Menu

Latest articles

DSA-6619-1 spip – security update
Software Samaritan revamps borked Indian certs to block smart TV ads
eMudhra’s private key exposure has been a security disaster, but it also means that you can block those annoying ads on smart TVs if you’re so [...]
Microsoft Exchange Server 2016 and 2019 enter their ‘permanently vulnerable’ era
Microsoft has warned customers still clinging to Exchange Server 2016 and 2019 to consider the software “permanently vulnerable” as [...]
nDiligence Releases Four-Year Study Identifying a Critical Supply-Chain Vulnerability Across 50 Platform Types
Hackers exploiting ScreenConnect plugin flaw to spread malware across hundreds of PCs
Hackers have used a dodgy third-party ScreenConnect extension to push malware onto at least 288 machines across 48 organizations, prompting ConnectWise to [...]
AWS boosts Bedrock AgentCore runtime compute capacity to speed up AI agent development
AWS on Thursday said that it was upgrading the runtime layer of Amazon Bedrock AgentCore with greater compute capacity, more efficient memory utilization, [...]
European tech buyers add digital sovereignty to cyber shopping list
European tech buyers are increasingly choosing cybersecurity vendors from their own continent in a bid to reduce their reliance on American technology. [...]
Active FreeSWITCH Exploitation Puts Linux VoIP Servers at Risk
CISA added a FreeSWITCH flaw to its list of bugs used in attacks on November 9, 2026. Tracked as CVE-2026-116779, the bug lets an accepted chat message [...]
OpenShift 5 Security Changes Linux Teams Should Check Before Upgrading
An AI assistant that can explain a cluster problem may also have permission to change it.
Google’s Gemini Decisions API to handle up to 1,000 questions per request
Google has announced Gemini Decisions API, offering developers a way to handle routine decisions in AI applications without generating text responses, [...]
Debian Apache 2.4.71 Fixes Remote Code Execution and DoS
Ubuntu .NET Runtimes Updated Across Four Supported Releases
Mageia nginx 1.30.6 Fixes Five Issues Across Its Modules
Mageia chkconfig Update Fixes Listing With Leftover Config
Mageia MariaDB Update Fixes Crashes and Prevents Data Loss
Mageia Django Fixes Request Forgery and Data Exposure Issues
Mageia 10 vsftpd Startup Crash Fix – Troubleshooting Guide
Mageia 10 epour Update Fixes Startup Failure and Improves Reliability
Gentoo curl Security Advisory Addresses Multiple Security Flaws
Gentoo PCRE2 Flaws Could Enable Arbitrary Code Execution
Gentoo GLSA 202611-05 ImageMagick Code Execution Vulnerability Fix
Fedora 43 rsync Update Fixes Delta Transfer Denial of Service
Fedora 43 perl-HTTP-Parser-XS Fixes Encoded NUL Path Bypass
Fedora 43 php-getid3 Update Fixes QuickTime Memory Exhaustion
Fedora 43 Nokogiri 1.19.7 Fixes Multiple Security Issues
Fedora python-crate-ingredients Gets Updated Root Trust
Fedora 43 Java Runtime Receives the October CPU Security Update
Fedora 43 OpenJDK 25 Receives the October Java CPU Security Update
Debian LTS aodh Fixes OpenStack Telemetry Data Exposure
Fedora 43 pipx Update Addresses 24 Security Vulnerabilities
Fedora python-pillow Fixes Buffer Overflows and Image Decoder DoS
Fedora 43 tpm2-tss Update Fixes Issues in the TPM Stack
Fedora 43 perl-libnet 3.16 Fixes Unbounded Net–Cmd Buffering
Fedora 43 libsoup3 Fixes WebSocket and HTTP Security Flaws
Debian LTS watcher update addresses information disclosure
Debian LTS Octavia Fixes Disclosure and Authorization Flaws
Debian LTS dnspython Update Addresses Denial of Service
Firefox 160.0 Arrives in Fedora 44
Gentoo libheif Update Addresses Multiple Security Issues
Multiple vulnerabilities have been found in libheif, the worst of which could result in arbitrary code execution.
London hotel put admin login for booking website on whiteboard behind the front desk
Welcome, once again, to PWNED, where all the victims are self-owned. This week, we welcome you to a London hotel where you could check out its admin [...]
The sketch Qwen refused to write: How abliteration restores local AI control
As consumer-grade hardware makes hosting local AI practical for both developers and enterprises, many are discovering that popular open-weight models come [...]
Exploring Microsoft’s AI foundation models
When Microsoft started to deploy AI models in what is now its Foundry platform, it was building on its partnership with OpenAI. OpenAI was able to use [...]
GhostMap Android Flaw Can Leave Phones Stuck in Crash Loop
Disgraced former CA eMudhra blames buggy script for hopelessly weak certificates
Former certification authority eMudhra has claimed a buggy Python script is the main reason it issued laughably insecure digital certificates. The company [...]
Fedora 44 fixes HTTP parser path truncation in perl-HTTP-Parser-XS
Fedora 44 udns 0.7 Fixes Crafted DNS Reply Buffer Overflow
Fedora php-getid3 1.9.28 Fixes QuickTime Memory Exhaustion
Fedora 44 Updates Nokogiri to Address Security Vulnerabilities
Fedora 44 OpenJDK 25 October Java CPU Update and Security Patches
SUSE psqlODBC Fixes Buffer Overflows and Addresses SQL Injection
SUSE psqlODBC 2026-5192-1 Fixes Buffer Overflows and SQL Injection
SUSE skopeo update fixes DoS and archive extraction issues
SUSE Pillow Update Addresses 34 Critical Security Issues
SUSE aliyun-cli Update Stops Decoder Crashes and DoS Attacks
SUSE OpenSSL 1.1.1d Important Update for DTLS and Timing Issues
SUSE OpenSSL Update Addresses DTLS and Timing Issues Across Systems
SUSE OpenSSL Livepatches Fix the Stale DTLS Buffer Offset Issue
SUSE BCEL 6.13.0 Fixes Stored XSS and Parser Recursion Issues
SUSE DPDK Update Addresses 14 Memory and Buffer Security Flaws
SUSE containerd Update 2026-5201-1 Fixes Five DoS Risks
SUSE distribution-registry Fixes Nine Security Vulnerabilities
SUSE Alloy Fixes Denial-of-Service and Authorization Issues
SUSE python-M2Crypto Resolves SSL Hostname Injection Vulnerability
SUSE OpenSSL Update Fixes DTLS and Timing Side-Channel Issues
SUSE OpenSSL Update Fixes DTLS and Timing Issues Across Systems
SUSE OpenSSL Live Patches Fix the DTLS Handshake Issue Quickly
SUSE openssl-1_1-livepatches Fixes DTLS Stale Buffer Issue
SUSE OpenSSL Fixes DTLS and Memory Security Flaws with Security Updates
SUSE OpenVPN Fix for Authenticated Certificate Impersonation
SUSE Linux Enterprise 16.0 Kernel Fixes 1,356 Security Issues
FreeRDP 3.33.1 Adds XDG Authentication Support on Fedora 45
Firefox 160.0 Arrives in Fedora 45 with New Features and Improvements
Fedora Xwayland 24.1.15 Fixes Seven Security Vulnerabilities
Fedora 45 perl-HTTP-Parser-XS Fixes Encoded NUL Path Truncation
Fedora 45 Python 3.9 Update Now Uses System Certificates
Fedora 45 udns 0.7 Fixes Crafted DNS Reply Heap Overflow
Fedora 45 Robot Framework Update Fixes Handlebars Injection
Fedora 45 php-getid3 Update Addresses QuickTime Memory Exhaustion
Fedora Epiphany 51.2 Fixes TLS and Permission Security Flaws
SUSE Important aliyun-cli Fixes Crafted Zstd Frame Crash
SUSE PCRE2 Important JIT Out of Bounds Write Vulnerability
SUSE 16.0 python-Pillow Update Fixes 39 Image Processing Issues
SUSE zchunk update fixes crash caused by a crafted file
SUSE rust-keylime Update Addresses Five Zip Security Issues
SUSE python-urllib3_1 Update Addresses HTTPS Proxy and DoS Risks
How to Clone a Git Repository Safely After Git’s Security Fix
Clone safely after the Git security fix with a patched Git client, verify the project’s source, and use git clone without –recurse-submodules to [...]
How Ubuntu 26.10 Checks Revoked Certificates in curl – A Closer Look
A certificate authority (CA) verifies a name or identity and then signs a digital certificate linking it to a public key.
Smashing Security podcast #492: How hackers turned Russian cars into pumpkins
Slackware 15.0 httpd 2.4.71 Fixes RCE and Memory Errors
Slackware Git Packages Updated to Fix Security Issues and Vulnerabilities
Slackware TigerVNC Update Fixes X.Org Errors and Related Issues
DSA-6622-1 firefox-esr – security update
DSA-6621-1 thunderbird – security update
DSA-6620-1 apache2 – security update
Update Chrome on Linux After an Actively Exploited XML Flaw Has Been Reported by Google
To update Chrome on Linux, use the package manager (e.g., apt, dnf, zypper) to update the Google Chrome package.
Oracle Node.js 22.23.2 Fixes Brotli Decoder Write Error
Oracle Linux 8 Vim Update Fixes NetRW Script Injection Vulnerability
Oracle libimobiledevice Fixes Double-Free Denial-of-Service Vulnerability
Oracle util-linux Important Fixes for Partition and Mount Issues
Oracle Go Toolset and Delve Updates for CVE-2026-111943