April 25, 2026
Backport security patches from OpenSSL 3.5.6
April 25, 2026
CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and
April 25, 2026
Fix CVE-2026-35535
April 25, 2026
Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100
April 25, 2026
Fix CVE-2026-40192.
April 25, 2026
Update to 147.0.7727.101 Critical CVE-2026-6296: Heap buffer overflow in ANGLE Critical CVE-2026-6297: Use after free in Proxy Critical CVE-2026-6298: Heap buffer overflow in Skia Critical CVE-2026-6299: Use after free in Prerender
April 25, 2026
Germany’s sovereign AI hope changes hands
April 24, 2026
GopherWhisper: A burrow full of malware
ESET Research has discovered a new China-aligned APT group that we’ve named GopherWhisper, which targets Mongolian governmental institutions
April 24, 2026
More ancient Linux device support faces the chop
April 24, 2026
Several security issues were fixed in GStreamer Bad Plugins.
April 24, 2026
Why world models are AI’s next frontier
April 24, 2026
Where to begin a cloud career
April 24, 2026
An update that solves 10 vulnerabilities, contains one feature and has one security fix can now be installed.
April 24, 2026
An update that solves nine vulnerabilities, contains one feature and has one security fix can now be installed.
April 24, 2026
An update that solves one vulnerability can now be installed.
April 24, 2026
An update that solves two vulnerabilities can now be installed.
April 24, 2026
An update that solves two vulnerabilities can now be installed.
April 24, 2026
https://security-tracker.debian.org/tracker/DSA-6229-1
April 24, 2026
Several security issues were fixed in league/commonmark.
April 23, 2026
Slurm could be made to send data to an arbitrary unix socket on the host.
April 23, 2026
An update that solves one vulnerability can now be installed.
April 23, 2026
An update that solves one vulnerability can now be installed.
April 23, 2026
An update that solves six vulnerabilities and has one security fix can now be installed.
April 23, 2026
An update that solves six vulnerabilities and has one security fix can now be installed.
April 23, 2026
Sharing isn’t caring if it’s an admin password
April 23, 2026
How open source ideals must expand for AI
April 23, 2026
Is your Node.js project really secure?
April 23, 2026
Pass the key, passwords have passed their sell-by date
April 23, 2026
New NGate variant hides in a trojanized NFC payment app
ESET researchers discover another iteration of NGate malware, this time possibly developed with the assistance of AI
April 22, 2026
PackageKit could be made to install packages as the administrator.
April 22, 2026
Several security issues were fixed in strongSwan.
April 22, 2026
Multiple security issues were discovered in cpp-httplib, a C++ cross platform HTTP/HTTPS library, which could result in denial of service. For the stable distribution (trixie), these problems have been fixed in version 0.18.7-1+deb13u1. We recommend that you upgrade your cpp-httplib packages.
April 22, 2026
Maik Schaefer discovered that a TOCTOU race condition in PackageKit (a package management service over a DBus interface) could result in local privilege escalation. For Debian 11 bullseye, this problem has been fixed in version 1.2.2-2+deb11u1.
April 22, 2026
Multiple vulnerabilities were fixed in strongSwan, an IKE/IPsec suite. CVE-2026-35328 A vulnerability in libtls related to the processing of the supported_versions extension in TLS that can result in an infinite loop.
April 22, 2026
An update that solves one vulnerability can now be installed.
April 22, 2026
Lateral Movement Detection Strategies for Linux Systems
April 22, 2026
AI is upending the SaaS game
April 22, 2026
https://security-tracker.debian.org/tracker/DSA-6228-1
April 22, 2026
https://security-tracker.debian.org/tracker/DSA-6227-1
April 22, 2026
https://security-tracker.debian.org/tracker/DSA-6226-1
April 22, 2026
https://security-tracker.debian.org/tracker/DSA-6225-1
April 22, 2026
https://security-tracker.debian.org/tracker/DSA-6224-1
April 22, 2026
https://security-tracker.debian.org/tracker/DSA-6223-1
April 22, 2026
More Cisco SD-WAN bugs battered in attacks
April 21, 2026
What the ransom note won’t say
An attack is what you see, but a business operation is what you’re up against
April 21, 2026
Snowflake offers help to users and builders of AI agents
April 21, 2026
Andrew Nesbitt discovered that .install file directives were insufficiently restricted in OPAM, a package manager for OCaml. This could result in directory traversal out of the package area. For Debian 11 bullseye, this problem has been fixed in version 2.0.8-1+deb11u1.
April 21, 2026
Yarden Porat found a heap-based buffer overwrite in MuPDF, a lightweight PDF viewer, which may result in denial of service or the execution of arbitrary code if malformed documents are opened. For Debian 11 bullseye, this problem has been fixed in version 1.17.0+ds1-2+deb11u2.
April 21, 2026
The cookbook for safe, powerful agents
April 21, 2026