Menu



Monthly Archives: September 2026

Someone’s attacking a critical 0-day RCE in F5 BIG-IP APM
F5 has fixed a critical zero-day bug in its BIG-IP Access Policy Manager (APM) that unknown miscreants are exploiting to remotely execute malicious code. [...]
September 23, 2026
JetBrains unveils JetBrains Air for agentic software development
JetBrains on September 22 announced JetBrains Air, an open system of products for managing AI-powered software development workflows across developers, [...]
September 23, 2026
Looking for free Robux? Here’s what’s real, and what’s a scam
Fake giveaways, free Robux generators and lookalike login pages all target the same thing – your Roblox account
September 23, 2026
OpenAI, Anthropic cut AI model costs as price-performance race intensifies
Enterprises can now buy frontier AI for far less per token after OpenAI and Anthropic cut prices on their newest models on Tuesday. OpenAI released GPT-6 [...]
September 23, 2026
GitHub App keys can still enable takeovers long after they are forgotten
GitHub allows organizations to install GitHub Apps that automate and extend certain functionality on the platform and have access to selected repositories [...]
September 23, 2026
Academic publisher Elsevier hit by LAPSUS$ redirect attack
Academic publishing giant Elsevier confirmed a compromise this week after students found its platform redirecting users to a cybercriminal crew’s [...]
September 23, 2026
Closing the observability gap for the AI-ready enterprise
The modern enterprise is a digital enterprise. From the back office to the factory floor, connected systems and digital services form the operational [...]
September 23, 2026
Microsoft Disrupts AI-Powered EvilTokens Service Linked to 12,000 Hacked Inboxes
September 23, 2026
British regulator takes a hard look at Pornhub’s Apple-powered age checks
Ofcom has opened an investigation into whether Pornhub’s Apple-based age checks are effective enough to keep children away from its adult content. [...]
September 23, 2026
Software dependencies are running away from us
You may very well have a big problem and you don’t even know it.  Do you have complete control over the dependencies of your application? I’m guessing that [...]
September 23, 2026
Get started with htmx 4
htmx is a simple way to add rich interactivity to web pages without writing JavaScript. On an htmx-powered page, you can imbue buttons, form elements, [...]
September 23, 2026
Why security belongs in the network
Every attack leaves a trail across the network, from initial reconnaissance to lateral movement and data exfiltration. That makes the network one of an [...]
September 23, 2026
Oracle Linux 7 389-ds-base Important Security Updates ELSA-2026-55758
September 23, 2026
Oracle Linux Firefox Important Remote Access Vulnern ELSA-2026-54248
September 23, 2026
Debian LTS DLA-4791-1 memcached Buffer Overflow and Timing Attacks
September 23, 2026
Visual Studio Code 1.138 brings agent sessions to Dev Containers
Visual Studio Code 1.380, the latest update to Microsoft’s open-source code editor, introduces three new features for AI-powered coding: agent sessions in [...]
September 23, 2026
Mageia perl-Dancer2 Vulnerable Session IDs Detected CVE-2026-13577
September 23, 2026
Mageia 10 9 Security Update PKCE Weak Random Number Issue CVE-2026-16615
September 23, 2026
Mageia 10 9 Important GNU cpio Path Traversal Memory Issues 2026-0435
September 23, 2026
Mageia diffutils Critical Heap Overflow Vulnern 2026-0434
September 23, 2026
Mageia Twinkle Bugfix Advisory for the Year 2026 and Update 0130
September 23, 2026
Why Seccomp Must Be Rechecked After Container Restore
Seccomp limits which Linux system calls a process can make.
September 23, 2026
How Container Restore Can Reopen Privilege Escalation Paths
Privilege escalation in a container does not always begin with a new exploit.
September 23, 2026
What CRIU Restores Beyond Application Memory in Linux Containers
Linux containers can be paused, checkpointed, and rebuilt later with CRIU.
September 23, 2026
Fedora 44 Chromium Buffer Overflow Race Condition Fix 2026-f910229c11
September 23, 2026
Fedora 44 Kernel Significant Patches Upgrade 2026-ca91e91bf0
September 23, 2026
Fedora 44 dotnet8.0 Severe Batch of CVEs Update 2026-0fa8c76e88
September 23, 2026
Fedora 44 dotnet10.0 Critical Multiple Threat Fixes 2026-a5c27e8727
September 23, 2026
Fedora 44 dotnet9.0 Critical SDK Updates CVE-2026-58649, CVE-2026-69304
September 23, 2026
Fedora 44 FreeIPMI Important Updates for CVE-2026-33554 2026-febfd10293
September 23, 2026
Fedora 44 postgresql16-anonymizer Major Arbitrary Execution CVE-2026-19633
September 23, 2026
Fedora 44 perl-Net-DNS 1.57 Denial of Service Fix Advisory 2026-57f107ed83
September 23, 2026
Fedora cyrus-imapd Security Advisory CVE-2026-47087 CVE-2026-47088
September 23, 2026
Why Container Security Needs a Separate Restore Boundary
A container normally starts under the security rules of the system receiving it.
September 23, 2026
Fedora 43 dotnet 8.0.131 Critical Update CVE-2026-58649 and More
September 23, 2026
Fedora 43 Dotnet 9.0 Update Addresses CVE-2026-58649 and More Issues
September 23, 2026
Fedora 43 dotnet10.0 Important SDK Runtime Update for CVEs 2026-04a0116777
September 23, 2026
Fedora 43 perl-Net-DNS CVE-2026-81928 Denial of Service Advisory
September 23, 2026
Fedora 43 Cyrus IMAP Update Security Advisory 2026-97a7ec5786
September 23, 2026
CRI-O Restore Flaw Can Bypass Kubernetes Security Policies
Kubernetes groups one or more containers into a pod, the basic unit it deploys.
September 23, 2026
SUSE Kernel Update 2026-4284-1 Important Security Issues Addressed
September 23, 2026
SUSE Bind Important Remote Denial of Service Fix SUSE-SU-2026-4285-1
September 23, 2026
SUSE Amazon SSM Agent Important Fix Denial of Service Vuln 2026-4286-1
September 23, 2026
SUSE openssl-certs Moderate Update Advisory 2026-4287-1
September 23, 2026
openSUSE php-composer2 Moderate Path Traversal Flaw Fix 2026-4288-1
September 23, 2026
SUSE php-composer2 Moderate Path Traversal Issues Fix 2026-4288-1
September 23, 2026
PH4NTXM Linux Builds a Disposable Identity at Every Boot
A live Linux distribution runs from removable media, usually a USB drive, without requiring a permanent installation.
September 23, 2026
Fedora 45 Kernel 7.2.7 Important System Update Advisory 2026-4c098c462e
September 23, 2026
Fedora 45 libxmp Medium Buffer Overflow Fix 2026-743387fdbe
September 23, 2026
Fedora 45 dotnet10.0 Critical SDK Runtime Update Advisory 2026-fa6de37202
September 23, 2026
Fedora 45 PostgreSQL 16 Anonymizer SQL Injection Vulnerabilities Found
September 23, 2026
Fedora 45 Cyrus IMAP Important Security Advisory 2026-3bf3e31ef4
September 23, 2026
DSA-6510-1 xdg-dbus-proxy – security update
September 23, 2026
Rocky Linux 9 webkit2gtk3 Important Security Update RLSA-2026-69098
September 22, 2026
Rocky Linux 9 curl Important Unauthorized Access Issue RLSA-2026-69126
September 22, 2026
Rocky Linux gstreamer1-plugins-base Security Issues Report RLSA-2026-69100
September 22, 2026
Rocky Linux RLSA-2026-69914 PostgreSQL Important SQL Injection Issues
September 22, 2026
Rocky Linux Sudo Important Policy Bypass Security Update RLSA-2026-69123
September 22, 2026
Rocky Linux osbuild-composer Security Advisory on XSS DoS Vulnerabilities
September 22, 2026
Rocky Linux OpenSSH Key Vulnerability Leads to SSH Protocol Security Bypass
September 22, 2026
Rocky Linux PostgreSQL Important Arbitrary Execution Issues RLSA-2026-69923
September 22, 2026
Rocky Linux PostgreSQL Important Execution Issues Advisory RLSA-2026-69876
September 22, 2026
Windows CLOSEDQUORUM malware uses AI models to autonomously select post-compromise actions
A new Windows malware called CLOSEDQUORUM can query up to four LLM providers – Google Gemini, DeepSeek, Qwen, and Mistral – to autonomously [...]
September 22, 2026
ShinyHunters Hacks FBI Jobs Portal, Claims It Stole Agents’ Data
September 22, 2026
SUSE Freeipmi Key Buffer Overflow Denial of Service Vulnern 2026-4277-1
September 22, 2026
SUSE libtpms Moderate Heap Overflow Parameter Issues Advisory 2026-4278-1
September 22, 2026
SUSE Linux Enterprise Micro Important Kernel Update Vuln 2026-4279-1
September 22, 2026
SUSE perl-Authen-SASL Important Replay Attack Issue Advisory 2026-4280-1
September 22, 2026
SUSE 15 SP7 CUPS Moderate Heap Overflow CVE-2026-87875 Advisory 2026-4281-1
September 22, 2026
SUSE php-composer2 Critical Credential Leak and Code Exec Patch 2026-4283-1
September 22, 2026
AWS launches CloudWatch Omni to unify observability for AI agents and applications
As enterprises continue to move AI agents and agentic applications into production, AWS says traditional observability and monitoring tools — including its [...]
September 22, 2026
Ubuntu 26.04 Sudo Important Command Bypass Risk CVE-2026-82474 USN-8803-1
September 22, 2026
ShinyHunters claims FBI hack: ‘This is NOT financially motivated’
ShinyHunters claims it hacked the FBI and stole more than 2 TB of employee data – and this time it’s personal. The gang wants the Feds to correct the [...]
September 22, 2026
RatHat Android Malware Uses AI to Target Banking Credentials in Real Time
September 22, 2026
Ubuntu 20.04 OpenSSH Critical Arbitrary Code Execution DoS Flaw 2026-8804-1
September 22, 2026
The SMB cybersecurity squeeze: AI agents at work, old attacks in overdrive
As AI opens new paths to company data while making familiar attacks faster and cheaper, SMBs need protection designed around the time and expertise [...]
September 22, 2026
NightmareEclipse’s latest zero-day leaves Microsoft Defender stuck in the past
Serial Microsoft zero-day leaker NightmareEclipse has found another way to mess with Windows Defender, this time by stopping the antivirus from updating [...]
September 22, 2026
Z.ai says sorry for slurping up your code, open sources ZCode
Chinese AI giant Z.ai has apologized after developers caught it pulling a Grok, packaging up and uploading user workspaces to cloud storage. In a case [...]
September 22, 2026
MovieReaper Malware Uses The Odyssey Torrents to Infect Users Worldwide
September 22, 2026
UK cops arrest 2 EvilTokens suspects, Microsoft seizes 50 phishing kit websites
A coalition of law enforcement and private-sector tech companies led by Microsoft have disrupted the EvilTokens phishing service, arresting suspected [...]
September 22, 2026
Who signed off on that AI agent? Nobody? Thought so.
If you were in any doubt that AI agents are capable of complex autonomous work, that skepticism should have faded this summer. In July, news emerged that [...]
September 22, 2026
Z.ai disables coding assistant feature after flaw exposed enterprise code upload risk
Chinese artificial intelligence company Z.ai had to disable several features of its ZCode coding assistant this week after a default setting was caught [...]
September 22, 2026
China-Linked FamousSparrow Deploys SparroWocky Backdoor in Latin America
September 22, 2026
ClickFix Attacks Spread ChainScript RAT via Fake Spotify and Teams Installers
September 22, 2026
ShinyHunters Hacks and Defaces Clop Ransomware Leak Site
September 22, 2026
How to Comply with MiCA Regulations for Crypto Asset Service Providers in the European Market?
September 22, 2026
Aembit Launches Support for Okta Cross App Access, Extending Enterprise Identity Controls to AI Agents
September 22, 2026
New TASK#STOMP Windows Backdoor Enables Continuous Document Theft
September 22, 2026
The agent coordination protocol hiding in plain sight: GitHub issues
The agent harness I’m building, Bram, launches in a local git repository and requires that both git and gh (GitHub’s CLI) be installed. Agents can wield [...]
September 22, 2026
7 decisions that make an Azure landing zone enterprise-ready
As a designer of enterprise-scale Azure landing zones, I’ve found that drawing a landing zone is fairly easy. However, building one that engineering teams [...]
September 22, 2026
Fixing agent memory
Are we thinking about large language models all wrong? We keep expecting them to somehow be superhuman, yet they regularly reflect all-too-human [...]
September 22, 2026
The EU cloud sovereignty trap
The European Union is once again legislating sovereignty with its proposed Cloud and AI Development Act, or CADA. The legislation would establish a [...]
September 22, 2026
CISA Confirms Active Exploitation of Linux Kernel Crypto Flaw
CISA has added CVE-2025-39964, a flaw in the Linux kernel’s built-in cryptography interface, to its list of vulnerabilities being used in real attacks.
September 22, 2026
Researchers Show How Prompt Injection Could Expose AWS AgentCore Credentials
Security researchers have shown how hidden instructions in an AWS AgentCore support ticket could push an AI agent into running commands as root and [...]
September 22, 2026
crun Tightens GPU Security for Containers Running in MicroVMs
The crun container runtime has changed how GPU-enabled workloads launch a key graphics helper.
September 22, 2026
Linux Fixes Two Memory Safety Bugs in DMA Cleanup
Linux developers have fixed two memory-safety bugs in the subsystem that lets hardware move data without constant help from the CPU.
September 22, 2026
Linux Fixes Input Bugs That Could Leak Kernel Memory
Linux developers have fixed two input-system bugs that could expose small pieces of leftover kernel memory to a local program.
September 22, 2026
Fedora 43 perl-HTML-FormHandler Crucial Cross-Site Scripting Patch
September 22, 2026
Fedora 44 Lego 5.5.1 Update Security Advisory 2026-578a96e5f5
September 22, 2026
Fedora 44 znc-clientbuffer Important Buffer Overflow Fix 2026-855d5949d1
September 22, 2026