Menu

Category Archives: Security

Articles about security

DSA-6597-1 dpdk – security update
DSA-6596-1 wordpress – security update
Amatera: How the prolific infostealer works and spreads
The malware that topped ESET’s infostealer detections in Latin America in the first half of 2026 is an example of how cybercrime has professionalized
GM cracks the petty cash box for multistate driver tracking settlement
General Motors is taking what looks like a light slap on the wrist from a coalition of 35 states and the District of Columbia after agreeing to settle [...]
Anthropic: That Claude Code extension compromise… couldn’t be us
Anthropic has denied allegations that a malicious version of the official Claude Code extension published to Cursor’s marketplace was linked to any kind of [...]
GitHub bets on multi-agent software development with Copilot overhaul
GitHub is expanding Copilot beyond code generation and developer assistance, launching a redesigned Copilot app and a new Projects capability that enables [...]
Binance Probes DevOps Engineer’s Hacked Laptop After $6.3B Theft
British intelligence agency misplaced ‘thousands’ of storage devices, years later still can’t say how many
Thousands of GCHQ storage drives containing sensitive data have been lost for years, and the British signals intelligence agency still cannot explain where [...]
Mistral open-sources AI model despite warning it could aid cyberattacks
A trillion-parameter AI model that its developer says could help attackers carry out real cyberattacks is now free to download, modify and run outside the [...]
Hackers leak personnel data of 41,000+ Homeland Security staff, including ICE and border agents
AI agents are upending digital business processes
People have discovered AI agents running on cloud-based platforms, and suddenly, those agents are the answer to every bit of financial and operational [...]
Oracle Linux 10 BIND Addresses DNS Attacks ELSA-2026-92419
Oracle dogtag-pki Updates Fix RESTEasy and Jackson Issues
Oracle Linux 10 Ignition Important Advisory ELSA-2026-91720
Oracle Linux 10 Kernel 6.12 Fixes, Updates, and Improvements
Oracle Linux 10 Kernel Update Fixes Network and Memory Issues
Oracle cjose Fixes All-Zero Key Handling in JWE Encryption
Oracle Ignition 2.26.0 Update Addresses CVE-2026-111943
Oracle WebKit2GTK 2.54.2 Update for Six Security Issues
Oracle Linux libX11 Update Fixes Malicious X Server Heap Overflow
Oracle libXtst Update Addresses a DoS in the RECORD Parser
Oracle libXrender Update Addresses Heap Overflow Code Injection
Oracle Linux 9 Kernel Update ELSA-2026-86033 – Security Advisory
Oracle urllib3 Update Addresses Memory DoS and Proxy Interception
Oracle curl updates fix connection and cookie handling flaws
Oracle Linux 8 expat Fixes DoS and Information Disclosure
Oracle WebKit2GTK 2.54.2 Security Update for Linux 8 – Security Advisory
Oracle GCC Toolset 15 Fixes CVE-2026-102010 Security Vulnerability
Oracle Linux 7 PHP Update Addresses CVE-2026-109619 Vulnerability
In the year AI re-wrote the infosec rulebook, it’s comforting to know crypto exchanges still have bad security
Crypto exchange Binance has paused trading after discovering unknown parties cracked one of its workers’ laptops and used it to make massive trades. Late [...]
Ubuntu .NET Updates Fix Code Execution and Privilege Escalation
Binance Probes Suspected $5.8 Billion Crypto Hack, $3 Billion Frozen
Fedora 43 perl-Alien-Brotli Update Fixes Brotli Decoder Write
Firefox 159.0 Arrives in Fedora 43 With Latest Upstream Update
Fedora Brotli 1.2.1 Fixes a Decoder Write Issue in the Latest Update
Fedora 43 mingw-python-certifi Refreshes Certificate Trust
Fedora 43 Traffic Server Update Fixes HTTP and TLS Issues
Mageia libsolv Fixes Buffer Overflows in Repository Parsing
Mageia 10 drakconf Fixes Control Center Issues and Improves Stability
Mageia Tomcat Fixes Address HTTP/2, TLS, and Credential Issues
Mageia 10 CFITSIO Fixes Improve Crafted FITS Image Heap Reads
Mageia 10 xrdp Fixes Remote Code Execution and Access Flaws
Mageia 10 Guayadeque 1.0.2 Fixes Several Earlier Bugs and Issues
Fedora 44 certifi Update Distrusts eMudhra Certificates
Fedora 44 Knot DNS Update Delivers Important Security Fixes
Fedora 44 Traffic Server 10.2.1 Proxy Fixes and Improvements
Researchers find bugs in 5 AI developer tools, with OpenAI and Microsoft flaws still unpatched
Multiple vulnerabilities in five popular AI developer tools could allow attackers to execute code on a host machine, read and steal files, or spoof browser [...]
Fedora Sweeper Fixes Crafted Folder Command Execution Issues
Fedora 45 Tokodon Update Fixes Crafted Folder Command Execution
Fedora 45 Yakuake Update Fixes Crafted Folder Command Execution
Fedora 45 Umbrello Fixes Crafted Folder Command Execution
Fedora 45 zanshin Update Fixes Crafted Folder Command Execution
Fedora 45 KDE Portal Fixes Crafted Folder Command Execution
Fedora step 26.08.2 Blocks Crafted Folder Command Execution
Fedora 45 spectacle Update Fixes Crafted Folder Command Execution
Fedora svgpart Update Fixes Crafted Folder Command Execution
Fedora 45 Spacebar Update Fixes Crafted Folder Command Execution
Fedora 45 Skladnik Update Fixes Crafted Folder Command Execution
Fedora qqc2-breeze-style Fixes Crafted Folder Command Execution
Fedora 45 signon-kwallet-extension Fixes Crafted-Name Command Execution
Fedora 45 Skanpage Fixes Crafted Folder Command Execution
Fedora Skanlite Fixes for Crafted Folder Command Execution
Fedora 45 qrca Update Fixes Crafted Folder Command Execution
Fedora 45 poxml Update Fixes Crafted Folder Command Execution
Hetzner Warns PXE Boot Users Not to Restart Servers
Hetzner says customers using PXE boot should hold off on server restarts.
Kafka Security Flaw Could Let Attackers Fake a Login
Some Apache Kafka servers could accept a made-up identity and give an attacker access as that user.
DSA-6592-1 chromium – security update
DSA-6591-1 openjdk-25 – security update
DSA-6590-1 firefox-esr – security update
Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers
Suspected Chinese attackers chained PHP2Shell with a Linux kernel privilege-escalation exploit to root 25 servers, including Palo Alto Networks firewalls [...]
BYOD cyberattack diverts ambulances and cancels classes at University of New Mexico health center
Lessons from Cybersecurity Black Week
A critical PHP flaw, leaked Linux kernel reports, a poisoned LiteLLM release, and more, all in seven days. Which threats called for immediate action, and [...]
ESET APT Activity Report Q2 2026–Q3 2026
An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q2 2026 and Q3 2026
EMBRACE Flaws in 5 AI Coding Tools Enable Code Execution and File Theft
Belgium’s tax agency confirms cyberattack, pulls services offline
Belgium’s finance and tax agency has pulled “several” digital services offline after a cyberattack on the organization. FOD Financiën [...]
ADEX: AI Involved in 52% of Detected Ad Fraud Schemes – Shopping Agents Could be Next
AppViewX Expands Quantum Trust Hub with Cryptographic Discovery, Posture Management, and Remediation
Shortlist of age checks for the UK’s under-16 social media ban is out, ‘some’ adults will need verifying
The UK’s comms watchdog has put forward four methods of checking netizens aren’t kids – dubbed highly effective age assurance (HEAA) – as it prepares [...]
Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour
EXCLUSIVE Researchers identified at least 83 attacks against 61 public GitHub repositories, including popular open source projects such as Google [...]
Ukrainian Nefilim and Hive Affiliate Artem Stryzhak Jailed for 70 Months
Securing the enterprise software supply chain in the AI era
Across Europe, the Middle East, and Africa (EMEA), enterprise IT is undergoing a fundamental shift. Artificial intelligence (AI) is no longer restricted to [...]
AlmaLinux 10 Emacs Update Addresses Code Execution on File Open
AlmaLinux 10 libX11 Fixes Malicious X Server Buffer Overflow
AlmaLinux 10 libXtst Update Fixes DoS in the RECORD Parser
AlmaLinux 10 Kernel Updates Fix 16 Security Vulnerabilities
AlmaLinux xdg-dbus-proxy Update Fixes a Sandbox Escape Vulnerability
Simplifying .NET toolchain installs with dotnetup
If you’ve experimented with Rust, you already know how simple it is to get a basic toolchain in place, with the simple rustup command-line tool. The same [...]
Admin dropped the F-bomb in a password to show hackers who was really 1337
Welcome back to PWNED, in which The Reg offers cautionary tales from folks who’ve left their doors wide open to attackers and lived to tell the tale. This [...]
Mageia Python 3.13.17 Update Fixes TLS and Archive Issues
Debian Chromium Fixes Code Execution and Disclosure Issues
Fedora 43 librabbitmq Fix for AMQP Heap Buffer Over-Read
Firefox 159.0 Arrives in Fedora 44 With New Features and Improvements
Fedora 44 python-pillow Update Fixes MSP Decoder DoS Vulnerability
Fedora 44 Libreswan Fixes IPsec Denial of Service and Memory Errors
Fedora 44 Unbound 1.26.2 Fixes DNS Resolver Security Threats
Fedora 44 librabbitmq 0.18.1 Fixes AMQP Message Parsing Error
Smashing Security podcast #490: How Jared Kushner’s iPhone was allegedly hacked twice
Transferring Unused IPv4 Addresses in Asia Pacific: The Complete APNIC Playbook
DSA-6593-1 imagemagick – security update
DSA-6594-1 python-git – security update