October 22, 2026
DSA-6576-1 bind9 – security update
DSA-6575-1 nginx – security update
October 22, 2026
Max-severity GitLab bug allows remote code execution over 12 years of releases
GitLab on Wednesday patched a maximum-severity flaw that could allow unauthenticated attackers to execute arbitrary code on self-managed servers under [...]
October 22, 2026
Disgraced Indian cert issuer leaves the cert issuing business
After embarrassing reports revealed weak private keys, one of which was just a single digit, Indian certification authority eMudhra has decided to take the [...]
October 22, 2026
PHP2Shell puts dozens of UK government services out of service
The PHP2Shell security fiasco has forced 32 UK government services offline and left another four partially unavailable as Whitehall scrambles to patch the [...]
October 22, 2026
When the attacker becomes the user: Rethinking account takeover
In a world full of cyber risk, account takeover has emerged as one of the most insidious of all threats. If an attacker can successfully compromise a [...]
October 22, 2026
Hackers pile on PHP2Shell as AWS reveals attacks began before disclosure
Attackers are hammering servers with millions of attempts to exploit the critical PHP2Shell vulnerabilities, with Amazon revealing that someone was already [...]
October 22, 2026
Microsoft says ConnectWise breach let Chinese spies loose on 2,250 cloud tenants
China-aligned attackers used AI agents and compromised ConnectWise application credentials to target more than 2,250 Microsoft 365 tenants, Microsoft says. [...]
October 22, 2026
A patch only reduces risk when it runs in production
The patch was ready in days. It took months to ship. Why?I hear that question in nearly every customer conversation about vulnerability management. The [...]
October 22, 2026
Phala Attack Shows What Confidential Computing Does Not Protect
An attacker read logs and settings from a small set of Phala Cloud apps, the company says.
October 22, 2026
Qilin and INC Exploit Palo Alto VPN Flaw in Ransomware Attacks
October 22, 2026
IT department and auditors at major pharmacy chain got into a rip-roaring fight about using ‘password’ on Cisco firewall
Welcome back to PWNED, the column where we talk about companies and organizations that leave the doors wide open to attackers. This week’s sad story [...]
October 22, 2026
Why reasoning models should not have to read everything
The AI industry has been expanding how much information an AI model can consume at once. In just a few years, context windows have grown from thousands of [...]
October 22, 2026
Certification authority eMudhra defends its laughably weak private keys
Indian certification authority eMudhra has defended the laughably weak private keys it used to sign some digital certificates it issued, and suggested [...]
October 22, 2026
DSA-6577-1 chromium – security update
October 22, 2026
DSA-6534-3 webkit2gtk – regression update
October 22, 2026
OpenAI’s models are deliberately breaking their misalignment monitoring systems
AI agents are getting more inventive in finding ways to circumvent safeguards to prevent bad behavior, OpenAI has revealed. On Tuesday, it reported two [...]
October 21, 2026
PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk
PHP developers have accused software supply chain security shop Chainguard of effectively revealing critical bugs in the open-source scripting language [...]
October 21, 2026
Two critical PHP flaws put the web on alert as emergency patches arrive
Organizations are scrambling to protect themselves following the disclosure of two critical vulnerabilities in commonly used code that powers much of the [...]
October 21, 2026
Debian bind9 Update Addresses DNS Attacks and Service Outages
October 21, 2026
Ubuntu c-ares Fixes DoS and Code Execution Vulnerabilities
October 21, 2026
openSUSE openssh Fixes SSH Forwarding and Tunnel Policy Issues
October 21, 2026
SUSE openssh Fixes SSH Forwarding and Tunnel Policy Issues
October 21, 2026
SUSE libpng16 1.6.59 Fixes CVE-2026-46675 Security Vulnerability
October 21, 2026
openSUSE Leap 15.4 libheif Fixes Memory Errors and Security Issues
October 21, 2026
SUSE libheif Fixes Memory Access and Out of Bounds Errors
October 21, 2026
SUSE Poppler Moderate Integer Overflow and DoS Update 2026-4816-1
October 21, 2026
openSUSE Poppler Update Fixes PDF Processing Errors Across Systems
October 21, 2026
openSUSE cyrus-sasl Update Fixes DIGEST-MD5 Client Compromise
October 21, 2026
SUSE Mutt 1.10.1 Fixes Crafted Header Heap Write Vulnerability
October 21, 2026
openSUSE cifs-utils Fixes CIFS Credential Mount Injection
October 21, 2026
SUSE openssl-certs 2.92 Update Removes emSign Root Certificates
October 21, 2026
SUSE ca-certificates-mozilla Refreshes Trusted Root Certificates
October 21, 2026
SUSE Docker Important Update for Go Security Release and Fixes
October 21, 2026
SUSE rootlesskit Update Rebuilds Against Current Go Release
October 21, 2026
openSUSE rootlesskit Update for Current Go Security Release
October 21, 2026
SUSE rootlesskit Important Update for Go Security Release
October 21, 2026
SUSE OpenSSH Update Fixes SSH Forwarding and Policy Bypasses
October 21, 2026
openSUSE OpenSSH 9.6p1 Fixes SSH Forwarding and Agent Issues
October 21, 2026
SUSE OpenEXR Update Fixes Crafted EXR File Processing Issues
October 21, 2026
SUSE libraw Update Fixes a Crash During TIFF Image Processing
October 21, 2026
openSUSE libraw Update Fixes TIFF Processing Crash in Image Handling
October 21, 2026
SUSE Kernel Live Patch 22 Fixes Five Security Vulnerabilities
October 21, 2026
openSUSE Kernel Live Patch Fixes Five Important Security Issues
October 21, 2026
DSA-6572-1 ca-certificates – security update
October 21, 2026
Ubuntu NSS Update Removes Compromised Certificate Authority Roots
October 21, 2026
Ubuntu Ghostscript Fixes Sandbox Bypass and Code Execution
October 21, 2026
Arch Linux php-legacy Fixes a Remote Code Execution Vulnerability
October 21, 2026
Arch Linux PHP Critical Remote Code Execution ASA-202610-1
October 21, 2026
LiteLLM supply chain attack hoovers up passwords and secrets
Unknown crims compromised LiteLLM’s release process on Wednesday, distributing a malicious version (1.107.0) containing malware designed to steal [...]
October 21, 2026
Ubuntu Poppler Update Stops Crashes When Opening Encrypted PDFs
October 21, 2026
Signal bug could keep your mic – and camera – on after hangup
Make sure you don’t say anything mean or secret after hanging up a call on Signal, as a bug in the encrypted messaging app’s calling library could prevent [...]
October 21, 2026
Is the ad a scam? How to tell before you click
You can trust a social media platform and still get scammed by an ad running on it
October 21, 2026
Oracle Linux 8 perl-URI Update Fixes Hostname Encoding Bypass
October 21, 2026
Fedora PHP Update Fixes OOM and Stale State RCE Vulnerabilities
October 21, 2026
Fedora 44 ca-certificates Update Adds Code-Signing Roots
October 21, 2026
Fedora 44 Updates rust-webpki-roots After eMudhra CA Compromise
October 21, 2026
Fedora 44 Updates Rust Certificate Roots After CA Compromise
October 21, 2026
Fedora 44 Updates rustls-webpki After eMudhra CA Compromise
October 21, 2026
Fedora 44 Dolphin Fixes Crafted Folder Command Execution
October 21, 2026
Fedora 44 linux-firmware 20261019 Hardware Firmware Update
October 21, 2026
Fedora 44 GSConnect 73 Fixes Authenticated File Write Vulnerability
October 21, 2026
Fedora 44 qdigidoc 4.11.1 Fixes Path Traversal Vulnerability
October 21, 2026
Fedora 44 Nicotine+ Update Fixes Decompression Bomb DoS
October 21, 2026
Fedora 44 Fixes DoS in perl-ExtUtils-Typemaps-Default 1.07
October 21, 2026
Fedora libdigidocpp 4.5.1 Fixes Signature Forgery Vulnerability
October 21, 2026
Ubuntu 26.10 U-Boot Fixes Buffer Overflow and Memory Access Issues
October 21, 2026
Rocky Linux 10 bubblewrap Update Blocks Sandbox File Writes
October 21, 2026
Rocky Linux 10 hostapd Update Fixes a Wi-Fi 7 DoS Vulnerability
October 21, 2026
Rocky Linux 10 rust-sequoia-sq Fixes DNS and DoS Issues
October 21, 2026
Rocky Linux 10 OpenSSH Update Fixes SFTP and GSSAPI Issues
October 21, 2026
Rocky Linux 10 Kernel Fixes for Networking and Memory Safety
October 21, 2026
PHP devs publish critical bug fix as site owners warned: Pull ’em offline if you’re unpatched
PHP developers have released emergency updates for two critical vulnerabilities after cybersecurity authorities warned organizations to patch immediately [...]
October 21, 2026
PHP Releases Emergency Fixes for Critical PHP2Shell Vulnerabilities
October 21, 2026
INC and The Gentlemen Ransomware Affiliates Expose 8,257 AI Messages
October 21, 2026
AI has ‘potential’ to turn script kiddies into sophisticated infrastructure attackers
When it comes to cyberattacks that shut down power grids, drinking-water systems, and other critical infrastructure, AI doesn’t – yet – turn script kiddies [...]
October 21, 2026
Nvidia picks OpenShell to tame AI gents
Nvidia has proposed a new way to keep corporate AI agents in line. Nvidia on Wednesday introduced its OpenShell Reference Architecture. Based on the [...]
October 21, 2026
Comparing Five Platforms for Continuous PCI Compliance in Linux
Maintaining PCI DSS compliance has gone from a sprint to a year-round marathon. Verizon’s 2022 Payment Security Report found only 43.4% of organizations [...]
October 21, 2026
What Is Tor Browser & How Does It Impact Linux Security Teams?
Tor Browser is a privacy-focused web browser that routes traffic through the Tor network to obscure a user’s identity and destination—and that design has [...]
October 21, 2026
Privilege Escalation: Five Linux Exploits Give Ordinary Users Root
Linux researcher Hyunwoo Kim has shown five ways to turn a limited account into root on tested Linux systems.
October 21, 2026
Zero-Day Vulnerability Gave Attackers Time to Plant Backdoors
Attackers broke into BeyondTrust Remote Support before a patch was ready, then left ways to return to the server.
October 21, 2026
AI Code Review Produces 28 Accepted Security Findings in Apache Camel
An artificial intelligence (AI) scanner helped find 28 security flaws in Apache Camel that led to fixes.
October 21, 2026
EU wants Booking.com to check out of its scam problem
The European Commission has opened an investigation under the Digital Services Act into whether Booking.com is doing enough to stop fraudsters running [...]
October 21, 2026
Using model routing to lower inference costs
Running frontier models for coding and other purposes can be very expensive, but also, sometimes, very effective. It’s tempting to use smaller or older [...]
October 21, 2026
How AI is changing software pricing
In 2026, the AI monetization conversation has shifted quickly from one concern to the next. Early in the year, fears that AI agents would erode software [...]
October 21, 2026
Eight reasons coding agents are better than software developers
I can’t stop anthropomorphizing my coding agent. I use both Claude Code and Cursor, and whenever I talk about these tools, I always refer to them as “he”, [...]
October 21, 2026
US bans DeepSeek across federal agencies, putting AI supply chains under scrutiny
DeepSeek has been dealt a huge blow in the US, even as it continues to innovate and keep pace with, or in some cases outperform, rival models from American [...]
October 21, 2026
DSA-6574-1 php8.4 – security update
October 21, 2026
DSA-6573-1 firefox-esr – security update
October 21, 2026
Indian certification authority eMudhra’s private keys compromised – one of them was the number ‘4’
Tragically simple private keys used by a certification authority based in India have been compromised, meaning the 60-million-plus certs it has issued [...]
October 20, 2026
Auto tech startup claims it traced hack attempt back to rival’s IP address
An automotive tech startup claims that its IT systems were attacked by individuals trying to steal its driving model, and that those attacks came from an [...]
October 20, 2026
Multi-Cloud Blind Spots Are Leaving Security Teams Exposed
October 20, 2026
Live Video Moderation Challenges Traditional Content Safety Systems
October 20, 2026
Palo Alto’s firewall OS has been under attack from multiple ransomware groups since June
Multiple ransomware groups, including Qilin and Inc, have been exploiting a high-severity authentication bypass bug in Palo Alto Networks’ PAN-OS, [...]
October 20, 2026