Menu

Latest articles

Insignary Releases Free Insignary-Chk Tool to Detect PHP2Shell and Node2Shell Exposure
Why Lightwell pairs dependency backports with upstream collaboration
Enterprise applications rarely break because of custom business logic; instead, the issue is often related to changes in underlying open source [...]
Open Source vs Commercial Email Security: Operational Choices and Risks
Email still looks like plumbing until it becomes the incident timeline, which is why the enterprise email security decision tends to surface only after [...]
WordPress Vulnerability Lets Attackers Strike During Updates
A WordPress vulnerability is being used in attacks that target the moment a site updates its main software.
Xen Hypervisor Flaws Can Expose a Server’s Memory
Two flaws in the Xen hypervisor can let a malicious virtual machine reach memory that belongs to other parts of the same computer. That includes the [...]
CISA Warns Hackers Are Exploiting 18-Year-Old WordPress Core Vulnerability
Fedora 43 Updates rust-zstd0.13 for zstd Crate Safety Issues
Fedora rust-zstd-safe 8.2.0 Addresses Crate Security Issues
Fedora 43 Updates rust-zstd-sys to Address zstd Safety Issues
Fedora 43 rust-zstd-safe7 Updates Address zstd Crate Issues
Fedora 43 rust-zstd 0.14.3 Addresses Crate Security Issues
Fedora 43 Tor Update Brings the Latest Upstream Release
Fedora 43 Scribus 1.6.7 Blocks Code Execution in Crafted Files
Fedora Tailscale Update Fixes SSH Attacks and Service Disruption
Fedora ProFTPD 1.3.9e Addresses Security Attacks on FTP
Fedora 43 Hatch Update Blocks Compromised Certificate Authorities
Fedora 43 Updates python-mistune Against Markdown Attacks
Fedora perl-Plack Update Fixes Large Content-Length Crash
Fedora 43 Starman Update Blocks DoS and HTTP Response Flaws
Fedora perl-HTTP-Headers-ActionPack 0.10 Stops CPU Exhaustion
Fedora 43 perl-MIME-tools Update Addresses Parsing and DoS Risks
Fedora 44 Updates rust-zstd-safe7 for zstd Crate Safety
Fedora 44 Updates rust-zstd-sys to Address zstd Crate Issues
Fedora 44 rust-zstd 0.14.3 Fixes Issues in the zstd Crate
Fedora rust-zstd 0.13 Updates Address Rust Crate Issues
Fedora rust-zstd-safe Update Addresses zstd Binding Issues
Fedora goose 1.45.0 Fixes Terminal History and Environment Leak
Fedora Tor Update Brings the Latest Upstream Release to Users
Fedora 44 Scribus Update Addresses Malicious File Imports
Fedora 44 Tailscale Update Fixes SSH Attacks and Service Disruption
Fedora 44 ProFTPD 1.3.9e Fixes DoS and FTP Authorization Bypass
Fedora python-mistune 3.3.4 Addresses Markdown Security Attacks
Fedora 44 Hatch Update for Managing Python Interpreters
Fedora perl-Plack Fixes Server Crash from Large Content-Length
Fedora 44 fixes Accept-Language DoS in perl-HTTP-Headers-ActionPack
Fedora Starman Update Stops HTTP Request and Response Attacks
Fedora 44 perl-MIME-tools Update Addresses MIME Parsing Risks
Fedora 45 rust-num-modular Update Adds Crypto Crate Improvements
Fedora 45 Updates Rust num-bigint and Cryptography Crates
Fedora rust-num-modular0.6 Update Adds Rust Crate Improvements
Fedora rust-num-prime Update Adds Crypto Crate Improvements
Fedora 45 rust-zmij Update Improves Constant-Time Cryptography
Fedora 45 Updates Rust num-bigint and Related Crypto Crates
Fedora 45 Updates rust-ctutils and Related Rust Crypto Crates
Fedora 45 Updates for Rust-Based Elliptic Curve Cryptography
Fedora 45 Updates rust-crypto-bigint and Cryptography Crates
Fedora 45 Updates rust-zstd-sys to Improve zstd Crate Safety
Fedora rust-zstd-safe 8.2.0 Addresses Risks in the zstd Crate
Fedora rust-zstd Update Resolves Rust Crate Safety Issues
Fedora 45 Updates rust-zstd-safe7 for zstd Crate Issues
Fedora 45 rust-zstd0.13 Update Fixes zstd Crate Security Issues
Fedora 45 FreeRDP 3.33.0 Adds Updated Remote Desktop Clients
Fedora 45 Fixes Command Injection Vulnerability in the gpsprof Command
Fedora 45 Updates ruby-build to Version 20261023 with the Latest Changes
Fedora Goose Update Fixes Terminal Shell History Leak and Improves Security
Slackware OpenSSH Update Fixes the sshd Password Bypass
APT Package Swap Fix for Debian and Ubuntu-Based Linux Systems
A flaw in APT, the tool that installs software on Debian and Ubuntu, could let an attacker replace a package after it passed a security check.
Rails Fixes Show Where Web Application Security Can Fail
Rails, a software framework used to build websites, has fixed flaws that could let an uploaded file do more than its owner intended.
How Governments Detect VPN Traffic, and Why Encryption Alone Doesn’t Hide It
DSA-6612-1 symfony – security update
DSA-6611-1 imagemagick – security update
DSA-6610-1 xen – security update
DSA-6609-1 trapperkeeper-authorization-clojure – security update
DSA-6608-1 puppet-agent – security update
DSA-6607-1 apt – security update
October crypto-tracker hack: Access cracked, law enforcement tokens packed
Blockchain analysis outfit Chainalysis has confirmed that when attackers broke into its systems in October, they managed to grab usernames, password [...]
Hackers Tamper With Refrigeration Controls at France’s National Blood Service
OpenAI releases GPT-6 Cyber, and promises this one stays within ‘rules of engagement’
OpenAI, on Thursday, released its latest cybersecurity-tuned model, GPT-6 Cyber, which the House of Altman says combines “stronger cybersecurity [...]
SlippyNunchucks hijacks Sogou Input Method’s brand promotion mechanism to distribute malware
ESET Research analyzes a DNS hijacking operation abusing insecure HTTP communications in Windows versions of Sogou Input Method
Tobacco company got smoked by leaving secret recipes on a file share
Welcome once again to PWNED, where all of the security victims are self-owned. Today, we celebrate a company that makes a supremely unhealthy product [...]
OpenMatter Network Positions Decentralized Computing as an Alternative to Data Centers for AI
Anthropic won’t fix a Claude Dispatch flaw that could let attackers execute remote commands across corporate boundaries
A vulnerability in Anthropic’s Claude products lets any browser extension that can control Claude Dispatch make Claude Desktop run code on the computer – [...]
New York’s Queens Public Library battles ransomware crims: Wi-Fi, checkouts, and website go dark
New York City’s Queens Public Library (QPL) is battling a ransomware attack, it confirmed on Wednesday evening via social media and to patrons [...]
Beyond Cold Storage: Why Hardware Wallets Need Open Source and Clear Signing
Norway’s aid agency pwned and all users’ data is stolen
Norway’s national aid agency, Norad, has confirmed that cyber criminals broke into its systems, stealing information about each and every registered [...]
Moving Lightwell patches into production by orchestrating the release lifecycle
In this article:Vulnerability remediation requires more than just merging code: While opening a pull request (PR) updates a dependency, that’s not [...]
Future-proofing enterprise AI: The impact of post-quantum cryptography on Red Hat AI Enterprise
We are rapidly approaching an intersection of 2 generational technology shifts: The explosive adoption of generative artificial intelligence (AI), and the [...]
Sovereignty in the AI era: Choice, control, and autonomy
For the past few years, AI felt like a high-stakes exhibition game. Teams across every industry were on the pitch experimenting with large language models, [...]
Fake ChatGPT and Claude Apps Use Signed Executables to Install Yoba Malware
Meta acquires Conductor as AI coding shifts toward multi-agent development
Meta has acquired AI coding startup Conductor, gaining technology that coordinates work across competing AI coding agents as it seeks a bigger role in [...]
AlmaLinux 8 Expat Update Addresses DoS and Data Exposure Risks
AlmaLinux 8 libXtst Update Fixes a DoS in the RECORD Parser
Rocky Linux 9 libXi Update Blocks X11 Code Execution Risks
Rocky Linux 9 Thunderbird 153.5.0 Important Security Fixes
Rocky Linux 10 util-linux fixes mount and partition risks
Rocky Linux 10 PipeWire Fixes Pulse Server Stack Overflow
Rocky Linux 10 Podman Update Addresses OCI Archive File Writes
Rocky Linux 10 Kernel Fixes for Network and Memory Issues
Rocky Linux 10 libXi Update Fixes Device Reply Code Execution
Rocky Linux 10 OpenTelemetry Collector Gets Important Fixes
The Smartest Part of a Home Camera Is Moving Off the Cloud
Why enterprise AI needs unified metadata infrastructure
Enterprise AI has produced a lot of noise about models, GPUs, vector databases, and agent frameworks. Those conversations matter. But the shift that will [...]
Your LLM writes good SQL. That’s not the same as safe SQL
A few years into working with data, I’ve learned that the hardest part of an AI system is rarely the model. Usually it’s the question of who gets to ask [...]
Smashing Security podcast #491: How AI agents are spooking the banks
Apple turns iCloud into spy cloud, will start looking at public share links
If you share content using public iCloud links, Apple could soon be looking over your shoulder and checking for “harmful content.” The iBiz [...]
Debian Xen Update Addresses Escalation and Data Exposure
Debian Trapperkeeper Authorization Fixes Host ACL Checks
Debian Puppet Agent Update Blocks Server Code Execution
Fake GTA VI Download Sites Push Malware Ahead of Launch
Gorbag: Orcs at the border harvesting intelligence from Ukraine
ESET researchers uncover Gorbag, a Russia-aligned group using simple infostealers to harvest data from Ukrainian organizations near the front line