Menu

Monthly Archives: October 2026

When ‘access denied’ becomes an agent’s next objective
One line from a recent AI incident caught my attention. Describing how an OpenAI agent got into a Medicare statistics portal, Australian Prime Minister [...]
Why cyber resilience is now a boardroom priority for UK public services
The UK public sector has reached a cyber resilience inflection point. A new Prime Minister has taken office, and significant machinery-of-government [...]
ICANN testing tech to let law enforcement access non-public WHOIS info
ICANN has started testing authentication schemes that will allow law enforcement agencies to make urgent requests for non-public WHOIS information – when [...]
DeepSeek deep-sixed at all US federal civilian agencies
The US Department of Homeland Security on Monday issued an order directing federal civilian agencies not to use technology products from Chinese AI lab [...]
Grocery giant Ahold Delhaize confirms cyberattack forced US and European systems offline
Dutch grocery giant Ahold Delhaize, which operates US supermarket chains Food Lion, Giant Food, and Stop & Shop, said it proactively took IT systems [...]
Security patches need patches now that attackers have AI
Updating your software only gets you so far. A scary scenario – security fixes themselves being bypassed – is becoming more common, according [...]
Oracle Linux 9 environment-modules Fixes Bash Completion Injection
Oracle perl-URI Moderate Hostname Encoding Bypass ELSA-2026-84588
Oracle WebKit 2.54.1 Critical Security Update and Important Fixes
Oracle Linux 9 xorg-x11-server Patch for Five Security Issues
Oracle Linux 8 libsoup Fixes WebSocket Buffer Overflows
Ubuntu libXtst Fixes X Server Reply and Memory Handling
Mageia OpenSSH Update Fixes Authentication and SFTP Issues
Mageia 10 libpng Update Fixes Decompression Use-After-Free
Mageia 10 flatpak-builder Update Blocks Host Code Execution
US Ransomware Negotiator Suspected of Helping ShinyHunters Extort Victims
SUSE Xen 4.12.4 Fixes Four Issues – A Reboot Is Required
SUSE Linux Enterprise Kernel Live Patch Fixes Four Issues
openSUSE Kernel Live Patch Fixes Four System Vulnerabilities
openSUSE AusweisApp 2.6.0 Fixes Two Security Issues and Improves Security
openSUSE Tumbleweed Python 3.15 Update for Three Issues
openSUSE Perl-Net-Whois-Raw 2.99044-1.1 Moderate Advisory
openSUSE Tumbleweed Velociraptor Fixes 40 Security Issues
openSUSE Podman Update Resolves Three Container Security Issues
openSUSE Tumbleweed pgvector-devel Update, CVE-2026-103484
openSUSE Tumbleweed pi-coding-agent 1.0.2 Fixes CVE-2026-102276
FFmpeg 4.4.8 Update Fixes 11 Issues on openSUSE Tumbleweed
openSUSE Chromedriver Update Fixes 11 Security Issues and Vulnerabilities
openSUSE perl-Net-OAuth 0.330.0-2.1 Fixes an OAuth Issue
Ubuntu cifs-utils Fixes Privileged Mount Option Injection
Ubuntu 26.10 OpenSSH Fixes SSH Command and Access Issues
Ubuntu PHP Updates Address Multiple Security Issues and Vulnerabilities
Oracle Linux 9 urllib3 Update Fixes DoS and Proxy Risks
Irish police force has its Twitter hacked in cryptocurrency scam
Bright Security Introduces STAR Fuzzer, Agentic Fuzzing That Writes Its Own Harnesses and Proves Every Finding
SUSE 15 SP7 Kernel RT Important Security Update CVE-2026-53131 2026-4714-1
openSUSE Buildah Important Security Update 2026-4715-1 Released
SUSE Buildah Vital Security Update for Version 2026-4715-1 Released
SUSE iperf Important Resource Exhaustion DoS Fix 2026-24178-1
Ubuntu Go 1.22 Fixes Denial-of-Service and HTTP Attacks
SUSE Kernel Security Update Resolving 401 Vulnerabilities SUSE-2026-24179-1
Oracle Emacs 29.4 Fixes Shell Injection and Integer Overflow
Oracle perl-URI Fixes Unicode Hostname Encoding Bypass Vulnerability
Oracle Linux 10 urllib3 Update Fixes DoS and HTTPS Proxy Issues
SUSE Podman Important Security Update 2026-24182-1 Fixes Vulnerabilities
SUSE Linux Micro Kernel Important Vulnerability Fixes SUSE-SU-2026-24184-1
SUSE OpenSSL-3 Important Vulnerabilities Addressed 2026-24188-1
SUSE Linux Micro 6.2 python-oauthlib Moderate Security Update 2026-24189-1
Fake Calendar Invites Target 40,000 Firms in Microsoft Credential Theft
OpenAI Model Hacked Crypto Wallet and Spent Funds to Deploy Smart Contracts
Hands-on with Antigravity 2: No IDE, just agent chat
The original Antigravity was an IDE with native integration for Google’s generative AI models. With Antigravity 2, Google offers a refashioned version of [...]
Are clearinghouses the answer to the AI hacking threat?
This summer, the White House rolled out the Gold Eagle Initiative, billed as an “unprecedented” effort to coordinate cybersecurity vulnerability disclosure [...]
From pilots to production: The four disciplines that make generative AI work
This series lays out a practical framework for taking generative AI (GenAI) from pilots to dependable production systems in the enterprise. It focuses on [...]
Ubuntu 26.10 PyJWT Multiple Token Forging Risks Fixed USN-8916-2
ConnectWise turns off its SaaS-y backup, security, and management services to probe security SNAFU
SaaS-for-managed services providers ConnectWise has initiated a “service interruption” for its some of its offerings after detecting unauthorized access. [...]
Fedora 43 rust-faster-hex 2026-120aeecae1 Buffer Overflow Fix
Fedora 43 webkitgtk Important Security Update CVE-2026-84635 CVE-2026-64753
Fedora 44 Chromium Critical Memory Corruption Issues Vuln 2026-aab47c4e08
Fedora 44 AOM Important Heap Overflow Vulnerability CVE-2026-56208
Fedora 44 Rust-Faster-Hex Critical Buffer Overflow Advisory 2026-d61f581c33
Fedora 44 GitPython Update Security Fix GHSA-83vg-56qc-22m7
Fedora 44 update for Thunderbird 2026-fe87bcd73d has been released.
Fedora 44 FreeRDP Update Advisory for Security Fix 2026-87944ba9bf
Linux KVM guest-host escape rated critical, may represent a new way to attack penguin-powered networking
Paulos Yibelo, the researcher who in early October claimed to have found a guest-host escape flaw in Linux KVM, the hypervisor used by most hyperscale [...]
Debian LTS HAProxy DLA-4842-1 CVE-2026-33555 Denial of Service
Debian Xen Critical Escalation Info Disclosure Vuln DSA-6571-1
openSUSE Chromium Important Memory Issues Fix Advisory 2026-22124-1
openSUSE GIMP Important Bug Fixes for Vulnerabilities 2026-22123-1
openSUSE psqlODBC Moderate Memory Fix CVE-2026-109448 2026-22122-1
openSUSE cups-filters Important Privilege Escalation Vuln 2026-22120-1
openSUSE Chromium Important Security Update CVE-2026-110136 CVE-2026-110137
openSUSE cadvisor Important Integer Overflow Fix 2026-22117-1
openSUSE 16.0 hauler Security Advisory CVE-2026-53495 CVE-2026-63209
openSUSE bcel Moderate XSS and Unbounded Recursion Flaws 2026-22109-1
openSUSE Nvidia Open Driver Important Update for 81 Issues 2026-22106-1
openSUSE p11-kit Important Buffer and Integer Overflow Issues 2026-22105-1
openSUSE Leap 16.0 python-oauthlib Moderate Timing Attack Risk
openSUSE openssl-3 Important 11 Vulnerabilities Fixed 2026-22102-1
openSUSE Leap 16.0 Important Perl-XS-Parse-Keyword Fix CVE-2026-85644
openSUSE python-virtualenv Key Injection Configuration Issues 2026-22100-1
openSUSE Leap 16.0 Mutt Important Heap Overflow Fix CVE-2026-107570
openSUSE Go1.26 Important Security Fixes Advisory 2026-22095-1
openSUSE go1.27 Important Fixes for Multiple Vulnerabilities 2026-22093-1
OpenSUSE Leap 16.0 Kernel Important Bug Fix Advisory 2026-22091-1
openSUSE iperf Important Remote Denial Memory Exhaustion CVE-2026-22090-1
openSUSE podman Important Environment Leak and Symlink Flaw 2026-22089-1
openSUSE stunnel Moderate Oversized Log Issue CVE-2026-70367 CVE-2026-70368
openSUSE Xwayland Critical Buffer Overflow Use After Free Flaw 2026-22085-1
OpenSUSE libpng16 Moderate Use-After-Free Issues CVE-2026-46675
openSUSE Leap 16.0 GCC 13 Important Buffer Overflow Advisory 2026-22083-1
openSUSE 16.0 unbound Important Heap Overflow Risks Update 2026-22082-1
openSUSE Squid Important Denial of Service Issues Vuln 2026-22080-1
openSUSE Leap 16.0 Virtiofsd Important Time Parser Fix CVE-2026-25727
openSUSE Google Osconfig Agent Important Crash Vulnerability 2026-22078-1
openSUSE Fetchmail Important Buffer Overflow CVE-2026-94184 2026-22077-1
openSUSE webkit2gtk3 Critical Security Update Advisory 2026-22076-1
openSUSE Agama Important Network Access Advisory 2026-22075-1
openSUSE python-PyJWT Important Security Issues Fixed 2026-22074-1
openSUSE 2026-22073-1 python-jwcrypto Important Denial of Service
openSUSE Leap 16.0 openvpn Major Remote Access Memory Leak CVE-2026-22072-1