Menu

Category Archives: All

Everything

Securing the enterprise software supply chain in the AI era
Across Europe, the Middle East, and Africa (EMEA), enterprise IT is undergoing a fundamental shift. Artificial intelligence (AI) is no longer restricted to [...]
AlmaLinux 10 Emacs Update Addresses Code Execution on File Open
AlmaLinux 10 libX11 Fixes Malicious X Server Buffer Overflow
AlmaLinux 10 libXtst Update Fixes DoS in the RECORD Parser
AlmaLinux 10 Kernel Updates Fix 16 Security Vulnerabilities
AlmaLinux xdg-dbus-proxy Update Fixes a Sandbox Escape Vulnerability
Mageia Python 3.13.17 Update Fixes TLS and Archive Issues
Debian Chromium Fixes Code Execution and Disclosure Issues
Fedora 43 librabbitmq Fix for AMQP Heap Buffer Over-Read
Firefox 159.0 Arrives in Fedora 44 With New Features and Improvements
Fedora 44 python-pillow Update Fixes MSP Decoder DoS Vulnerability
Fedora 44 Unbound 1.26.2 Fixes DNS Resolver Security Threats
Fedora 44 Libreswan Fixes IPsec Denial of Service and Memory Errors
Fedora 44 librabbitmq 0.18.1 Fixes AMQP Message Parsing Error
Oracle Linux 10 libXtst Update Fixes RECORD Parser Denial-of-Service
Oracle libX11 Update Fixes a Heap Buffer Overflow in X11 Libraries
Oracle Yggdrasil Update Addresses Three Reported Issues
Oracle libXi Update Addresses Three Input Handling Issues
Oracle libXrender Important Heap Overflow Fix ELSA-2026-91003
Oracle Thunderbird 153.5.0 Important Fix for CVE-2026-45186
Oracle Emacs 29.4 Important Fixes for Code Execution and Injection
Oracle Linux 9 cjose Update Fixes AES Key Unwrap Buffer Overflow
Oracle Buildah 1.43.4 Fixes Denial-of-Service and File-Write Issues
Oracle Linux 9 Kernel Update Fixes Multiple Security Issues
Oracle Linux 9 Podman Important Update Addresses Three CVEs
Oracle libXtst Update Addresses a RECORD Parser DoS Vulnerability
Oracle Linux 8 libXi Update Addresses Three CVEs and Security Risks
Oracle Linux 8 libXrender Fixes RenderQueryPictFormats Code Injection
Oracle Linux 8 Thunderbird 140.17.0 Important Security Update
Oracle Emacs Update Fixes Handling of Untrusted Content
Oracle Python urllib3 Important Chunk Parser Denial of Service
Oracle Linux 8 Container Tools Update for CVE-2026 Issues
Oracle LibreOffice 7.1.8.1 Fixes Buffer Overflows and Code Execution
Oracle Linux 8 Kernel Fixes for Multiple Security Issues
Oracle Kernel Update Addresses Heap Overflow and Other Issues
Mageia 10 urpmi Fixes Kernel Cleanup and Upgrade Issues
Seccomp Flaw Lets Programs Bypass Some Linux Restrictions
A program could get past some Linux security rules by changing the number it sends with a request.
Debian OpenJDK-25 Update Fixes Sandbox and Certificate Issues
Brotli Flaw Is Being Used in Attacks
Attackers are exploiting a flaw in Brotli, Google’s software for unpacking compressed data.
DSA-6585-2 thunderbird – regression update
DSA-6589-1 php-mongodb – security update
DSA-6588-1 openjdk-21 – security update
DSA-6587-1 pdns – security update
Debian Firefox ESR Update Addresses Multiple Security Issues
openSUSE Tumbleweed DPDK Fixes Address 14 Security Issues
openSUSE Tumbleweed curl Update Addresses 23 Security Issues
openSUSE ALSA Update Fixes Two Local Access Issues and Improves Security
openSUSE Tumbleweed Chromedriver Update Fixes 37 Security Issues
openSUSE CoreDNS Update Addresses Remote Service Disruption
openSUSE Tumbleweed zbar Update Fixes Two Denial-of-Service Flaws
openSUSE Tumbleweed nginx 1.31.7 Fixes Five Security Issues
openSUSE Codex Update Fixes Three Remote Service Disruptions
openSUSE Poppler Update Addresses CVE-2026-107705 Security Flaw
openSUSE Tumbleweed libsndfile Update Fixes Local Audio DoS
Mageia fio Update Fixes Job File Crash and Improves Reliability
Mageia 10 mgaonline Fixes Wayland Crash and Migration Issues
Mageia drakxtools Adds More Detailed System Memory Information
Serial ransomware crook gets 70 months behind bars for Nefilim, Hive roles
Ukrainian ransomware crook Artem Stryzhak has been sentenced to 70 months in the slammer by a New York federal court for his role as an affiliate of the [...]
Gheist turns GitHub Actions into a secret extraction service
A threat actor dubbed Gheist is turning compromised GitHub accounts into credential-harvesting platforms. By planting malicious GitHub Actions workflows in [...]
Cisco open sources tool for detecting AI agents on hacking sprees
Cisco has open sourced a behavior detection engine that watches AI agents, to help security teams prevent rogue agents from going off the rails like they [...]
123 Reg discloses ‘AI cyberattack’ on customer data, suspects China nexus
UK domain registrar 123 Reg (no relation – Ed) says it was the victim of an “AI-driven cyberattack” that exposed customer data. Customers began receiving [...]
Responsible disclosure in the age of Vulnpocalypse
New tools can find potential flaws faster than teams can assess and fix them. When a serious flaw is discovered, the central challenge is ensuring [...]
Top Free VPNs for Linux: Enhance Privacy and Bypass Restrictions
Linux is famous for its strong security. Yet, adding a Virtual Private Network (VPN) boosts privacy even more. A VPN encrypts connections and protects [...]
AI Alignment Failed When an Agent Targeted an Open-Source Project
An AI coding assistant tried to add harmful code to a real open-source project during a security test.
Fake AI Attacks Target US Firms as Researchers Warn of Corporate Credential Theft
Fake US Court Notices Target 100,000+ Businesses With LodaRAT
Oracle adds native Snowflake service to OCI to ease data integration
Oracle on Tuesday said it has partnered with Snowflake to make the latter’s AI Data Cloud available as a native service on Oracle Cloud Infrastructure [...]
Six elements of resilient AI orchestration platforms
While many organizations are in early AI agent rollouts, research suggests that more will scale to greater numbers of agents and assistants in the coming [...]
Eight reasons you are better than coding agents
Last week I wrote about how coding agents are better developers than humans. I’ll stand by that — the current agents can write code better, faster, longer, [...]
Attackers compromised 42 GitHub repositories by using files too large to be searched
A security research firm reported Monday that it had identified breaches of 42 third-party GitHub repositories in which attackers had deployed payload [...]
Fedora 43 WebKitGTK Update Fixes Sandbox and Rendering Issues
Fedora 43 Kernel 7.2.13 Stable Update and Fixes for Improved Performance
Fedora 43 eog Update Fixes a PNG Heap Overflow Vulnerability
Fedora 43 Flatpak Fixes Symlink Issues and Local Privilege Escalation
Fedora 43 Libreswan Fixes IKE and IPsec Security Flaws and Vulnerabilities
Fedora Chromium Update Addresses 353 Browser Security Flaws
Fedora util-linux 2.41.6 Fixes Mount and Descriptor Issues
Fedora 43 OpenSSH Fixes Oversized Packet Denial of Service
Fedora 43 perl-DBI Fixes Crashes and Prevents Memory Corruption
Fedora 43 rust-onefetch Rebuilt Using faster-hex 0.10.1
Fedora 43 libinstpatch Update Fixes SoundFont Denial-of-Service
Fedora 43 Updates stargz-snapshotter for Two Security Fixes
Fedora Ghostscript Update Fixes Three Memory Safety Flaws
Fedora 44 Kernel 7.2.13 Update With Important Tree Fixes
Fedora 44 Python 3.12 Update Addresses Tar and SSL Risks
Fedora 44 Brotli 1.2.1 Resolves the Decoder Write Issue
Fedora 44 Brotli Decoder Out-of-Bounds Write Vulnerability Fix
Fedora 44 util-linux Fixes libmount and unshare Issues for Users
Fedora clevis 24 Addresses PKCS#11 Exposure and Key Injection
Fedora 44 mingw-freetype 2.14.3 Fixes a CID Font DoS Vulnerability
Fedora 44 perl-DBI Update Fixes Crashes and Memory Issues
Fedora GStreamer Base Plugins Updated to Version 1.28.8
Fedora 44 mingw-gstreamer1 Update Addresses Media Flaws
Fedora 44 Updates Its GStreamer Plugins to Version 1.28.8
Fedora 44 Updates GStreamer Good Plugins to Version 1.28.8
Fedora 44 Rebuilds rust-onefetch to Resolve the faster-hex Issue
Fedora 44 Updates stargz-snapshotter 0.19.0 for Two CVEs
Fedora libinstpatch 1.1.8 Fixes SoundFont Denial-of-Service Vulnerability
Mageia perl-Text-CSV_XS Update Addresses Multiple Parsing Issues
Mageia 10 Arrow Package Security Fixes – MGASA-2026-0562