October 29, 2026
DSA-6592-1 chromium – security update
DSA-6591-1 openjdk-25 – security update
October 29, 2026
DSA-6590-1 firefox-esr – security update
October 29, 2026
Lessons from Cybersecurity Black Week
A critical PHP flaw, leaked Linux kernel reports, a poisoned LiteLLM release, and more, all in seven days. Which threats called for immediate action, and [...]
October 29, 2026
ESET APT Activity Report Q2 2026–Q3 2026
An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q2 2026 and Q3 2026
October 29, 2026
Belgium’s tax agency confirms cyberattack, pulls services offline
Belgium’s finance and tax agency has pulled “several” digital services offline after a cyberattack on the organization. FOD Financiën [...]
October 29, 2026
Shortlist of age checks for the UK’s under-16 social media ban is out, ‘some’ adults will need verifying
The UK’s comms watchdog has put forward four methods of checking netizens aren’t kids – dubbed highly effective age assurance (HEAA) – as it prepares [...]
October 29, 2026
Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour
EXCLUSIVE Researchers identified at least 83 attacks against 61 public GitHub repositories, including popular open source projects such as Google [...]
October 29, 2026
Securing the enterprise software supply chain in the AI era
Across Europe, the Middle East, and Africa (EMEA), enterprise IT is undergoing a fundamental shift. Artificial intelligence (AI) is no longer restricted to [...]
October 29, 2026
AlmaLinux 10 Emacs Update Addresses Code Execution on File Open
October 29, 2026
AlmaLinux 10 libX11 Fixes Malicious X Server Buffer Overflow
October 29, 2026
AlmaLinux 10 libXtst Update Fixes DoS in the RECORD Parser
October 29, 2026
AlmaLinux 10 Kernel Updates Fix 16 Security Vulnerabilities
October 29, 2026
AlmaLinux xdg-dbus-proxy Update Fixes a Sandbox Escape Vulnerability
October 29, 2026
Admin dropped the F-bomb in a password to show hackers who was really 1337
Welcome back to PWNED, in which The Reg offers cautionary tales from folks who’ve left their doors wide open to attackers and lived to tell the tale. This [...]
October 29, 2026
Simplifying .NET toolchain installs with dotnetup
If you’ve experimented with Rust, you already know how simple it is to get a basic toolchain in place, with the simple rustup command-line tool. The same [...]
October 29, 2026
Mageia Python 3.13.17 Update Fixes TLS and Archive Issues
October 29, 2026
Debian Chromium Fixes Code Execution and Disclosure Issues
October 29, 2026
Fedora 43 librabbitmq Fix for AMQP Heap Buffer Over-Read
October 29, 2026
Fedora 44 python-pillow Update Fixes MSP Decoder DoS Vulnerability
October 29, 2026
Fedora 44 Unbound 1.26.2 Fixes DNS Resolver Security Threats
October 29, 2026
Fedora 44 Libreswan Fixes IPsec Denial of Service and Memory Errors
October 29, 2026
Fedora 44 librabbitmq 0.18.1 Fixes AMQP Message Parsing Error
October 29, 2026
DSA-6595-1 tor – security update
October 29, 2026
DSA-6594-1 python-git – security update
October 29, 2026
DSA-6593-1 imagemagick – security update
October 29, 2026
Oracle Linux 10 libXtst Update Fixes RECORD Parser Denial-of-Service
October 28, 2026
Oracle libX11 Update Fixes a Heap Buffer Overflow in X11 Libraries
October 28, 2026
Oracle Yggdrasil Update Addresses Three Reported Issues
October 28, 2026
Oracle libXi Update Addresses Three Input Handling Issues
October 28, 2026
Oracle libXrender Important Heap Overflow Fix ELSA-2026-91003
October 28, 2026
Oracle Thunderbird 153.5.0 Important Fix for CVE-2026-45186
October 28, 2026
Oracle Emacs 29.4 Important Fixes for Code Execution and Injection
October 28, 2026
Oracle Linux 9 cjose Update Fixes AES Key Unwrap Buffer Overflow
October 28, 2026
Oracle Buildah 1.43.4 Fixes Denial-of-Service and File-Write Issues
October 28, 2026
Oracle Linux 9 Kernel Update Fixes Multiple Security Issues
October 28, 2026
Oracle Linux 9 Podman Important Update Addresses Three CVEs
October 28, 2026
Oracle libXtst Update Addresses a RECORD Parser DoS Vulnerability
October 28, 2026
Oracle Linux 8 libXi Update Addresses Three CVEs and Security Risks
October 28, 2026
Oracle Linux 8 Thunderbird 140.17.0 Important Security Update
October 28, 2026
Oracle Emacs Update Fixes Handling of Untrusted Content
October 28, 2026
Oracle Python urllib3 Important Chunk Parser Denial of Service
October 28, 2026
Oracle Linux 8 Container Tools Update for CVE-2026 Issues
October 28, 2026
Oracle LibreOffice 7.1.8.1 Fixes Buffer Overflows and Code Execution
October 28, 2026
Oracle Linux 8 Kernel Fixes for Multiple Security Issues
October 28, 2026
Oracle Kernel Update Addresses Heap Overflow and Other Issues
October 28, 2026
Next-gen privacy protocols: WireGuard vs OpenVPN vs Shadowsocks
October 28, 2026
Mageia 10 urpmi Fixes Kernel Cleanup and Upgrade Issues
October 28, 2026
Seccomp Flaw Lets Programs Bypass Some Linux Restrictions
A program could get past some Linux security rules by changing the number it sends with a request.
October 28, 2026
Debian OpenJDK-25 Update Fixes Sandbox and Certificate Issues
October 28, 2026
Brotli Flaw Is Being Used in Attacks
Attackers are exploiting a flaw in Brotli, Google’s software for unpacking compressed data.
October 28, 2026
DSA-6585-2 thunderbird – regression update
October 28, 2026
DSA-6589-1 php-mongodb – security update
October 28, 2026
DSA-6588-1 openjdk-21 – security update
October 28, 2026
DSA-6587-1 pdns – security update
October 28, 2026
Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble
Attackers are probing a critical Oracle E-Business Suite vulnerability that can lead to remote code execution (RCE), despite Oracle issuing a patch earlier [...]
October 28, 2026
Debian Firefox ESR Update Addresses Multiple Security Issues
October 28, 2026
From Rules to AI and Back
October 28, 2026
openSUSE Tumbleweed DPDK Fixes Address 14 Security Issues
October 28, 2026
openSUSE Tumbleweed curl Update Addresses 23 Security Issues
October 28, 2026
openSUSE Tumbleweed Chromedriver Update Fixes 37 Security Issues
October 28, 2026
openSUSE Tumbleweed zbar Update Fixes Two Denial-of-Service Flaws
October 28, 2026
openSUSE CoreDNS Update Addresses Remote Service Disruption
October 28, 2026
openSUSE Poppler Update Addresses CVE-2026-107705 Security Flaw
October 28, 2026
openSUSE Codex Update Fixes Three Remote Service Disruptions
October 28, 2026
openSUSE Tumbleweed nginx 1.31.7 Fixes Five Security Issues
October 28, 2026
openSUSE Tumbleweed libsndfile Update Fixes Local Audio DoS
October 28, 2026
Mageia fio Update Fixes Job File Crash and Improves Reliability
October 28, 2026
Mageia 10 mgaonline Fixes Wayland Crash and Migration Issues
October 28, 2026
Mageia drakxtools Adds More Detailed System Memory Information
October 28, 2026
Scanner Poses as 32 AI Bots to Find Credentials and Private Keys
October 28, 2026
Serial ransomware crook gets 70 months behind bars for Nefilim, Hive roles
Ukrainian ransomware crook Artem Stryzhak has been sentenced to 70 months in the slammer by a New York federal court for his role as an affiliate of the [...]
October 28, 2026
Gheist turns GitHub Actions into a secret extraction service
A threat actor dubbed Gheist is turning compromised GitHub accounts into credential-harvesting platforms. By planting malicious GitHub Actions workflows in [...]
October 28, 2026
Cisco open sources tool for detecting AI agents on hacking sprees
Cisco has open sourced a behavior detection engine that watches AI agents, to help security teams prevent rogue agents from going off the rails like they [...]
October 28, 2026
123 Reg discloses ‘AI cyberattack’ on customer data, suspects China nexus
UK domain registrar 123 Reg (no relation – Ed) says it was the victim of an “AI-driven cyberattack” that exposed customer data. Customers began receiving [...]
October 28, 2026
Responsible disclosure in the age of Vulnpocalypse
New tools can find potential flaws faster than teams can assess and fix them. When a serious flaw is discovered, the central challenge is ensuring [...]
October 28, 2026
Top Free VPNs for Linux: Enhance Privacy and Bypass Restrictions
Linux is famous for its strong security. Yet, adding a Virtual Private Network (VPN) boosts privacy even more. A VPN encrypts connections and protects [...]
October 28, 2026
AI Alignment Failed When an Agent Targeted an Open-Source Project
An AI coding assistant tried to add harmful code to a real open-source project during a security test.
October 28, 2026
Fake US Court Notices Target 100,000+ Businesses With LodaRAT
October 28, 2026
Oracle adds native Snowflake service to OCI to ease data integration
Oracle on Tuesday said it has partnered with Snowflake to make the latter’s AI Data Cloud available as a native service on Oracle Cloud Infrastructure [...]
October 28, 2026
Eight reasons you are better than coding agents
Last week I wrote about how coding agents are better developers than humans. I’ll stand by that — the current agents can write code better, faster, longer, [...]
October 28, 2026
Six elements of resilient AI orchestration platforms
While many organizations are in early AI agent rollouts, research suggests that more will scale to greater numbers of agents and assistants in the coming [...]
October 28, 2026
Attackers compromised 42 GitHub repositories by using files too large to be searched
A security research firm reported Monday that it had identified breaches of 42 third-party GitHub repositories in which attackers had deployed payload [...]
October 28, 2026
Fedora 43 WebKitGTK Update Fixes Sandbox and Rendering Issues
October 28, 2026
Fedora 43 eog Update Fixes a PNG Heap Overflow Vulnerability
October 28, 2026