Menu

Latest articles

Telnyx joins LiteLLM in latest PyPI package poisoning tied to Trivy breach
Citrix NetScaler bug exploited in days, may be multiple flaws in a trench coat
Multiple vulnerabilities were discovered in asterisk, an Open Source Private Branch Exchange (PBX) and telephony toolkit. CVE-2026-23738 XSS vulnerability in the /httpstatus page. Cookie names/values and GET parameter names/values are rendered without HTML-escaping, allowing
An update that solves 655 vulnerabilities, contains four features and has 57 fixes can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves two vulnerabilities can now be installed.
An update that solves eight vulnerabilities can now be installed.
An update that solves seven vulnerabilities can now be installed.
Leak reveals Anthropic’s ‘Mythos,’ a powerful AI model aimed at cybersecurity use cases
European Commission admits attackers broke into public web systems, but says little else
The starkly uneven reality of enterprise AI adoption
How to build an enterprise-grade MCP registry
Security contractor blew the whistle on support crew’s viral indifference
US foreign router ban criticized for being ‘industrial policy disguised as cybersecurity’
https://security-tracker.debian.org/tracker/DSA-6187-1
https://security-tracker.debian.org/tracker/DSA-6186-1
https://security-tracker.debian.org/tracker/DSA-6185-1
https://security-tracker.debian.org/tracker/DSA-6184-1
https://security-tracker.debian.org/tracker/DSA-6183-1
MGASA-2026-0073 – Updated python-ujson packages fix security vulnerabilities
MGASA-2026-0072 – Updated strongswan packages fix security vulnerability
Security fix for CVE-2026-4519.
Security fix for CVE-2026-4519.
Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
https://security-tracker.debian.org/tracker/DSA-6181-1
RSAC 2026 wrap-up – Week in security with Tony Anscombe This year, AI agents took the center stage – as a defensive capability, but more pressingly as a risk many organizations haven’t caught up with
A cunning predator: How Silver Fox preys on Japanese firms this tax season Silver Fox is back in Japan, spoofing tax and HR emails timed to the one season when no one thinks twice about opening them
AI security: Identity and access control
MGASA-2026-0071 – Updated nodejs packages fix security vulnerabilities
MGASA-2026-0070 – Updated libpng packages fix security vulnerabilities
Update to 146.0.7680.164 * High CVE-2026-4673: Heap buffer overflow in WebAudio * High CVE-2026-4674: Out of bounds read in CSS * High CVE-2026-4675: Heap buffer overflow in WebGL * High CVE-2026-4676: Use after free in Dawn
Update to v2.0.52
Update to 1.23.1
Update to 1.23.1
https://security-tracker.debian.org/tracker/DSA-6182-1
Kotlin 2.3.20 harmonizes with C, JavaScript/Typescript
https://security-tracker.debian.org/tracker/DSA-6180-1
https://security-tracker.debian.org/tracker/DSA-6179-1
Final training of AI models is a fraction of their total cost
An update that solves seven vulnerabilities can now be installed.
An update that solves eight vulnerabilities can now be installed.
An update that solves two vulnerabilities can now be installed.
An update that solves nine vulnerabilities can now be installed.
An update that solves eight vulnerabilities can now be installed.
An update that solves one vulnerability can now be installed.
AFC Ajax drops ball as flaws let hackers play admin with tickets and bans
OpenAI adds plugin system to Codex to help enterprises govern AI coding agents
Anthropic throttles Claude subscriptions to meet capacity
Iran war drives urgent need to counter underwater attack drones