February 25, 2026
Ex-L3Harris exec jailed 7 years for selling exploits to Russia
February 25, 2026
Threat intelligence supply chain is full of weak links, researchers find
February 25, 2026
What Is Fail2ban?
February 25, 2026
https://security-tracker.debian.org/tracker/DSA-6148-1
February 25, 2026
MCP security: The current situation
February 25, 2026
AI has gotten good at finding bugs, not so good at swatting them
February 24, 2026
Patch these 4 critical, make-me-root SolarWinds bugs ASAP
February 24, 2026
Go library maintainer brands GitHub’s Dependabot a ‘noise machine’
February 24, 2026
Faking it on the phone: How to tell if a voice call is AI or not
Can you believe your ears? Increasingly, the answer is no. Here’s what’s at stake for your business, and how to beat the deepfakers.
February 23, 2026
PromptSpy ushers in the era of Android threats using GenAI
ESET researchers discover PromptSpy, the first known Android malware to abuse generative AI in its execution flow
February 19, 2026
Is Poshmark safe? How to buy and sell without getting scammed
Like any other marketplace, the social commerce platform has its share of red flags. It pays to know what to look for so you can shop or sell without headaches.
February 19, 2026
Is it OK to let your children post selfies online?
When it comes to our children’s digital lives, prohibition rarely works. It’s our responsibility to help them build a healthy relationship with tech.
February 17, 2026
Zero CVEs: The symptom of a larger problem
February 13, 2026
Naming and shaming: How ransomware groups tighten the screws on victims
When corporate data is exposed on a dedicated leak site, the consequences linger long after the attack fades from the news cycle
February 12, 2026
Polish hacker charged seven years after massive Morele.net data breach
February 12, 2026
Taxing times: Top IRS scams to look out for in 2026
It’s time to file your tax return. And cybercriminals are lurking to make an already stressful period even more edgy.
February 10, 2026
https://security-tracker.debian.org/tracker/DSA-6124-1
February 9, 2026
Taiwan tells Uncle Sam its chip ecosystem ain’t going anywhere
February 9, 2026
Salesforce may be prepping to phase out Heroku
February 9, 2026
How the GNU C Compiler became the Clippy of cryptography
February 9, 2026
AI-augmented data quality engineering
February 9, 2026
Several security issues were fixed in pip.
February 9, 2026
An update that solves 76 vulnerabilities and contains one feature can now be installed.
February 9, 2026
An update that solves 76 vulnerabilities and contains one feature can now be installed.
February 9, 2026
An update that solves one vulnerability can now be installed.
February 9, 2026
Indian police commissioner wants ID cards for AI agents
February 9, 2026
Update to 1.10.2 Update was blocked by a ppc64 issue, but a workaround has been found.
February 9, 2026
Update to version 1.2026.1
February 9, 2026
https://security-tracker.debian.org/tracker/DSA-6125-1
February 9, 2026
https://security-tracker.debian.org/tracker/DSA-6126-1
February 9, 2026
https://security-tracker.debian.org/tracker/DSA-6127-1
February 9, 2026
Update to 144.0.7559.132 * CVE-2026-1861: Heap buffer overflow in libvpx * CVE-2026-1862: Type Confusion in V8
February 8, 2026
Update to version 0.50.18
February 8, 2026
Backport fixes for CVE-2026-1484, CVE-2026-1485, CVE-2026-1489.
February 8, 2026
Update to version 1.9.2. Release notes: https://github.com/libgit2/libgit2/releases/tag/v1.9.2
February 8, 2026
Release notes for xrdp v0.10.5 (2026/01/27) Security fixes CVE-2025-68670: Improper bounds checking of domain string length leads to Stack- based Buffer Overflow New features
February 8, 2026
Release notes for xrdp v0.10.5 (2026/01/27) Security fixes CVE-2025-68670: Improper bounds checking of domain string length leads to Stack- based Buffer Overflow New features
February 8, 2026
Study confirms experience beats youthful enthusiasm
February 7, 2026
Denis Skvortsov discovered that xrdp, a Remote Desktop Protocol (RDP) server, was susceptible to an unauthenticated stack-based buffer overflow vulnerability, which may result in remote execution of arbitrary code. For the oldstable distribution (bookworm), this problem has been fixed
February 7, 2026
What Is TLS (Transport Layer Security) in Linux Security?
February 7, 2026
Update to 9.18.44 (rhbz#2431609) Security Fixes: Fix incorrect length checks for BRID and HHIT records. (CVE-2025-13878) Bug Fixes: Allow glue in delegations with QTYPE=ANY.
February 7, 2026
Update to 9.18.44 (rhbz#2431609) Security Fixes: Fix incorrect length checks for BRID and HHIT records. (CVE-2025-13878) Bug Fixes: Allow glue in delegations with QTYPE=ANY.
February 7, 2026
Update to 13.0.10.
February 7, 2026
An update that fixes one vulnerability, contains one feature is now available.
February 7, 2026
https://security-tracker.debian.org/tracker/DSA-6123-1
February 7, 2026
Sudo, a program designed to allow a sysadmin to give limited root privileges to users and log root activity, was affected by multiple vulnerabilities. CVE-2023-28486 Sudo did not escape control characters in log messages.
February 6, 2026
Microsoft bumps .NET Framework 3.5 from Windows installers
February 6, 2026
https://security-tracker.debian.org/tracker/DSA-6122-1
February 6, 2026
https://security-tracker.debian.org/tracker/DSA-6121-1
February 6, 2026
https://security-tracker.debian.org/tracker/DSA-6120-1
February 6, 2026
https://security-tracker.debian.org/tracker/DSA-6119-1
February 6, 2026
Flickr emails users about data breach, pins it on 3rd party
February 6, 2026
DDoS deluge: Brit biz battered as botnet blitzes break records
February 6, 2026
Claude AI finds 500 high-severity software vulnerabilities
February 6, 2026
Windows PCs fade away
February 6, 2026
Python everywhere—but are we there yet?
February 6, 2026
MGASA-2026-0032 – Updated python-django packages fix security vulnerabilities
February 6, 2026
MGAA-2026-0011 – Updated yt-dlp packages fix bugs
February 6, 2026
Google unveils API and MCP server for developer documentation
February 6, 2026
This update bumps the bundled lodash to 4.17.23 to ensure openQA is protected against CVE-2025-13465. It likely was not vulnerable in any case, though, as I don’t believe the vulnerable codepaths were exposed by openQA’s use of lodash.
February 6, 2026
Regenerate vendor tarball. Fixes CVE-2025-13465.
February 6, 2026
Regenerate vendor tarball. Fixes CVE-2025-13465.
February 6, 2026
Version 12.5.8 – 2026-01-27 Changed To prevent Poisoned Pipeline Execution (PPE) attacks using prepared .coverage files in pull requests, a PHPT test will no longer be run if the temporary file for writing code coverage information already exists before the test runs
February 6, 2026
OpenClaw reveals meaty personal information after simple cracks
February 5, 2026
Visual Studio Code update shines on coding agents
February 5, 2026
OfferUp scammers are out in force: Here’s what you should know
The mobile marketplace app has a growing number of users, but not all of them are genuine. Watch out for these common scams.
February 5, 2026
Multiple vulnerabilities were discovered in containerd, an open-source container runtime, used by e.g. Docker or Kubernetes. CVE-2024-25621 Overly broad default permission vulnerability. Directory paths `/var/lib/containerd`, `/run/containerd/io.containerd.grpc.v1.cri`
February 5, 2026
What’s new in post-quantum cryptography in RHEL 10.1
February 5, 2026
n8n security woes roll on as new critical flaws bypass December fix
February 5, 2026
Cloud sovereignty is no longer just a public sector concern
February 5, 2026