Menu

Latest articles

AI Sandbox Flaws Put Server Files at Risk
Flaws in two open-source AI platforms could let code reach files outside the space meant to contain it.
openSUSE Hauler Update Stops Crafted Zstd Frames Crashing Decoders
openSUSE go-containerregistry Update Fixes Three DoS Issues
openSUSE perl-MIME-tools Update Addresses Parsing and DoS Risks
openSUSE Leap 16.0 rqlite Update Fixes Access and Crash Risks
openSUSE gh Update Addresses HTTP/2 CPU Exhaustion With Security Fixes
Critical gRPC Fixes for warewulf4 on openSUSE Leap 16.0
openSUSE Leap 16.0 libosmocore Fixes Four Memory Errors
openSUSE python-pypdf Update Fixes Seven Denial-of-Service Issues
openSUSE cadvisor Update Fixes Zstandard and HTTP/2 Issues
LibreOffice 26.8.1.1 Fixes Eight Issues on openSUSE Leap 16.0
openSUSE Chromium 156.0.8078.79 Resolves 21 Security Issues
openSUSE Brotli Update Stops Remote Code Execution Vulnerability
openSUSE Node.js 22 Update Fixes Brotli Remote Code Execution
Fedora Chromium Update Fixes Memory and Input Handling Flaws
Fedora 43 AGS Update Fixes the FreeType Denial-of-Service Vulnerability
Fedora 43 Apptainer Update Includes a Go Fix and Improvements
Fedora 43 Fractal Update Addresses Certificate Validation Bypass
Fedora selenium-manager Rebuilt with Updated Rust TLS Libraries
Fedora 43 Python 3.9 Update Fixes HTML Parser CPU Denial of Service
Fedora rubygem-gist 6.1.0 Corrects TLS Certificate Verification Checks
Fedora Chromium Update Fixes 21 Critical Browser Security Flaws
Fedora 44 Python Documentation Updated to Version 3.14.10
Fedora 44 Python 3.14.10 Fixes Tar and Certificate Issues
Fedora 44 AGS Update Fixes FreeType Denial-of-Service Vulnerability
Fedora 44 rust-qemu-rdp Rebuild Blocks eMudhra CA Trust
Fedora 44 Rebuild Updates rust-app-store-connect Dependencies
Fedora 44 mingw-qt6-qt5compat Fixes Qt QBinaryJson DoS Vulnerability
Fedora 44 Selenium Manager 4.34.0 Gets Updated Rustls Libraries
Fedora 44 mingw-harfbuzz 14.6.0 Fixes Crafted Font Write
Python 3.9 Continues to Receive Security Updates in Fedora 44
Fedora rubygem-gist 6.1.0 Fixes TLS Certificate Verification Checks
Fedora 44 mingw-qt5-qtwebkit Fixes Brotli Decoder Write
Apptainer 1.5.5 Update for Fedora 44 – Release and Installation Guide
SUSE 15 SP7 Xen Update Fixes Grant Copy Read and Write Flaws
SUSE rsyslog Update Fixes Critical Path Handling Vulnerability
SUSE parted 3.1 Fixes FAT32 and FAT16 Heap Overflow Vulnerabilities
SUSE Kernel Live Patch 87 Fixes Five Security Issues and Vulnerabilities
Chainlit: What It Does and Why Its Retirement Matters
Chainlit helps developers turn an AI model into a chat app, but it no longer receives security updates.
Fedora 45 Chromium Update Fixes 21 Browser Security Issues
Fedora 45 python-mistune Update Addresses Markdown Threats
Fedora rust-redlib Rebuild Adds Protection Against eMudhra CA Trust
Fedora AGS Update Fixes FreeType Denial-of-Service Vulnerability
Fedora 45 rust-qemu-rdp Update Adds eMudhra Certificate Protection
Fedora 45 Qt6 Windows Component Fixes Address QBinaryJson DoS
Fedora 45 Rebuild Updates rust-app-store-connect Rust Dependencies
Fedora 45 Fractal 14.3 Update Fixes Certificate Validation Bypass
Fedora 45 Updates Selenium Manager and Rust TLS Libraries
Fedora 45 Python 3.9 Fixes HTML Parser Denial-of-Service Vulnerability
Fedora 45 rubygem-gist Fixes TLS Certificate Verification Checks
Fedora 45 QtWebKit Receives a Fix for Its Brotli Decoder
Apache Arrow: What It Does and Who Needs the Update
Apache Arrow gives data tools a shared way to organize information.
DSA-6605-1 chromium – security update
DSA-6604-1 incus – security update
DSA-6603-1 git-annex – security update
openSUSE Backports SLE-15-SP7 cadvisor Fixes Integer Overflow
Ubuntu PCRE2 Fixes Code Execution and Denial-of-Service Vulnerabilities
Ubuntu Rack Update Fixes Parsing and Data Exposure Issues
Ubuntu Yaws Fixes XML Injection and Remote Command Execution
Ubuntu SOGo Update Blocks Remote Account Takeover Vulnerabilities
Ubuntu libvips Fixes Image Parsing and Integer Overflow Issues
Ubuntu 16.04 jabberd2 Fixes for the SASL Authentication Bypass
Ubuntu Shapelib Fixes Double-Free and Denial-of-Service Risks
Ubuntu Sprockets Update Blocks Unauthorized Remote File Access
Ubuntu rxvt-unicode Fixes Crafted Terminal Input Code Execution
Ubuntu 22.04 LTS Relax-and-Recover Blocks Local Data Exposure
Ubuntu Net–EasyTCP Update Addresses Predictable Encryption Keys
Ubuntu libuser fixes passwd file corruption and local privilege escalation
Ubuntu Gin CORS Fix for Remote Origin Restriction Bypass
When confusion reigns, trusted vendors must guide their SMB customers
SMBs need guided onboarding and supervised protection to optimize their investments
Password manager mSecure tells users to change passwords, won’t say why
Password manager mSecure has warned customers to change their passwords, reset two-factor authentication, and potentially remove their passkeys after [...]
Snowflake launches Business Ontology to boost AI agent reliability
Snowflake is hoping to improve the reliability of AI agents with a new tool called Business Ontology, as part of its Horizon Catalog, meant for data [...]
Britain on notice: AI-powered ransomware attacks to arrive by 2028
The UK’s National Cyber Security Centre (NCSC) says AI-powered malware is “highly likely” to be a part of a future ransomware attack on [...]
What to Know Before Getting a Crypto Debit Card
Cursor Distributed Claude Code Extensions With SSH Backdoor Code
How good is your cloud exit strategy?
Most enterprises went into cloud computing with the idea that flexibility was part of the deal. Move faster. Scale on demand. Pay for what you use. Avoid [...]
Influencing the agents
Ever since Stephen O’Grady’s The New Kingmakers, we’ve all been trying to figure out how to appeal to developers. Now we’re going to have to figure out how [...]
Before you buy an AI agent, make it pass an exit test
I recently moved my own setup from one coding agent to another. It took about 10 minutes and I thought it went well. The first agent had a lot to carry. [...]
Cogent Security Makes the Fortune Cyber 60 for a Second Year, With a Plan to Run Cyber Defense Like a Factory
DSA-6606-1 squid – security update
A Chmod Calculator That Makes Linux Permissions Clearer
David Goguen’s free chmod calculator shows what Linux permission numbers mean before you copy a command.
Max-severity bug in widely used OT programming tool exploited to deliver Linux malware
Unknown criminals are exploiting a maximum-severity vulnerability in Node-RED, a flow-based programming tool that is widely used in critical [...]
SUSE Java Libraries Fix Certificate Checks in known_hosts
SUSE gcc48 Fixes Use-After-Free Issues in the Priority Queue
SUSE Linux Enterprise 15 SP7 Kernel Live Patch 13 Fixes
openSUSE Kernel Live Patch Fixes 12 Security Issues and Vulnerabilities
SUSE Kernel Live Patch 82 Fixes Eight Identified Issues
SUSE Enterprise 15 SP7 Kernel RT Live Patch Fixes Nine Issues
SUSE Kernel RT Live Patch 16 Fixes 11 Security Vulnerabilities
DSA-6601-1 eog – security update
Debian Incus Fixes Authorization Bypass and Privilege Escalation
Debian git-annex Fixes Cross-Repository Data Exfiltration
How to Keep Your Voice Recordings Private on iPhone 
Cops bust botnet of 1.3M infected Android TV boxes
A coalition of private-sector security firms working with Japan’s National Police Agency has disrupted XCPE, a backdoor used to build a massive botnet [...]
SUSE suseconnect-ng Update for Go Security Release – Security Fixes
openSUSE suseconnect-ng Recompiled with the Latest Go Security Release
SUSE Linux Enterprise 15 SP6 Kernel Live Patch 18 Fixes 11 Issues
openSUSE Leap 15.6 Kernel Patch Resolves 11 Security Issues
SUSE Linux Enterprise 12 SP5 Kernel Live Patch 80 Fixes
SUSE 15 SP4 Kernel Live Patch 47 Addresses Seven Issues