October 23, 2026
DSA-6578-1 aide – security update
MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaboration
ESET researchers uncover MythicRatatoskr – a previously unknown Go-based backdoor hiding its C&C server inside the Yggdrasil mesh network – that paved [...]
October 23, 2026
OpenClaw creator spent $10 million on AI tokens last month
OpenClaw, the AI digital assistant, is looking to establish itself as an essential tool for users — but if it is as profligate in its use of tokens as its [...]
October 23, 2026
When It Makes Sense to Replace a Legacy Virtualization Stack
October 23, 2026
Google targets AI agents’ idle-time costs with new compute service
As enterprises scale AI agents, Google is betting that idle infrastructure costs could become a major barrier to adoption. To address that challenge, the [...]
October 23, 2026
426 Android and iOS Apps Linked to PHP2Shell Backend Risks
October 23, 2026
Hacker leaks 281 GB of data from Germany’s far-right AfD party
October 23, 2026
Torvalds: AI is fine for competent devs, but spare us the ‘drive-by’ patches
Linus Torvalds is embracing AI to write Linux kernel code, and some people are having fits. He has a message for them. So do I. Roy Schestowitz, editor of [...]
October 23, 2026
CA shutdown puts Java, containers, and security appliances in the certificate crosshairs
A certificate authority’s decision to abandon the global SSL/TLS market is exposing a weakness many organizations rarely examine: their dependence on [...]
October 23, 2026
Rocky Linux 9 PHP 8.2 Fixes SOAP DoS and Memory Corruption
October 23, 2026
Rocky Linux 10 Go Update Fixes HTTP Denial-of-Service Vulnerability
October 23, 2026
Debian LTS ClamAV Update Addresses Malicious File Risks
October 23, 2026
UK threatens subsea cable saboteurs with 14 years behind bars
Britain is threatening subsea cable saboteurs with up to 14 years in prison and unlimited fines, having apparently decided that Victorian-era laws [...]
October 23, 2026
Don’t assume resilience from your cloud provider
The recent Google Cloud incident in London is the kind of event that should force enterprises to rethink what cloud resilience really means. Google said [...]
October 23, 2026
Mageia 10 Go Update Addresses Certificate Authority Concerns
October 23, 2026
Mageia 10 perl-Mozilla-CA Fixes Compromised Certificate Chain
October 23, 2026
Mageia 10 open-isns Fixes a Double-Free in the iSNS Decoder
October 23, 2026
Mageia 10 msgpack Fixes Integer Overflow in Buffer Expansion
October 23, 2026
Mageia 10 Roundcube 1.7.5 Fixes Mail Injection and Other Attacks
October 23, 2026
Fedora PHP 8.5.12 Fixes Two Remote Code Execution Flaws
October 23, 2026
Fedora 45 ca-certificates Update Removes emSign Root CS CA
October 23, 2026
Debian Erlang Fixes Authentication Bypass and TLS Impersonation
October 23, 2026
Debian Roundcube Fixes IMAP Injection and Other Security Issues
October 23, 2026
Debian LTS aide Update Blocks Local Malicious File Bypass
October 23, 2026
Fedora 44 Removes emSign Root CS CA G3 from ca-certificates
October 23, 2026
Fedora golang-x-mobile Update for Mobile Go Development
October 23, 2026
Fedora BIND 9.21.26 Fixes DNSSEC and Resolver Security Risks
October 23, 2026
Fedora MaraDNS Fixes DNS Service Disruption and Memory Exposure
October 23, 2026
Fedora 44 Knot Resolver 5.7.8 Gets a New Upstream Release
October 23, 2026
Fedora 44 Rebuild for clevis-pin-trustee and CVE-2026-93600
October 23, 2026
Fedora 44 socat Fixes SOCKS5 Proxy Remote Code Execution
October 23, 2026
Fedora 43 VLC Update Addresses RTSP Disclosure and Code Execution
October 23, 2026
PHP2Shell exposes the weakness in coordinated vulnerability disclosure
Two critical vulnerabilities discovered in the widely-used PHP programming language have shaken up enterprises, and the ramifications will take some time [...]
October 23, 2026
SUSE go1.27 1.27.3 Certificate Authority Fix and Security Update
October 23, 2026
SUSE Go 1.26 Update Fixes HTTP/2 and Certificate Issues
October 23, 2026
SUSE Go 1.26.10 Update Fixes HTTP, TLS and Go Toolchain Issues
October 23, 2026
openSUSE go1.26-openssl Fixes 16 Security Issues in 2026-4866-1
October 23, 2026
SUSE WebKitGTK Critical Fix for Crashes and Use After Free
October 23, 2026
SUSE php74 Update Fixes Memory Corruption and Remote Code Execution
October 23, 2026
SUSE Kernel Live Patch 29 Fixes Five Critical Security Issues
October 23, 2026
SUSE NVIDIA Open Driver Fixes 81 Issues and Improves Stability
October 23, 2026
SUSE BCEL Update Fixes Stored XSS and Parse Recursion Issues
October 23, 2026
SUSE MozillaFirefox 153.5.0 ESR Fixes 85 Security Issues
October 23, 2026
SUSE aliyun-cli Update Fixes Crashes During Remote Process Execution
October 23, 2026
SUSE Guava Update Fixes a Deserialization DoS Vulnerability
October 23, 2026
SUSE Amazon ECS Init Update Fixes Remote Denial-of-Service Issues
October 23, 2026
SUSE cyrus-sasl Fixes a Heap Overflow in the DIGEST-MD5 Client
October 23, 2026
SUSE 16.0 python-soupsieve Update Fixes Two DoS Vulnerabilities
October 23, 2026
SUSE coreutils 9.6 Fixes uniq Denial of Service and Data Disclosure
October 23, 2026
DSA-6581-1 unbound – security update
October 23, 2026
DSA-6580-1 erlang – security update
October 23, 2026
DSA-6579-1 roundcube – security update
October 23, 2026
AI Chatbot Privacy on Linux: Auditing Extensions, Desktop Clients, and Browser Policies
Ads in ChatGPT are chosen in part based on the conversation they appear under, and Meta now shapes the ads users see on Facebook and Instagram through [...]
October 22, 2026
Oracle PHP 8.3.36 Important Security Update and Patch Release
October 22, 2026
Oracle Linux 9 PHP 8.2.35 Important Security Update for Your Systems
October 22, 2026
Oracle Linux 9 OpenEXR Fixes Five Security Vulnerabilities
October 22, 2026
Oracle librsvg2 Update Fixes XML Entity Use-After-Free Vulnerability
October 22, 2026
Debian Trixie AIDE Update Blocks Malicious File Detection Bypass
October 22, 2026
DSA-6576-1 bind9 – security update
October 22, 2026
DSA-6575-1 nginx – security update
October 22, 2026
Critical PHP Vulnerabilities Let Attackers Run Code Without a Login
PHP has released emergency updates for two critical vulnerabilities that can let attackers run malicious code on a web server without logging in.
October 22, 2026
Ubuntu zlib Fixes Heap Overflow and Code Execution Vulnerabilities
October 22, 2026
New DNS Security Flaws Can Disrupt Website and Email Access
An online shop can be running normally while customers cannot reach it.
October 22, 2026
PHP2Shell exploit bypasses protections designed to stop remote code execution
Researchers have developed a new exploit that shows how even Address Space Layout Randomization (ASLR) on an x86-64 server cannot stop the PHP2Shell [...]
October 22, 2026
GitLab critical patches include one for a bug that allows code execution by unauthenticated users
GitLab on Wednesday published updated versions of its Community Edition (CE) and Enterprise Edition (EE) that address a dozen bugs and security issues, [...]
October 22, 2026
Paying in ADA: Cardano’s vision for the future of payroll
October 22, 2026
Max-severity GitLab bug allows remote code execution over 12 years of releases
GitLab on Wednesday patched a maximum-severity flaw that could allow unauthenticated attackers to execute arbitrary code on self-managed servers under [...]
October 22, 2026
Disgraced Indian cert issuer leaves the cert issuing business
After embarrassing reports revealed weak private keys, one of which was just a single digit, Indian certification authority eMudhra has decided to take the [...]
October 22, 2026
PHP2Shell puts dozens of UK government services out of service
The PHP2Shell security fiasco has forced 32 UK government services offline and left another four partially unavailable as Whitehall scrambles to patch the [...]
October 22, 2026
Rocky Linux 8 PHP 8.2 Fixes for DoS and Memory Corruption
October 22, 2026
When the attacker becomes the user: Rethinking account takeover
In a world full of cyber risk, account takeover has emerged as one of the most insidious of all threats. If an attacker can successfully compromise a [...]
October 22, 2026
Hackers pile on PHP2Shell as AWS reveals attacks began before disclosure
Attackers are hammering servers with millions of attempts to exploit the critical PHP2Shell vulnerabilities, with Amazon revealing that someone was already [...]
October 22, 2026
Microsoft says ConnectWise breach let Chinese spies loose on 2,250 cloud tenants
China-aligned attackers used AI agents and compromised ConnectWise application credentials to target more than 2,250 Microsoft 365 tenants, Microsoft says. [...]
October 22, 2026
A patch only reduces risk when it runs in production
The patch was ready in days. It took months to ship. Why?I hear that question in nearly every customer conversation about vulnerability management. The [...]
October 22, 2026
Phala Attack Shows What Confidential Computing Does Not Protect
An attacker read logs and settings from a small set of Phala Cloud apps, the company says.
October 22, 2026
Qilin and INC Exploit Palo Alto VPN Flaw in Ransomware Attacks
October 22, 2026
IT department and auditors at major pharmacy chain got into a rip-roaring fight about using ‘password’ on Cisco firewall
Welcome back to PWNED, the column where we talk about companies and organizations that leave the doors wide open to attackers. This week’s sad story [...]
October 22, 2026
Why reasoning models should not have to read everything
The AI industry has been expanding how much information an AI model can consume at once. In just a few years, context windows have grown from thousands of [...]
October 22, 2026
Certification authority eMudhra defends its laughably weak private keys
Indian certification authority eMudhra has defended the laughably weak private keys it used to sign some digital certificates it issued, and suggested [...]
October 22, 2026
DSA-6577-1 chromium – security update
October 22, 2026
DSA-6534-3 webkit2gtk – regression update
October 22, 2026
OpenAI’s models are deliberately breaking their misalignment monitoring systems
AI agents are getting more inventive in finding ways to circumvent safeguards to prevent bad behavior, OpenAI has revealed. On Tuesday, it reported two [...]
October 21, 2026
PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk
PHP developers have accused software supply chain security shop Chainguard of effectively revealing critical bugs in the open-source scripting language [...]
October 21, 2026
Two critical PHP flaws put the web on alert as emergency patches arrive
Organizations are scrambling to protect themselves following the disclosure of two critical vulnerabilities in commonly used code that powers much of the [...]
October 21, 2026
Debian bind9 Update Addresses DNS Attacks and Service Outages
October 21, 2026
Ubuntu c-ares Fixes DoS and Code Execution Vulnerabilities
October 21, 2026
openSUSE openssh Fixes SSH Forwarding and Tunnel Policy Issues
October 21, 2026
SUSE openssh Fixes SSH Forwarding and Tunnel Policy Issues
October 21, 2026
SUSE libpng16 1.6.59 Fixes CVE-2026-46675 Security Vulnerability
October 21, 2026
openSUSE Leap 15.4 libheif Fixes Memory Errors and Security Issues
October 21, 2026