Menu

Latest articles

https://security-tracker.debian.org/tracker/DSA-6238-1
This month in security with Tony Anscombe – April 2026 edition Warnings about helpdesk impersonation scams and Iran-linked hackers targeting critical sectors in the US, plus the most damaging scams of 2025 – here’s some of what made the headlines this month
Enterprise Spotlight: Transforming software development with AI
First reports come in of victims of critical cPanel vuln as ‘millions’ of sites potentially exposed
Why Memory Safety Is Becoming a Core Requirement in Modern Software
Three security vulnerabilities were discovered in libexif, a library to reads and writes EXIF metainformation from and to images files, that can causes crashes or information leaks. CVE-2026-32775 If the exif_mnote_data_get_value function in MakerNotes gets passed
Important: libtiff security update
Important: xorg-x11-server-Xwayland security update
Important: yggdrasil-worker-package-manager security update
Important: yggdrasil security update
Important: vim security update
OpenAI locks GPT-5.5-Cyber behind velvet rope despite slamming Anthropic for doing exactly that
Pro-Iran crew turns DDoS into shakedown as Ubuntu.com stays down
Passport to £££: Home Office adds £216M to travel doc contract before a single bid’s been placed
Running AI in the cloud is easy – and expensive
Are we ready to give AI agents the keys to the cloud? Cloudflare thinks so
https://security-tracker.debian.org/tracker/DSA-6239-1
https://security-tracker.debian.org/tracker/DSA-6197-3
https://security-tracker.debian.org/tracker/DSA-6240-1
https://security-tracker.debian.org/tracker/DSA-6242-1
https://security-tracker.debian.org/tracker/DSA-6243-1
The never-ending supply chain attacks worm into SAP npm packages, other dev tools
Bot her emails: most modern phishing campaigns are AI-enabled
FBI cyber boss: China’s hacker-for-hire ecosystem ‘out of control’
Google’s fix for critical Gemini CLI bug might break your CI/CD pipelines
French prosecutors link 15-year-old to mega-breach at state’s secure document agency
Redefining security data: Red Hat’s new VEX experience heading to Red Hat Summit 2026
Important: vim security update
Important: PackageKit security update
Important: xorg-x11-server security update
Nearly half of UK businesses pwned last year as phishing keeps doing the job like it’s 2005
What type of ‘C2 on a sleep cycle’ do they leave behind? Novel Chinese spy group found in critical networks in Poland, Asia
Bug of the year (so far): Nasty cPanel vulnerability probably exploited as a 0-day
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information disclosure or sandbox escape. For Debian 11 bullseye, these problems have been fixed in version 140.10.1esr-1~deb11u1.
SAP npm package attack highlights risks in developer tools and CI/CD pipelines
Harness teams of agentic coders with Squad
Making AI work for databases
Britain’s £6B armoured sickener Ajax cleared for duty despite injuring troops
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Iran-linked Handala hackers leak US Marines data, send chilling WhatsApp threats
Finance company stores DB credentials in helpfully labeled spreadsheet
Linux cryptographic code flaw offers fast route to root
Smashing Security podcast #465: This developer wanted to cheat at Roblox. It cost millions
Researchers move in the right direction, develop powerful GPS interference alarm
Microsoft’s patch for a 0-day exploited by Russian spies fell short. Another Windows flaw is under attack
Legacy TLS tour continues with Exchange Online blocking old versions from July 2026
The End of Patch and Pray: How Rust Is Reshaping Memory Safety in Linux
CISA flags data-theft bug in NSA-built OT networking tool
GitHub: Woah, a genuinely helpful AI-assisted bug report that isn’t total slop. Here, Wiz, take this wad of cash