Menu

Latest articles

https://security-tracker.debian.org/tracker/DSA-6209-1
GitHub adds Stacked PRs to speed complex code reviews
No honor among thieves as 0APT threatens rival ransomware gang Krybit
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
Important: fontforge security update
Important: perl-XML-Parser security update
It was discovered that gdk-pixbuf, the GDK Pixbuf library, does not properly validate color component counts in the JPEG image loader, which may result in the execution of arbitrary code or denial of service if specially crafted JPEG images are processed. For Debian 11 bullseye, this problem has been fixed in version
Several security issues were fixed in polkit.
The hyperscalers are pricing themselves out of AI workloads
HTMX 4.0: Hypermedia finds a new gear
Zombie Microsoft bugs rise from the dead, pave way for crims and ransomware scum
Fake Linux leader using Slack to con devs into giving up their secrets
Google Cloud introduces QueryData to help AI agents create reliable database queries
Why Your “Shadow IT” Developer Tools Are the Biggest Risk to Your Linux Systems
Booking.com warns reservation data may have checked out with intruders
Critical flaw in Marimo Python notebook exploited within 10 hours of disclosure
Gym giant Basic-Fit confirms data on a million members stolen in cyberattack
Rockstar Games gets a taste of grand theft data
BIND a popular name server (DNS) was affected by a vulnerability. If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers
NHS pays £46K to prep next Microsoft licensing round
AI has to be dull before it can be sexy
Are AI certifications worth the investment?
Hands-on with the Google Agent Development Kit
An update that solves two vulnerabilities can now be installed.
An update that solves two vulnerabilities can now be installed.
An update that solves eight vulnerabilities can now be installed.
An update that solves eight vulnerabilities can now be installed.
An update that solves six vulnerabilities can now be installed.
China wants AI to prepare school lessons and mark homework
Anthropic’s mysterious Mythos AI threatens to upend the infosec world
Multiple security issues were discovered in MediaWiki, a website engine for collaborative work, which could result in information disclosure or incomplete permission checks. For the oldstable distribution (bookworm), these problems have been fixed in version 1:1.39.17-1+deb12u2.
Multiple security vulnerabilities were discovered in Flatpak, an application deployment framework for desktop apps, which could allow a Flatpak app to delete arbitrary hosts on the host or break out of the sandbox resulting in code execution in the host context. For the stable distribution (trixie), these problems have been fixed in
MGASA-2026-0096 – Updated libpng12 packages fix security vulnerability
MGASA-2026-0095 – Updated tomcat packages fix security vulnerabilities
MGASA-2026-0094 – Updated squid packages fix security vulnerabilities
Moderate: kernel security update
https://security-tracker.debian.org/tracker/DSA-6207-1
https://security-tracker.debian.org/tracker/DSA-6208-1
Recovery scammers hit you when you’re down: Here’s how to avoid a second strike If you’ve been the victim of fraud, you’re likely already a lead on a ‘sucker list’ – and if you’re not careful, your ordeal may be about to get worse.
Navigating the Mythos-haunted world of platform security
MCP security: Logging and runtime security measures
Important: kea security update
Two different attackers poisoned popular open source tools – and showed us the future of supply chain compromise
Several vulnerabilities were discovered in the inetutils implementation of telnetd and telnet, which may result in privilege escalation or information disclosure. CVE-2026-28372 Ron Ben Yizhak from SafeBreach found that the fix for CVE-2026-24061 was
Hungarian government creds left in the safe hands of ‘FrankLampard’
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code. For Debian 11 bullseye, these problems have been fixed in version 140.9.1esr-1~deb11u1.
https://security-tracker.debian.org/tracker/DSA-6206-1
Swift for Visual Studio Code comes to Open VSX Registry
https://security-tracker.debian.org/tracker/DSA-6204-1