August 20, 2026
DSA-6452-1 designate – security update
US Bank investigates LockBit’s claims as ransomware crims set pay-or-leak deadline
US Bank says that it’s investigating ransomware crew LockBit’s claims that it breached the financial institution and stole data, which the crims [...]
August 20, 2026
Researcher tricks Apple’s Find My into sharing location data with Linux
A young security researcher figured out a way to enroll a Linux device into Apple’s Find My network and read live location data from it. Find My is Apple’s [...]
August 20, 2026
Ransomware crook poses as recovery firm to steal payments from fellow extortionists
A ransomware affiliate appears to have found a new way to squeeze victims for cash: pose as the good guy and undercut the criminals it was working with. [...]
August 20, 2026
Grok chat duped into swallowing injected instructions
xAI’s Grok web chat agent is currently vulnerable to a novel form of prompt injection, according to security researchers with Adversa AI. The [...]
August 20, 2026
TrueFoundry debuts open-source AI agent harness, claiming up to 75% lower costs
TrueFoundry has launched TrueForge, an open-source agent harness that lets developers build and run AI agents using models from different providers, [...]
August 20, 2026
French tax authority says break-in exposed data of 600K, including some private messages
France’s tax authority says attackers may have stolen the contents of messages exchanged with hundreds of taxpayers during the data raid it confirmed [...]
August 20, 2026
Anthropic’s Opus language problems may be creating a hidden cost for AI coding
AI coding assistants are supposed to reduce the work required to turn a developer’s intent into working software. But some users of Anthropic’s Opus 4.8 [...]
August 20, 2026
The five walls standing between a demo agent and a deployed one
Building an AI agent that looks impressive in a demo is now a weekend project. Building one that an enterprise will actually let touch its CRM, its data [...]
August 20, 2026
Introducing G#: A Go-like language for .NET
Microsoft’s open sourcing of .NET not only has sped up the development of the platform, but also has allowed new languages and features to be built on top [...]
August 20, 2026
Nobody’s agent fleet fails the way the vendors say it will
I run 49 scheduled AI agents on one laptop. Another 24 sit beside them, deliberately switched off. That distinction matters more than it sounds. After [...]
August 20, 2026
AI agent suggested installing a malware package. Engineer almost took its advice
PWNED Welcome back to PWNED, the column where we make fun of those who are security self-owned, so hopefully you don’t do the same. This week, we have a [...]
August 20, 2026
DSA-6454-1 sabnzbdplus – security update
August 20, 2026
DSA-6453-1 libgit2 – security update
August 20, 2026
Smashing Security podcast #481: Never say this to a robot dog
August 19, 2026
‘Not a theoretical risk,’ feds warn as attackers use AI-made code to hack critical infrastructure controllers
Attackers are using AI-generated exploitation scripts to break into internet-exposed Siemens S7 Series programmable logic controllers (PLCs) at water, [...]
August 19, 2026
DSA-6450-1 srt – security update
August 19, 2026
DSA-6449-1 swift – security update
August 19, 2026
Linux Identity, Privilege & Administrative Access
Access to a Linux system involves several connected decisions. The system must determine who or what is requesting access, verify that identity, decide [...]
August 19, 2026
ICE boss to agents: Leave the Meta spy glasses at home
Some ICE employees seemingly needed a reminder not to wear their Meta pervert glasses to work. Because only ICE can spy on ICE. Meta smart glasses are [...]
August 19, 2026
Flock surveillance backlash mounts as fiendish Halloween plans circulate
Surveillance tech company Flock has struggled with its public image for years, but the problem has become particularly acute in recent weeks. Its network [...]
August 19, 2026
Mageia 10 lsp-plugins Bug Fix Advisory Release 2026-0101 Update
August 19, 2026
Comcast gives its Wi-Fi motion detector a security makeover
Comcast has folded its Wi-Fi-based intruder detection feature into Xfinity Shield, a repackaged bundle of physical and cybersecurity offerings. The US [...]
August 19, 2026
Decoding Origin: Cursor’s GitHub rival that was launched during the latter’s outage
AI coding tools are increasingly becoming the place where developers write and modify software. SpaceX-owned Cursor now wants to bring code hosting into [...]
August 19, 2026
Fix for Test Failure in Debian LTS ruby-grape DLA-4706-2 Update
August 19, 2026
Rocky Linux 8 attr Medium Symlink Traversal Fix RLSA-2026-56133
August 19, 2026
Rocky Linux 8 RLSA-2026-56219 Python3 Important Security Issue
August 19, 2026
Rocky Linux 9 RLSA-2026-55856 .NET 9.0 Important Security Update
August 19, 2026
AI inference: Five best practices for successful AI applications
While some organizations are still getting started with their AI strategies, others are in pilot purgatory, with few experiments or proofs of concept [...]
August 19, 2026
Coding agents make mistakes. So what?
Regular readers will probably have figured out that I’m generally an optimist. I think things are always getting better, and the future of the human race [...]
August 19, 2026
Australian hotel chain leaks guests’ PII after breach at third-party database operator
Australian aparthotel chain Quest has revealed it leaked customer data. A Reg reader kindly shared an email from the chain with the subject line “Important [...]
August 19, 2026
AI’s attribution problem gets worse as models scale
Diffusion models are becoming sophisticated enough that they can reproduce an image even when they don’t have access to the original. In a series of ‘what [...]
August 19, 2026
Fedora 43 Python 3.14.7 Security Advisory 2026-7f32bbb5b0
August 19, 2026
Fedora 43 libnfs Security Advisory CVE-2026-57918 CVE-2026-53689
August 19, 2026
Fedora 43 perl-Imager Important EXIF Decode Fix CVE-2026-19082
August 19, 2026
Fedora 44 libgit2 Update 1.9.7 Security Advisory 2026-86684eb696
August 19, 2026
Fedora 44 GitPython 3.1.59 Update Security Fixes 2026-166bfc4f18
August 19, 2026
Fedora Python 3.14.7 Important DoS Bypass Fix 2026-2c124fcf93
August 19, 2026
Fedora 44 lemonldap-ng 2.23.3 Security Update CVE-2026-19349
August 19, 2026
Fedora 44 perl-Imager Important EXIF Decoding Fix CVE-2026-19082
August 19, 2026
How to Recover Authentication Platforms After Cyberattacks in Linux Environments
When an authentication platform goes down, downstream applications go with it. Employees can’t sign in, customers get locked out, and scheduled jobs [...]
August 19, 2026
DSA-6451-1 firefox-esr – security update
August 19, 2026
OpenAI’s overhead will rise 20 percent for some workloads as it hardens security
OpenAI on Tuesday said its decision to suspend model training work, implemented after unreleased, unsupervised AI models hacked HuggingFace, remains in [...]
August 18, 2026
Ubuntu 24.04 LTS Linux Kernel Critical Issues Update USN-8636-2
August 18, 2026
Ubuntu 22.04 LTS Linux Kernel Security Update USN-8630-3
August 18, 2026
Accelerating AI innovation through open weights
Open-weight AI models are a big deal, as Nvidia and more than 200 other companies and organizations attested in their “Open Weights and American AI [...]
August 18, 2026
Expired credit cards revived by researchers to make unauthorized payments
Researchers affiliated with the University of Massachusetts Amherst have found that you can get payments out of certain expired contactless credit cards, a [...]
August 18, 2026
Ubuntu 14.04 LTS Linux Kernel Security Advisory USN-8646-1
August 18, 2026
Ubuntu Linux Kernel Security Advisory USN-8643-1 Multiple Issues
August 18, 2026
DuckDB 2.0 coming this fall with client/server mode
DuckDB, the analytics database with high-end features in a single easily deployed binary, is due to release a major update, version 2.0, this fall. In a [...]
August 18, 2026
How QR-code phishing can slip past corporate security measures
Quishing has become a popular alternative to traditional phishing. Here’s how businesses can close the gap.
August 18, 2026
Oracle Linux 8 Node.js Important Security Update ELSA-2026-54530
August 18, 2026
Oracle Linux ELSA-2026-55858 .NET 10.0 Important Bug Fix
August 18, 2026
Oracle Linux 10 libssh Important Advisory ELSA-2026-55855
August 18, 2026
Oracle haproxy Important Buffer Overflow Fix ELSA-2026-55679
August 18, 2026
Oracle Linux 10 Nodejs Significant CVE Remedy ELSA-2026-55541
August 18, 2026
Oracle Linux 10 Bind Vital Security Announcement ELSA-2026-55437
August 18, 2026
Oracle Linux curl Important Fix ELSA-2026-55432 CVE-2026-8927
August 18, 2026
Oracle Linux 9 libXfont2 Important CVE Fixes ELSA-2026-55447
August 18, 2026
CISA gives feds 3 days to fix actively exploited Ray RCE bug
CISA says attackers are exploiting a critical 2025 vulnerability in Ray, the widely used open source framework for scaling Python and machine-learning [...]
August 18, 2026