Menu

Monthly Archives: October 2026

Fedora 43 perl-CLI-Simple Update Addresses RT Security Flaws
Fedora 43 Perl Badger Update Addresses RT Exploits and Security Risks
Fedora JFrog CLI Fixes Host Command Execution and Denial of Service Risks
Fedora 44 dotnet8.0 Update Fixes Dozens of Security Issues
Fedora 44 perl-Encoding-FixLatin Fixes RT Access and Injection Issues
Fedora 44 perl-Markdown-Render Update Addresses RT Exploits
Fedora 44 perl-CSS-Inliner Fixes RT Access and Injection Flaws
Fedora perl-Badger Update Fixes RT Access and Injection Issues
Fedora 44 Request Tracker 5.0.10 Addresses Multiple Exploits
Fedora 44 Perl HTML Query Update Addresses RT Security Issues
Fedora 44 perl-Text-Markdown-Discount Update Fixes RT Issues
Fedora 44 perl-CLI-Simple Update Addresses RT Security Issues
Stop building agents that can’t change models
No one can predict which AI provider will win the next benchmark cycle. The smarter approach is to build an architecture that can adapt as models change. [...]
How to make enterprise APIs agent-ready
Enterprises spent the last decade building API programs. A large organization now runs thousands of internal APIs, each with a spec, owner, authentication [...]
Your npm install was safe. What happens when the package runs?
For years, one of the first questions we asked about a suspicious npm package was whether it ran a pre-install or postinstall script. Those hooks can [...]
PHP2Shell: No login, no app code, no warning. What next?
If you run PHP anywhere in your environment, patch to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35 now. Two critical flaws disclosed last week, CVE-2026-109618 and [...]
Debian LTS OpenSSL Update Fixes DTLS and Signature Timing Issues
Work to protect DNS from quantum decryption attacks is speeding up
Internet governance bodies are likely to accelerate work to prepare the domain name system (DNS) so it can remain secure once quantum computers can [...]
Fedora 43 Nix 2.31.6 Fixes High- and Moderate-Severity Issues
Fedora 44 MuPDF Update Fixes PDF Signature Denial-of-Service
Fedora 44 libindi Update Fixes a Malformed XML DoS Vulnerability
Fedora 44 Nix Update Fixes High and Moderate Security Issues
Fedora 44 lxml Cleaner URL Bypass Fixed in mingw-python-lxml
Fedora 44 LibRaw Update Fixes Numeric Conversion Denial-of-Service
Fedora 44 Updates mingw-libpng for a libpng Use After Free
Fedora PoDoFo Patch for PDF Disclosure and Denial of Service
Debian LTS ImageMagick Fixes Flaws in Image Processing
Debian Thunderbird Update Addresses Code Execution and Data Exposure
openSUSE Kernel Update Fixes 129 Security Issues and Vulnerabilities
openSUSE Tumbleweed Kernel Update Fixes 220 Security Issues
openSUSE Helm 4.3.0 Update Addresses Remote Denial-of-Service
openSUSE Tumbleweed JFrog CLI Fixes Vulnerability CVE-2026-92892
openSUSE elemental3 3.0.4-1.1 Fixes Remote Availability Issue
openSUSE Tumbleweed Python 3.15 Update Fixes Two Integrity Issues
openSUSE Tumbleweed Ghostscript Update Addresses Two Security Issues
openSUSE Aspell Moderate Local Flaw Update 2026-12126-1
openSUSE Python 3.14.8 Update Addresses Three Security Issues
openSUSE Tumbleweed Python 3.13.16 Update Fixes Four Issues
openSUSE Tumbleweed python312 Update Fixes Three Security Issues
Debian Varnish Cache Fixes for Cache Poisoning and Service Disruption
Rocky Linux 8 ca-certificates Update Blocks eMudhra Trust
Rocky Linux 8 Firefox Update Fixes Sandbox Escapes and Memory Flaws
Rocky Linux 9 Firefox Fixes Sandbox Escapes and Memory Flaws
Rocky Linux 9 Thunderbird Fixes Use After Free and Sandbox Escape
Rocky Linux 10 Firefox Fixes Sandbox Escapes and Memory Flaws
Thunderbird Update Fixes Multiple Issues in Rocky Linux 10
Debian libheif Fixes Address Risks in Crafted Image Processing
Debian DLA-4856-1 Fixes the xdg-dbus-proxy Filter Bypass
Mageia bluez Update Addresses AVRCP and Stack Overflow Issues
Debian LTS Brotli Fixes DoS and Potential Code Execution
Debian Brotli Update Addresses DoS and Code Execution Risk
DSA-6582-1 brotli – security update
SPECTER Attack Uses USB Power Signals to Leak Data From Air-Gapped PCs
Autonomous attack agent in ‘Skynet mode’ hijacks other models to carry out its evil deeds
Threat actors built an AI agent designed to hijack exposed AI models to run autonomous attacks, with instructions allowing it to carry out up to 100,000 [...]
Debian Unbound Update Addresses DNSSEC and Emerging DNS Threats
How to Get Started With Linux Server Monitoring
Start Linux server monitoring with the checks you would otherwise make by hand.
How to Plan Linux Log Management for Incident Response
Plan Linux log management around the records needed to investigate a break-in or an unauthorized change.
DSA-6583-1 libheif – security update
DSA-6578-1 aide – security update
There’s a third PHP2Shell bug, but it won’t get an emergency fix
As the PHP2Shell chaos continues, researchers have found a third PHP vulnerability that could allow attackers to take over websites or remotely run malware [...]
Red-team report found OpenAI utterly failed to monitor its agents during Hugging Face attack
An independent evaluation of OpenAI’s internal misalignment monitoring system revealed that the system was not fit for purpose during a period when [...]
GoDaddy Revokes 404,607 SSL Certificates After Policy Errors
Debian tzdata 2026e Adds Changes to Canadian Time Zones
Overlord RAT Uses Fake Legal Notices to Infect Windows PCs in New Campaign
MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaboration
ESET researchers uncover MythicRatatoskr – a previously unknown Go-based backdoor hiding its C&C server inside the Yggdrasil mesh network – that paved [...]
SUSE Kernel Live Patch 17 Fixes Six Security Vulnerabilities
SUSE Kernel Live Patch 19 Fixes Five Security Vulnerabilities
SUSE Enterprise 15 SP6 Kernel Live Patch Fixes Three Issues
openSUSE Kernel Live Patch 30 Fixes Three Security Issues
SUSE Enterprise 15 SP7 Kernel Live Patch 20 Fixes Two Flaws
Rocky Linux 10 ca-certificates Update Distrusts eMudhra Certificates
Rocky Linux 10 Buildah Fixes File Write and HTTP DoS Risks
Rocky Linux 10 pgvector Update Fixes IVFFlat Code Execution
Rocky Linux 10 Expat Fixes Denial of Service and Data Exposure
Rocky Linux 10 grafana-pcp Fixes HTTP/2 and TLS Attacks
Rocky Linux 10 ipp-usb Important HTTP and TLS Security Update
Rocky Linux 10 pgvector Update Fixes Index Build Code Execution
Rocky Linux 10 iperf3 Update Fixes UDP Denial of Service
Podman 5.8.2 Fixes DoS and Certificate Attacks on Rocky Linux 10
Oracle ca-certificates Update for Certificate Trust Changes
Oracle Linux 10 Podman Update Addresses Security Issues
Oracle grafana-pcp Important Update for Three Reported Issues
Oracle ipp-usb Important Update for Four Reported Issues
Oracle expat update fixes XML parsing risks in Linux 10
Oracle iperf3 Important UDP DoS Fix for ELSA-2026-88207
Oracle Podman 5.8.2 Important Security Update and Fixes
Oracle grafana-pcp Critical Update Resolves Three Issues
Oracle Expat 2.5.0 Addresses Denial of Service and Data Exposure
Oracle httpd 2.4.62 Important Fixes for DoS and Code Execution
Oracle cockpit-machines Update for Three Reported Issues
Oracle Linux 8 OpenSSH 8.0p1 Update Addresses Five Security Issues
Oracle Linux 8 grafana-pcp Important Update for Three Security Issues
Oracle Grafana 9.2.10 Update Adds Email Verification for Improved Security
Oracle Linux 8 Go Toolset and Delve Updates ELSA-2026-86203
Oracle ca-certificates Update Adds and Blocks Root Certificates
openSUSE cpupower Update Fixes Daemon Pidfile Handling Issues
openSUSE ca-certificates-mozilla 2.92 Certificate Store Update
Go 1.27 Update Fixes Certificate Authority Issue on openSUSE
openSUSE Go 1.26 Update Fixes HTTP/2 and Certificate Issues
openSUSE Leap 16.0 php8 Update Fixes Memory Corruption and RCE