October 21, 2026
DSA-6572-1 ca-certificates – security update
LiteLLM supply chain attack hoovers up passwords and secrets
Unknown crims compromised LiteLLM’s release process on Wednesday, distributing a malicious version (1.107.0) containing malware designed to steal [...]
October 21, 2026
Signal bug could keep your mic – and camera – on after hangup
Make sure you don’t say anything mean or secret after hanging up a call on Signal, as a bug in the encrypted messaging app’s calling library could prevent [...]
October 21, 2026
Is the ad a scam? How to tell before you click
You can trust a social media platform and still get scammed by an ad running on it
October 21, 2026
PHP devs publish critical bug fix as site owners warned: Pull ’em offline if you’re unpatched
PHP developers have released emergency updates for two critical vulnerabilities after cybersecurity authorities warned organizations to patch immediately [...]
October 21, 2026
INC and The Gentlemen Ransomware Affiliates Expose 8,257 AI Messages
October 21, 2026
AI has ‘potential’ to turn script kiddies into sophisticated infrastructure attackers
When it comes to cyberattacks that shut down power grids, drinking-water systems, and other critical infrastructure, AI doesn’t – yet – turn script kiddies [...]
October 21, 2026
Nvidia picks OpenShell to tame AI gents
Nvidia has proposed a new way to keep corporate AI agents in line. Nvidia on Wednesday introduced its OpenShell Reference Architecture. Based on the [...]
October 21, 2026
Comparing Five Platforms for Continuous PCI Compliance in Linux
Maintaining PCI DSS compliance has gone from a sprint to a year-round marathon. Verizon’s 2022 Payment Security Report found only 43.4% of organizations [...]
October 21, 2026
What Is Tor Browser & How Does It Impact Linux Security Teams?
Tor Browser is a privacy-focused web browser that routes traffic through the Tor network to obscure a user’s identity and destination—and that design has [...]
October 21, 2026
Privilege Escalation: Five Linux Exploits Give Ordinary Users Root
Linux researcher Hyunwoo Kim has shown five ways to turn a limited account into root on tested Linux systems.
October 21, 2026
Zero-Day Vulnerability Gave Attackers Time to Plant Backdoors
Attackers broke into BeyondTrust Remote Support before a patch was ready, then left ways to return to the server.
October 21, 2026
AI Code Review Produces 28 Accepted Security Findings in Apache Camel
An artificial intelligence (AI) scanner helped find 28 security flaws in Apache Camel that led to fixes.
October 21, 2026
EU wants Booking.com to check out of its scam problem
The European Commission has opened an investigation under the Digital Services Act into whether Booking.com is doing enough to stop fraudsters running [...]
October 21, 2026
Using model routing to lower inference costs
Running frontier models for coding and other purposes can be very expensive, but also, sometimes, very effective. It’s tempting to use smaller or older [...]
October 21, 2026
How AI is changing software pricing
In 2026, the AI monetization conversation has shifted quickly from one concern to the next. Early in the year, fears that AI agents would erode software [...]
October 21, 2026
Eight reasons coding agents are better than software developers
I can’t stop anthropomorphizing my coding agent. I use both Claude Code and Cursor, and whenever I talk about these tools, I always refer to them as “he”, [...]
October 21, 2026
US bans DeepSeek across federal agencies, putting AI supply chains under scrutiny
DeepSeek has been dealt a huge blow in the US, even as it continues to innovate and keep pace with, or in some cases outperform, rival models from American [...]
October 21, 2026
DSA-6574-1 php8.4 – security update
October 21, 2026
DSA-6573-1 firefox-esr – security update
October 21, 2026
Indian certification authority eMudhra’s private keys compromised – one of them was the number ‘4’
Tragically simple private keys used by a certification authority based in India have been compromised, meaning the 60-million-plus certs it has issued [...]
October 20, 2026
Auto tech startup claims it traced hack attempt back to rival’s IP address
An automotive tech startup claims that its IT systems were attacked by individuals trying to steal its driving model, and that those attacks came from an [...]
October 20, 2026
Multi-Cloud Blind Spots Are Leaving Security Teams Exposed
October 20, 2026
Live Video Moderation Challenges Traditional Content Safety Systems
October 20, 2026
Palo Alto’s firewall OS has been under attack from multiple ransomware groups since June
Multiple ransomware groups, including Qilin and Inc, have been exploiting a high-severity authentication bypass bug in Palo Alto Networks’ PAN-OS, [...]
October 20, 2026
BAE Systems Cyber Incident Disrupts US Bankruptcy Notices
October 20, 2026
openSUSE Podman 4.9.5 Rebuilt Against Current Go Security Release
October 20, 2026
SUSE Linux Enterprise 15 SP5 Kernel Live Patch 34 Fixes Four Issues
October 20, 2026
SUSE Linux Micro 6.2 p11-kit Update Fixes RPC Parsing Issues
October 20, 2026
SUSE Linux Micro 6.2 Fixes 81 NVIDIA Driver Security Flaws
October 20, 2026
Swamped curl maintainers take low-level flaws public to survive vulnerability ‘avalanche’
An “avalanche of vulnerability reports” is forcing curl to move lower-severity cases into public view, reserving private handling for high and [...]
October 20, 2026
Ubuntu Refreshes CA Certificates Across Supported Releases
October 20, 2026
Rocky Linux 10 Xwayland Fixes Code Execution and Escalation
October 20, 2026
Rocky Linux 10 OpenEXR Update Addresses EXR File Threats
October 20, 2026
Rocky Linux 10 Emacs Update Fixes Image and TRAMP Exploits
October 20, 2026
Rocky Linux 10 Wireshark Update Fixes DoS and Buffer Overflows
October 20, 2026
Rocky Linux 10 perl-URI Update Fixes Hostname Encoding Bypass
October 20, 2026
Rocky Linux 10 glibc Fixes DoS and Heap Overflow Issues
October 20, 2026
Rocky Linux 10 urllib3 Fixes DoS and HTTPS Proxy Security Risks
October 20, 2026
Rocky Linux 10 MariaDB 11.8 Update Fixes PCRE2 Memory Corruption
October 20, 2026
Rocky Linux 9 environment-modules Fixes Bash Completion Injection
October 20, 2026
Rocky Linux 9 webkit2gtk3 Fixes Critical ANGLE Code Execution
October 20, 2026
Rocky Linux 9 xorg-x11-server Update Blocks Code Execution Risks
October 20, 2026
Rocky Linux 9 Xwayland Fixes Code Execution and Escalation
October 20, 2026
Rocky Linux 9 cockpit-files Fixes Symlink Ownership Flaws
October 20, 2026
Rocky Linux perl-URI Fixes the Hostname Encoding Bypass
October 20, 2026
Rocky Linux 9 PostgreSQL 18 Fixes pgvector Code Execution
October 20, 2026
Rocky Linux 9 RESTEasy Fixes Image DoS and Origin Issues
October 20, 2026
Rocky Linux 9 Fixes urllib3 Memory and Proxy Security Risks
October 20, 2026
Rocky Linux 9 Emacs Fixes the Flymake Code Execution Issue
October 20, 2026
openSUSE Hashcat Important Fixes for Three Security Flaws
October 20, 2026
openSUSE python-joserfc Fixes Critical JWS Signature Bypass
October 20, 2026
CoreDNS Update Stops HTTP/2 Heap Exhaustion on openSUSE Leap 16.0
October 20, 2026
openSUSE Leap 16.0 gh Update Fixes File Write and HTTP/2 Risks
October 20, 2026
openSUSE tinyproxy Critical HTTP Header Fixes 2026-22133-1
October 20, 2026
openSUSE Leap 16.0 Varnish Update Fixes Request Smuggling
October 20, 2026
grok-build Update Resolves Pack Parsing DoS on openSUSE Leap 16.0
October 20, 2026
openSUSE libxls Update Fixes Memory Issues and Parser Errors
October 20, 2026
openSUSE Leap 16.0 PuTTY Update Fixes Remote Attack Vulnerabilities
October 20, 2026
openSUSE gitoxide Update Blocks Control Bytes, Advisory 2026-22126-1
October 20, 2026
openSUSE Tumbleweed cpp15 Update Addresses CVE-2026-102010
October 20, 2026
openSUSE BCEL Update Fixes Two Security Issues and Improves Security
October 20, 2026
openSUSE Aspell Update Fixes Three Local Security Issues
October 20, 2026
ImageMagick 7.1.2.32 Fixes 22 Issues on openSUSE Tumbleweed
October 20, 2026
openSUSE JupyterLab Templates Update Fixes CVE-2026-103923
October 20, 2026
openSUSE Tumbleweed Traefik Update Fixes Five Security Issues
October 20, 2026
Xreader 4.6.9 Fix for openSUSE Tumbleweed – Update and Repair Guide
October 20, 2026
openSUSE Tumbleweed Kernel-devel Update Fixes 389 Issues
October 20, 2026
openSUSE Tumbleweed inspektor-gadget 0.57.0-1.1 Fixes Remote DoS
October 20, 2026
openSUSE Tumbleweed glibc Update Fixes Three Security Issues
October 20, 2026
Ubuntu Squid Update Fixes HTTP and Cache Issues on Ubuntu Systems
October 20, 2026
‘Password1’ and a forgotten test account land Welsh outfits in hot water
A test account protected by “Password1” helped an intruder steal personal data relating to 3,300 people, mostly children, in a ransomware [...]
October 20, 2026
Bullhorn sees red after cyberattack knocks recruitment platform offline
Bullhorn is the latest tech giant finding itself on the wrong end of a cyberattack, forcing the recruitment software provider to shut down its platform [...]
October 20, 2026
Samsung Black Friday 2026: Galaxy Offers to Look Out For
October 20, 2026
Whitehall shuts the front door on digital ID but leaves the back open
Britain’s national digital ID scheme may be dead, but Whitehall appears to have forgotten to tell the infrastructure. Despite the government [...]
October 20, 2026
Oracle Linux 9 kernel Important Security Advisory ELSA-2026-83156
October 20, 2026
Oracle Linux 8 kernel Important Security Update ELSA-2026-500398
October 20, 2026
Oracle Linux 7 Kernel Important Security Advisories ELSA-2026-500397
October 20, 2026
Oracle Linux 9 ELSA-2026-500399 Kernel Important Update
October 20, 2026
Oracle Linux 8 Kernel Important Security Update ELSA-2026-500397
October 20, 2026
Oracle Linux Kernel Security Update ELSA-2026-500399 for CVEs issued
October 20, 2026
Oracle Linux 9 Kernel Important Security Fix ELSA-2026-500398
October 20, 2026
Oracle Linux 8 Kernel Important Bug Fix Advisory ELSA-2026-83157
October 20, 2026
Oracle Linux 8 Kernel Important Security Update ELSA-2026-82807
October 20, 2026
Oracle Linux 10 Advisory ELSA-2026-83207 Kernel Important Bug Fix
October 20, 2026
UK finance watchdog wants firms to report AI failures and close calls
The UK’s financial regulator says firms’ incident reporting must cover significant AI failures and near-misses as increasingly autonomous [...]
October 20, 2026
Enterprise AI needs more than an AI engineer
Anthropic has a $100 million plan to help enterprises get more from AI. No, it doesn’t involve agents. It involves people. Lots of people. How retro. On [...]
October 20, 2026