October 23, 2026
SUSE Guava Update Fixes a Deserialization DoS Vulnerability
SUSE Amazon ECS Init Update Fixes Remote Denial-of-Service Issues
October 23, 2026
SUSE cyrus-sasl Fixes a Heap Overflow in the DIGEST-MD5 Client
October 23, 2026
SUSE 16.0 python-soupsieve Update Fixes Two DoS Vulnerabilities
October 23, 2026
SUSE coreutils 9.6 Fixes uniq Denial of Service and Data Disclosure
October 23, 2026
DSA-6581-1 unbound – security update
October 23, 2026
DSA-6580-1 erlang – security update
October 23, 2026
DSA-6579-1 roundcube – security update
October 23, 2026
AI Chatbot Privacy on Linux: Auditing Extensions, Desktop Clients, and Browser Policies
Ads in ChatGPT are chosen in part based on the conversation they appear under, and Meta now shapes the ads users see on Facebook and Instagram through [...]
October 22, 2026
Oracle PHP 8.3.36 Important Security Update and Patch Release
October 22, 2026
Oracle Linux 9 PHP 8.2.35 Important Security Update for Your Systems
October 22, 2026
Oracle Linux 9 OpenEXR Fixes Five Security Vulnerabilities
October 22, 2026
Oracle librsvg2 Update Fixes XML Entity Use-After-Free Vulnerability
October 22, 2026
Debian Trixie AIDE Update Blocks Malicious File Detection Bypass
October 22, 2026
DSA-6576-1 bind9 – security update
October 22, 2026
DSA-6575-1 nginx – security update
October 22, 2026
Critical PHP Vulnerabilities Let Attackers Run Code Without a Login
PHP has released emergency updates for two critical vulnerabilities that can let attackers run malicious code on a web server without logging in.
October 22, 2026
Ubuntu zlib Fixes Heap Overflow and Code Execution Vulnerabilities
October 22, 2026
New DNS Security Flaws Can Disrupt Website and Email Access
An online shop can be running normally while customers cannot reach it.
October 22, 2026
PHP2Shell exploit bypasses protections designed to stop remote code execution
Researchers have developed a new exploit that shows how even Address Space Layout Randomization (ASLR) on an x86-64 server cannot stop the PHP2Shell [...]
October 22, 2026
GitLab critical patches include one for a bug that allows code execution by unauthenticated users
GitLab on Wednesday published updated versions of its Community Edition (CE) and Enterprise Edition (EE) that address a dozen bugs and security issues, [...]
October 22, 2026
Paying in ADA: Cardano’s vision for the future of payroll
October 22, 2026
Max-severity GitLab bug allows remote code execution over 12 years of releases
GitLab on Wednesday patched a maximum-severity flaw that could allow unauthenticated attackers to execute arbitrary code on self-managed servers under [...]
October 22, 2026
Disgraced Indian cert issuer leaves the cert issuing business
After embarrassing reports revealed weak private keys, one of which was just a single digit, Indian certification authority eMudhra has decided to take the [...]
October 22, 2026
PHP2Shell puts dozens of UK government services out of service
The PHP2Shell security fiasco has forced 32 UK government services offline and left another four partially unavailable as Whitehall scrambles to patch the [...]
October 22, 2026
Rocky Linux 8 PHP 8.2 Fixes for DoS and Memory Corruption
October 22, 2026
When the attacker becomes the user: Rethinking account takeover
In a world full of cyber risk, account takeover has emerged as one of the most insidious of all threats. If an attacker can successfully compromise a [...]
October 22, 2026
Hackers pile on PHP2Shell as AWS reveals attacks began before disclosure
Attackers are hammering servers with millions of attempts to exploit the critical PHP2Shell vulnerabilities, with Amazon revealing that someone was already [...]
October 22, 2026
Microsoft says ConnectWise breach let Chinese spies loose on 2,250 cloud tenants
China-aligned attackers used AI agents and compromised ConnectWise application credentials to target more than 2,250 Microsoft 365 tenants, Microsoft says. [...]
October 22, 2026
A patch only reduces risk when it runs in production
The patch was ready in days. It took months to ship. Why?I hear that question in nearly every customer conversation about vulnerability management. The [...]
October 22, 2026
Phala Attack Shows What Confidential Computing Does Not Protect
An attacker read logs and settings from a small set of Phala Cloud apps, the company says.
October 22, 2026
Qilin and INC Exploit Palo Alto VPN Flaw in Ransomware Attacks
October 22, 2026
IT department and auditors at major pharmacy chain got into a rip-roaring fight about using ‘password’ on Cisco firewall
Welcome back to PWNED, the column where we talk about companies and organizations that leave the doors wide open to attackers. This week’s sad story [...]
October 22, 2026
Why reasoning models should not have to read everything
The AI industry has been expanding how much information an AI model can consume at once. In just a few years, context windows have grown from thousands of [...]
October 22, 2026
Certification authority eMudhra defends its laughably weak private keys
Indian certification authority eMudhra has defended the laughably weak private keys it used to sign some digital certificates it issued, and suggested [...]
October 22, 2026
DSA-6577-1 chromium – security update
October 22, 2026
DSA-6534-3 webkit2gtk – regression update
October 22, 2026
OpenAI’s models are deliberately breaking their misalignment monitoring systems
AI agents are getting more inventive in finding ways to circumvent safeguards to prevent bad behavior, OpenAI has revealed. On Tuesday, it reported two [...]
October 21, 2026
PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk
PHP developers have accused software supply chain security shop Chainguard of effectively revealing critical bugs in the open-source scripting language [...]
October 21, 2026
Two critical PHP flaws put the web on alert as emergency patches arrive
Organizations are scrambling to protect themselves following the disclosure of two critical vulnerabilities in commonly used code that powers much of the [...]
October 21, 2026
Debian bind9 Update Addresses DNS Attacks and Service Outages
October 21, 2026
Ubuntu c-ares Fixes DoS and Code Execution Vulnerabilities
October 21, 2026
openSUSE openssh Fixes SSH Forwarding and Tunnel Policy Issues
October 21, 2026
SUSE openssh Fixes SSH Forwarding and Tunnel Policy Issues
October 21, 2026
SUSE libpng16 1.6.59 Fixes CVE-2026-46675 Security Vulnerability
October 21, 2026
openSUSE Leap 15.4 libheif Fixes Memory Errors and Security Issues
October 21, 2026
SUSE libheif Fixes Memory Access and Out of Bounds Errors
October 21, 2026
SUSE Poppler Moderate Integer Overflow and DoS Update 2026-4816-1
October 21, 2026
openSUSE Poppler Update Fixes PDF Processing Errors Across Systems
October 21, 2026
openSUSE cyrus-sasl Update Fixes DIGEST-MD5 Client Compromise
October 21, 2026
SUSE Mutt 1.10.1 Fixes Crafted Header Heap Write Vulnerability
October 21, 2026
openSUSE cifs-utils Fixes CIFS Credential Mount Injection
October 21, 2026
SUSE openssl-certs 2.92 Update Removes emSign Root Certificates
October 21, 2026
SUSE ca-certificates-mozilla Refreshes Trusted Root Certificates
October 21, 2026
SUSE Docker Important Update for Go Security Release and Fixes
October 21, 2026
SUSE rootlesskit Update Rebuilds Against Current Go Release
October 21, 2026
openSUSE rootlesskit Update for Current Go Security Release
October 21, 2026
SUSE rootlesskit Important Update for Go Security Release
October 21, 2026
SUSE OpenSSH Update Fixes SSH Forwarding and Policy Bypasses
October 21, 2026
openSUSE OpenSSH 9.6p1 Fixes SSH Forwarding and Agent Issues
October 21, 2026
SUSE OpenEXR Update Fixes Crafted EXR File Processing Issues
October 21, 2026
SUSE libraw Update Fixes a Crash During TIFF Image Processing
October 21, 2026
openSUSE libraw Update Fixes TIFF Processing Crash in Image Handling
October 21, 2026
SUSE Kernel Live Patch 22 Fixes Five Security Vulnerabilities
October 21, 2026
openSUSE Kernel Live Patch Fixes Five Important Security Issues
October 21, 2026
DSA-6572-1 ca-certificates – security update
October 21, 2026
Ubuntu NSS Update Removes Compromised Certificate Authority Roots
October 21, 2026
Ubuntu Ghostscript Fixes Sandbox Bypass and Code Execution
October 21, 2026
Arch Linux php-legacy Fixes a Remote Code Execution Vulnerability
October 21, 2026
Arch Linux PHP Critical Remote Code Execution ASA-202610-1
October 21, 2026
LiteLLM supply chain attack hoovers up passwords and secrets
Unknown crims compromised LiteLLM’s release process on Wednesday, distributing a malicious version (1.107.0) containing malware designed to steal [...]
October 21, 2026
Ubuntu Poppler Update Stops Crashes When Opening Encrypted PDFs
October 21, 2026
Signal bug could keep your mic – and camera – on after hangup
Make sure you don’t say anything mean or secret after hanging up a call on Signal, as a bug in the encrypted messaging app’s calling library could prevent [...]
October 21, 2026
Is the ad a scam? How to tell before you click
You can trust a social media platform and still get scammed by an ad running on it
October 21, 2026
Oracle Linux 8 perl-URI Update Fixes Hostname Encoding Bypass
October 21, 2026
Fedora PHP Update Fixes OOM and Stale State RCE Vulnerabilities
October 21, 2026
Fedora 44 ca-certificates Update Adds Code-Signing Roots
October 21, 2026
Fedora 44 Updates rust-webpki-roots After eMudhra CA Compromise
October 21, 2026
Fedora 44 Updates Rust Certificate Roots After CA Compromise
October 21, 2026
Fedora 44 Updates rustls-webpki After eMudhra CA Compromise
October 21, 2026
Fedora 44 Dolphin Fixes Crafted Folder Command Execution
October 21, 2026
Fedora 44 linux-firmware 20261019 Hardware Firmware Update
October 21, 2026
Fedora 44 GSConnect 73 Fixes Authenticated File Write Vulnerability
October 21, 2026
Fedora 44 qdigidoc 4.11.1 Fixes Path Traversal Vulnerability
October 21, 2026
Fedora 44 Nicotine+ Update Fixes Decompression Bomb DoS
October 21, 2026
Fedora 44 Fixes DoS in perl-ExtUtils-Typemaps-Default 1.07
October 21, 2026
Fedora libdigidocpp 4.5.1 Fixes Signature Forgery Vulnerability
October 21, 2026
Ubuntu 26.10 U-Boot Fixes Buffer Overflow and Memory Access Issues
October 21, 2026
Rocky Linux 10 bubblewrap Update Blocks Sandbox File Writes
October 21, 2026
Rocky Linux 10 hostapd Update Fixes a Wi-Fi 7 DoS Vulnerability
October 21, 2026
Rocky Linux 10 rust-sequoia-sq Fixes DNS and DoS Issues
October 21, 2026
Rocky Linux 10 OpenSSH Update Fixes SFTP and GSSAPI Issues
October 21, 2026
Rocky Linux 10 Kernel Fixes for Networking and Memory Safety
October 21, 2026