October 28, 2026
DSA-6585-2 thunderbird – regression update
DSA-6589-1 php-mongodb – security update
October 28, 2026
DSA-6588-1 openjdk-21 – security update
October 28, 2026
DSA-6587-1 pdns – security update
October 28, 2026
Serial ransomware crook gets 70 months behind bars for Nefilim, Hive roles
Ukrainian ransomware crook Artem Stryzhak has been sentenced to 70 months in the slammer by a New York federal court for his role as an affiliate of the [...]
October 28, 2026
Gheist turns GitHub Actions into a secret extraction service
A threat actor dubbed Gheist is turning compromised GitHub accounts into credential-harvesting platforms. By planting malicious GitHub Actions workflows in [...]
October 28, 2026
Cisco open sources tool for detecting AI agents on hacking sprees
Cisco has open sourced a behavior detection engine that watches AI agents, to help security teams prevent rogue agents from going off the rails like they [...]
October 28, 2026
123 Reg discloses ‘AI cyberattack’ on customer data, suspects China nexus
UK domain registrar 123 Reg (no relation – Ed) says it was the victim of an “AI-driven cyberattack” that exposed customer data. Customers began receiving [...]
October 28, 2026
Responsible disclosure in the age of Vulnpocalypse
New tools can find potential flaws faster than teams can assess and fix them. When a serious flaw is discovered, the central challenge is ensuring [...]
October 28, 2026
Top Free VPNs for Linux: Enhance Privacy and Bypass Restrictions
Linux is famous for its strong security. Yet, adding a Virtual Private Network (VPN) boosts privacy even more. A VPN encrypts connections and protects [...]
October 28, 2026
AI Alignment Failed When an Agent Targeted an Open-Source Project
An AI coding assistant tried to add harmful code to a real open-source project during a security test.
October 28, 2026
Fake US Court Notices Target 100,000+ Businesses With LodaRAT
October 28, 2026
Oracle adds native Snowflake service to OCI to ease data integration
Oracle on Tuesday said it has partnered with Snowflake to make the latter’s AI Data Cloud available as a native service on Oracle Cloud Infrastructure [...]
October 28, 2026
Eight reasons you are better than coding agents
Last week I wrote about how coding agents are better developers than humans. I’ll stand by that — the current agents can write code better, faster, longer, [...]
October 28, 2026
Six elements of resilient AI orchestration platforms
While many organizations are in early AI agent rollouts, research suggests that more will scale to greater numbers of agents and assistants in the coming [...]
October 28, 2026
Attackers compromised 42 GitHub repositories by using files too large to be searched
A security research firm reported Monday that it had identified breaches of 42 third-party GitHub repositories in which attackers had deployed payload [...]
October 28, 2026
Fedora 43 WebKitGTK Update Fixes Sandbox and Rendering Issues
October 28, 2026
Fedora 43 eog Update Fixes a PNG Heap Overflow Vulnerability
October 28, 2026
Fedora Chromium Update Addresses 353 Browser Security Flaws
October 28, 2026
Fedora 43 OpenSSH Fixes Oversized Packet Denial of Service
October 28, 2026
Fedora util-linux 2.41.6 Fixes Mount and Descriptor Issues
October 28, 2026
Fedora 43 perl-DBI Fixes Crashes and Prevents Memory Corruption
October 28, 2026
Fedora 43 rust-onefetch Rebuilt Using faster-hex 0.10.1
October 28, 2026
Fedora 43 libinstpatch Update Fixes SoundFont Denial-of-Service
October 28, 2026
Fedora 43 Updates stargz-snapshotter for Two Security Fixes
October 28, 2026
Fedora Ghostscript Update Fixes Three Memory Safety Flaws
October 28, 2026
Fedora 44 Kernel 7.2.13 Update With Important Tree Fixes
October 28, 2026
Fedora 44 Python 3.12 Update Addresses Tar and SSL Risks
October 28, 2026
Fedora 44 Brotli Decoder Out-of-Bounds Write Vulnerability Fix
October 28, 2026
Fedora 44 Brotli 1.2.1 Resolves the Decoder Write Issue
October 28, 2026
Fedora clevis 24 Addresses PKCS#11 Exposure and Key Injection
October 28, 2026
Fedora 44 util-linux Fixes libmount and unshare Issues for Users
October 28, 2026
Fedora 44 mingw-freetype 2.14.3 Fixes a CID Font DoS Vulnerability
October 28, 2026
Fedora 44 perl-DBI Update Fixes Crashes and Memory Issues
October 28, 2026
Fedora 44 Updates GStreamer Good Plugins to Version 1.28.8
October 28, 2026
Fedora 44 Updates Its GStreamer Plugins to Version 1.28.8
October 28, 2026
Fedora 44 mingw-gstreamer1 Update Addresses Media Flaws
October 28, 2026
Fedora GStreamer Base Plugins Updated to Version 1.28.8
October 28, 2026
Fedora 44 Rebuilds rust-onefetch to Resolve the faster-hex Issue
October 28, 2026
Fedora 44 Updates stargz-snapshotter 0.19.0 for Two CVEs
October 28, 2026
Mageia perl-Text-CSV_XS Update Addresses Multiple Parsing Issues
October 28, 2026
Mageia 10 Arrow Package Security Fixes – MGASA-2026-0562
October 28, 2026
Godot Vulnerability Could Let a Language File Run Code in a Game
A Godot vulnerability could let an attacker hide code in a language file and make a game run it on a player’s computer.
October 28, 2026
MCP Security Flaw in Google Toolbox Could Expose Server Files
An MCP security flaw in Google’s open-source Toolbox for Databases could let an attacker copy files off the server running it or replace files on [...]
October 28, 2026
Slackware Updates proftpd Against SSH Compression Attack
October 28, 2026
Oracle Linux 10 Brotli Update Fixes Decoder Write Issues
October 27, 2026
Oracle xdg-dbus-proxy Fixes the Message Filtering Bypass
October 27, 2026
Oracle Linux 9 Kernel Update Fixes XFS and Network Issues
October 27, 2026
Oracle Brotli Update Fixes an Out of Bounds Decoder Write
October 27, 2026
Oracle Linux 8 libreswan Update Addresses Three IPsec Issues
October 27, 2026
Oracle Linux 8 Kernel Update Fixes Multiple System Flaws
October 27, 2026
Oracle Linux 8 Node.js Update Fixes Brotli Decoder Error
October 27, 2026
Debian BIND9 Updates Address Denial of Service and Cache Poisoning
October 27, 2026
DSA-6585-1 thunderbird – security update
October 27, 2026
DSA-6584-1 varnish – security update
October 27, 2026
Mageia 10 WeeChat Update for Relay Security Issues Resolved
October 27, 2026
Debian Trixie php-mongodb Denial of Service Fixes and Updates
October 27, 2026
Debian OpenJDK 21 Update Addresses Multiple Java Runtime Risks
October 27, 2026
AI ‘hacker’ finds 4 severe bugs in popular industrial control software in under 4 hours
An autonomous AI agent discovered four vulnerabilities in the decades-old, widely used EPICS (Experimental Physics and Industrial Control System) open [...]
October 27, 2026
PHP2Shell: What to know about two critical PHP flaws
Here’s the lowdown on CVE-2026-109618 and CVE-2026-109619, as well as what website owners and IT teams should do to stay safe – all in a little more [...]
October 27, 2026
Day 2 of canceled classes at University of New Mexico after Health Sciences Center cyberattack
The University of New Mexico is canceling classes across the medicine, nursing, and pharmacy faculties for a second day amid continued efforts to recover [...]
October 27, 2026
Python jettisons the native JIT, at least for now
The experimental just-in-time compiler, or JIT, for CPython will be removed after its maintainers missed deadlines for its formalization set by the Python [...]
October 27, 2026
CISA confirms PHP2Shell under attack as researchers clock successful exploits
The US government’s cybersecurity watchdog has confirmed attackers are exploiting both critical PHP2Shell vulnerabilities, giving federal agencies [...]
October 27, 2026
Hackers Abuse Microsoft Teams External Chats to Access Corporate PCs
October 27, 2026
Oracle Linux 8 Kernel Update Fixes KVM Issue and Improves Stability
October 27, 2026
Oracle Linux 8 Node.js 24.21 Fixes Brotli Decoder Write
October 27, 2026
Microsoft releases out-of-band Windows fixes with certificate updates
Microsoft has released another out-of-band update for Windows, but this one isn’t an emergency fix for the latest breakages. This time, it’s [...]
October 27, 2026
OpenAI bets on AI economics with lower-cost GPT-6.1 Terra
OpenAI has launched GPT-6.1 Terra, a new reasoning model that it says delivers near-frontier performance on visual reasoning, professional task execution, [...]
October 27, 2026
Attack on email hosting provider for German far right party AfD exposed 345k accounts
The cyberattack on Alternative for Germany (AfD), the country’s most prominent far-right political party, exposed hundreds of thousands of confidential [...]
October 27, 2026
Oracle Linux 10 gcc-toolset-15 Fixes the libstdc++ Issue
October 27, 2026
Oracle Linux 10 Firefox 153.5.0 Update and Security Fixes
October 27, 2026
Oracle Linux 9 urllib3 Fixes HTTPS Interception and DoS
October 27, 2026
Oracle Linux 9 Skopeo Update Addresses Three Security Issues
October 27, 2026
Oracle Linux 9 Node.js 24.21.0 Important Brotli Decoder Fix
October 27, 2026
Alibaba AI model tried to send data to Beijing server, Cohere says
An Alibaba AI model generated an unexpected command to upload data to a Beijing-region cloud storage service during a cybersecurity evaluation, rival [...]
October 27, 2026
Oracle pushes AI deeper into enterprise workflows with Fusion Companion
Oracle is adding a new orchestration layer to its Fusion Cloud Applications suite to help enterprises automate business workflows, coordinate AI agents, [...]
October 27, 2026
Digital sovereignty as a design requirement
Digital sovereignty has moved from a policy discussion to a practical enterprise cloud computing problem. For years, most organizations treated public [...]
October 27, 2026
Robot eyeballs make open source more valuable
“Bug-free, secure code is now attainable” is a nice idea. It just happens to be wrong. That ambitious statement was one of more than 80 replies to Eric [...]
October 27, 2026
When GraphQL earns its place in an enterprise application, and when it doesn’t
The value of GraphQL emerges for a specific type of enterprise screen, one that brings together highly interdependent data across multiple sources. In all [...]
October 27, 2026
Japanese virtual desktop cloud hacked so hard it asks to be banned
Japanese ISP GMO Internet has warned customers the cloudy desktop service it offers as an ideal foreign exchange trading environment was compromised by an [...]
October 27, 2026
DSA-6586-1 valkey – security update
October 27, 2026
Worm armed 42 GitHub repos by hiding a payload too big to fail
A new Miasma-family npm worm, originally believed to be just a test with no victims, secretly armed 42 real GitHub repositories from 11 owners, hijacking [...]
October 26, 2026
Alibaba’s Qwen AI caught trying to contact server in China
Open-weight models from China have become very popular, but they’ve also raised some security suspicions. Cohere, a Canada-based biz that offers AI [...]
October 26, 2026
LiteLLM supply chain attack started with an exposed master key
LiteLLM has traced last week’s supply chain attack to a master key it accidentally committed to a public GitHub repository in May. The cloud and AI model [...]
October 26, 2026
12,976 Refrigeration Controls Found Exposed Online in 99 Countries
October 26, 2026
Microsoft releases emergency .NET security fixes for Google Brotli bug
To address a vulnerability in Google’s Brotli compression technology that could allow attackers to corrupt process memory, Microsoft is urging .NET [...]
October 26, 2026
Ubuntu nginx Fixes Remote Code Execution and SSL Bypass
October 26, 2026
openSUSE Backports SLE-15-SP7 Fixes Social Auth Account Risks
October 26, 2026
openSUSE python-nltk Update Addresses Eight Security Issues
October 26, 2026