over the past three years, as an independent cloud and AI consultant, advisor, and industry influencer, I have worked with numerous companies seeking my [...]
August 28, 2026
Print management outfit PaperCut is under 0-day attack, and it’s drawing customers’ blood
Nothing smarts like a paper cut, but being attacked after leaving an application’s web interface exposed to the internet might be just as painful. Such [...]
August 28, 2026
Australian cops cuff alleged TeamPCP masterminds
The Australian city of Perth is by some measures the world’s most isolated major metropolis, but is still sufficiently connected to US law enforcement [...]
August 28, 2026
openSUSE Wicked Important Buffer Overflow Patch 2026-3842-1
August 28, 2026
SUSE suseconnect-ng Moderate Security Update SUSE-SU-2026-3843-1
August 28, 2026
openSUSE Texlive Moderate Use-After-Free Vuln 2026-3847-1
August 28, 2026
Visual Studio Code 1.135 introduces Rubber Duck agent
Microsoft’s latest update to Visual Studio Code, released August 26, features a Rubber Duck agent for a second model opinion as well as UX improvements to [...]
August 27, 2026
Ubuntu 20.04 LTS Kernel Update Moderate WiFi Issue 2026-8666-3
August 27, 2026
Ubuntu 22.04 LTS Kernel Critical Network Flaw Update USN-8661-3
August 27, 2026
Ubuntu 20.04 Linux Kernel Azure CVM Security Update USN-8658-4
August 27, 2026
Ubuntu Linux Kernel Azure Critical Flaws Fixed USN-8644-3
August 27, 2026
CRPx0 hacking service for dummies claims victim count more than quintupled
CRPx0, a cybercrime crew that has rapidly evolved from a scam service to a ClickFix-delivered ransomware and crypto-theft business over the summer, claims [...]
August 27, 2026
Linux Patching Best Practices: Designing a Patch Validation Workflow
Patch work often gets declared finished at the package manager. The update installs, version inventory changes, the service restarts, and the ticket begins [...]
August 27, 2026
openSUSE librest Moderate PKCE OAuth Vulnerability 2026-3834-1
August 27, 2026
SUSE librest0_7 Moderate PKCE Crypto Issue Vuln 2026-3834-1
August 27, 2026
SUSE OpenSSL Important Security Fixes Advisory 2026-3835-1
August 27, 2026
Go 1.27 brings support for generic methods
Google’s Go programming language has been updated with changes across the language, toolchain, runtime, and standard library. Released August 19, Go 1.27 [...]
August 27, 2026
Mageia yt-dlp Bugfix Security Upgrade Released in January 2026
August 27, 2026
Mageia 10 fs-uae Security Patch Problem Report 2026-0113 Update
August 27, 2026
Mageia 10 Guayadeque Security Update 2026-0112 with Bug Fixes
August 27, 2026
Mageia 10 Mnemosyne Patch Update Released for January 11 2026
August 27, 2026
Mageia 10 opencpn-o-charts-plugin Bugfix Advisory 2026-0107
August 27, 2026
Mageia 10 Advisory php8.5-gmagick Module Conflict Fix 2026-0106
August 27, 2026
AI girlfriend review site’s secrets were exposed to the world for three weeks
PWNED Welcome back to PWNED, the weekly column where we explore the frightening and amusing world of foolish infosec errors. This week, it’s all [...]
August 27, 2026
Omarchy distro gains serious backing
The controversial Omarchy distro is attracting both criticism and fans – and financial support, too. Omarchy is an opinionated respin of Arch Linux and a [...]
August 27, 2026
Rocky Linux 9 Golang Important DoS XSS Issues RLSA-2026-60304
August 27, 2026
Rocky Linux 8 kernel-rt Important Security Fixes RLSA-2026-59737
August 27, 2026
openSUSE Leap 16.0 gh Important Issues Patch 2026-21663-1
August 27, 2026
Ubuntu 24.04 openCryptoki Important Access Issues USN-8686-1
August 27, 2026
ATF responds to ‘major’ cybersecurity incident after ransomware gang’s claims
The Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) said it’s responding to a “major” cybersecurity incident shortly after the Qilin ransomware [...]
August 27, 2026
Schrödinger’s backup: not actually recovered until you try to restore IT
Schrödinger’s Cat, the famous 1935 thought experiment, imagines a cat that, for reasons rooted in quantum physics we need not dwell on here, is [...]
August 27, 2026
Linux Kernel Vulnerability News: Linux Security Roundup
Linux kernel vulnerability news dominated the security updates published from August 20 through August 27. Ubuntu, Debian, Fedora, Mageia, Oracle Linux, [...]
August 27, 2026
Cybercrooks jet off with Manchester Airports Group customer data
The company behind three of the UK’s busiest airports says “a quantity” of data was stolen by an extortion group during a recent “cybersecurity [...]
August 27, 2026
AppArmor Credential Fix Prevents In-Hook Use-After-Free Risk
A Linux security hook should be able to check a task without invalidating the identity data that surrounding kernel code is still using. AppArmor broke [...]
August 27, 2026
NFS Client Cleanup Fix Removes Orphaned rpc_pipefs Files
Linus Torvalds merged a Linux NFS client update on Aug 26, 2026, that includes a fix for rpc_pipefs files left attached to an RPC client after the client [...]
August 27, 2026
Nvidia eyes $12.9 bn Hugging Face deal to expand AI platform control
Nvidia is moving to acquire AI platform Hugging Face in a deal valued at about $12.9 billion, a move that would extend its reach beyond chips into how AI [...]
August 27, 2026
AWS acquires DuckLabs, but what does it want from the team behind DuckDB?
Open-source software has given cloud providers a way to adopt popular technologies without having to own the companies behind them. AWS, however, has [...]
August 27, 2026
Nuisance-call blocker fined £190k for being a nuisance caller
The UK’s data protection watchdog has fined a nuisance call blocking biz £190,000 ($258,000) for bombarding elderly people with hundreds of thousands of [...]
August 27, 2026
How to implement HMAC authentication in ASP.NET Core
Security is a major concern for web applications and services that use the HTTP protocol. Although HTTP is a versatile protocol that can be used in many [...]
August 27, 2026
Why digital twins need memory as much as AI agents
Digital twins began as virtual counterparts to physical systems. In aerospace, manufacturing, and other high-stakes environments, they gave engineers a [...]
August 27, 2026
AI coding agents vs. big balls of mud
Big balls of mud are inevitable, right? I’ve written about where these sprawling, difficult-to-maintain codebases come from and how you might deal with [...]
August 27, 2026
IPMI Security Patch Restores a Lost Linux RCU Grace Period
The Linux IPMI maintainer accepted a patch on Aug 26, 2026 that restores an RCU grace period before command-receiver objects are freed. The one-line change [...]
August 27, 2026
Debian xrdp Advisory DSA-6469-1 Multiple Threats CVE-2026-32105
August 27, 2026
Linux Uevent Leak Exposes Freed Memory in Synaptics RMI4
A Linux uevent can carry bytes from freed kernel memory when one object survives longer than the allocation behind its name. A new Synaptics RMI4 patch [...]
August 27, 2026
Rocky Linux 9 Ruby Important RLSA-2026-50827 Security Updates
August 27, 2026
Rocky Linux Ruby 3.3 Important Security Updates RLSA-2026-50828
August 27, 2026