October 2, 2026
DSA-6537-1 libpng1.6 – security update
DSA-6536-1 thunderbird – security update
October 2, 2026
DSA-6535-1 chromium – security update
October 2, 2026
DSA-6534-1 webkit2gtk – security update
October 2, 2026
OpenAI alerts 100+ orgs that its ‘misaligned models’ attempted to break in – or worse
OpenAI’s agents have repeatedly strayed beyond their intended scope. Two separate reports detail the activity, including one from Sam Altman’s [...]
October 2, 2026
Californian accused of shipping $300M worth of Nvidia chips to China without Uncle Sam’s approval
A California business owner was arrested on Thursday after being charged with allegedly smuggling Nvidia hardware to China without the proper export [...]
October 2, 2026
OpenAI’s wandering AI agents earn it a California subpoena
California’s attorney general has subpoenaed OpenAI as the state investigates what happens when the AI lab’s models escape their testing [...]
October 2, 2026
IBM’s Bob wants to move in: Agent available for on-prem deployment
Bob, IBM’s agentic software development platform is now available to run on premises and in private clouds, sovereign clouds, and air-gapped environments [...]
October 2, 2026
Fortinet sounds the alarm over actively exploited FortiMail zero-day
Fortinet is warning customers to lock down FortiMail after attackers started exploiting a critical bug that lets them write files to vulnerable systems [...]
October 2, 2026
AI is less dangerous than humans
Over the past few weeks, people have been pushing a stack of reports at me as evidence that AI is dangerous to humanity. The OpenAI incident disclosures, [...]
October 2, 2026
AI could boost software engineer productivity by 32.6%
Tools such as Anthropic Claude Code or OpenAI Codex have changed the face of software development, and all the signs are that this investment is set to [...]
October 2, 2026
Fedora 44 sos CVE-2026-79655 Path Traversal Security Fix
October 2, 2026
Proposed Linux IPsec Fix Addresses IP-TFS Packet Cleanup Race
Linux developers have proposed an IPsec fix after reproducing a memory error in IP-TFS, a mode that groups and pads encrypted traffic to make traffic [...]
October 2, 2026
DSA-6540-1 radsecproxy – security update
October 2, 2026
DSA-6539-1 php-mongodb – security update
October 2, 2026
DSA-6538-1 redis – security update
October 2, 2026
Proposed Linux FastRPC Fix Addresses Shared-Buffer Cleanup Race
Linux developers have proposed a FastRPC fix for a race that can leave the kernel using memory after it has been released.
October 1, 2026
Proposed Linux QNX6 Fixes Address Filesystem Memory Errors
Linux developers have proposed six fixes for the driver that reads QNX6 filesystems, a disk format associated with the QNX operating system.
October 1, 2026
LightLLM Profiling Flaw Allows Code Execution Without a Login
LightLLM, software used to serve AI models, can expose Linux AI servers to remote code execution when operators enable its profiling mode, a tool for [...]
October 1, 2026
ModSecurity Updates Fix WAF Bypasses on Linux Web Servers
ModSecurity has released fixes for a group of web application firewall (WAF) weaknesses that can let dangerous input reach Linux-hosted applications [...]
October 1, 2026
Rocky Linux 8 Kernel Moderate Security Update RLSA-2026-74133
October 1, 2026
AI agents hacked the hackers, stealing email addresses from security research org
AI agents hacked the hackers – the Dutch Institute for Vulnerability Disclosure (DIVD) – via two zero-day bugs in its Zammad support platform, [...]
October 1, 2026
SUSE rpcbind Important Denial of Service Vuln 2026-23946-1
October 1, 2026
SUSE Emacs Important Arbitrary Code Execution Vuln 2026-23949-1
October 1, 2026
SUSE glibc Important Buffer Overflow Threat Fix 2026-23957-1
October 1, 2026
SUSE Kernel Important Security Issues Fix Advisory 2026-23965-1
October 1, 2026
SUSE Kernel Important Security Fix Advisory 2026-23967-1
October 1, 2026
SUSE Linux Kernel Important Security Update 2026-23968-1
October 1, 2026
Microsoft, Google back Apache Ossie to make enterprise data and AI platforms more interoperable
Microsoft and Google are joining a project to create an open specification for exchanging semantic models across data, analytics, and AI platforms. The [...]
October 1, 2026
openSUSE Chromium Important Buffer Overflow Patch 2026-0343-1
October 1, 2026
EU’s hodgepodge tech policy exposes members to Chinese vendor risks, says think tank
Depending on Chinese technology for European infrastructure poses risks that not every country takes seriously. So says the Royal United Services Institute [...]
October 1, 2026
This month in security with Tony Anscombe – September 2026 edition
Autonomous AI agents go on a hacking spree, and Microsoft ships what used to be a year’s worth of security patches in one go – here’s how to [...]
October 1, 2026
Suspected Chinese spies spoofed an Anthropic exec, ex-White House official in AI phishing
A suspected Chinese espionage group impersonated AI policy figures, including a senior Anthropic employee and a former White House official, in phishing [...]
October 1, 2026
Rocky Linux 10 openssh Moderate Auth Delay Risk RLSA-2026-73954
October 1, 2026
Rocky Linux gvfs Important Buffer Overflow Risks RLSA-2026-73998
October 1, 2026
Rocky Linux Node.js 24 Important Security Fix RLSA-2026-73428
October 1, 2026
Microsoft catches hackers exploiting Zimbra bug before disclosure
Attackers were poking at a critical Zimbra mail server bug weeks before it was publicly disclosed, and then moved on to steal credentials, raid mailboxes, [...]
October 1, 2026
Why Mobile Device Management Needs Its Own Threat Model
October 1, 2026
MI5 warns UK academics their research may have helped Chinese spies
MI5 has warned that more than 100 UK-linked academics contributed to research projects allegedly funded to improve China’s spying capabilities. The [...]
October 1, 2026
Google makes Gemini 4 AI model available to a trusted few
Google has unveiled a new frontier AI model after months of delay. Gemini 4 Argon is designed to handle complex, long-horizon workloads spanning software [...]
October 1, 2026
CISO thought he had a ‘r3@lg00dp@$$w0rd’ but forgot to patch
Welcome back to PWNED, the weekly column where we warn you about weak security practices. This week’s terrifying tale involves a lack of important patching [...]
October 1, 2026
England’s schools are getting better at mopping up cyber incidents
England’s secondary schools are reporting slightly fewer cybersecurity incidents and faster recovery when disaster strikes, according to a survey by [...]
October 1, 2026
UK privacy watchdog starts over with new board and Manchester HQ
Britain’s data protection watchdog has acquired a new legal identity and governance structure, although the familiar ICO initials are staying put. On [...]
October 1, 2026
Ubuntu 20.04 LTS Kernel Security Issues with CVE-2025-38724
October 1, 2026
Ubuntu 20.04 LTS Linux Kernel Security Advisory USN-8850-1
October 1, 2026
Fewer women than ever in UK’s ‘old boys’ club’ cyber industry
The proportion of workers in the UK cybersecurity industry identifying as women has dropped to 16 percent, the lowest level since 2021. Gender diversity [...]
October 1, 2026
Microsoft doubles down on Rust
After many years of watching how Microsoft develops platforms and rolls out technologies to external users, one thing is clear: anything that is important [...]
October 1, 2026
The dream of enterprise semantics: Why this time is different
In most companies, the struggle to answer a new question fast has nothing to do with a lack of data. The problem is a lack of semantics. Or to put it [...]
October 1, 2026
OpenAI bets enterprises are ready to delegate real work to autonomous agents
OpenAI says true agentic AI has finally arrived, pushing beyond the trivial capabilities of early-stage virtual assistants. This week at OpenAI Dev Day, [...]
October 1, 2026
Irony alert: OpenAI whines that Chinese model stole its special IP that it stole from everybody else
OpenAI, which hoovered up vast amounts of internet content amid copyright fights, has accused individuals associated with China’s Moonshot AI of being [...]
September 30, 2026