Menu

Category Archives: Security

Articles about security

DSA-6595-1 tor – security update
Oracle Linux 10 libXtst Update Fixes RECORD Parser Denial-of-Service
Oracle libX11 Update Fixes a Heap Buffer Overflow in X11 Libraries
Oracle Yggdrasil Update Addresses Three Reported Issues
Oracle libXi Update Addresses Three Input Handling Issues
Oracle libXrender Important Heap Overflow Fix ELSA-2026-91003
Oracle Thunderbird 153.5.0 Important Fix for CVE-2026-45186
Oracle Emacs 29.4 Important Fixes for Code Execution and Injection
Oracle Linux 9 cjose Update Fixes AES Key Unwrap Buffer Overflow
Oracle Buildah 1.43.4 Fixes Denial-of-Service and File-Write Issues
Oracle Linux 9 Kernel Update Fixes Multiple Security Issues
Oracle Linux 9 Podman Important Update Addresses Three CVEs
Oracle libXtst Update Addresses a RECORD Parser DoS Vulnerability
Oracle Linux 8 libXi Update Addresses Three CVEs and Security Risks
Oracle Linux 8 libXrender Fixes RenderQueryPictFormats Code Injection
Oracle Linux 8 Thunderbird 140.17.0 Important Security Update
Oracle Emacs Update Fixes Handling of Untrusted Content
Oracle Python urllib3 Important Chunk Parser Denial of Service
Oracle Linux 8 Container Tools Update for CVE-2026 Issues
Oracle LibreOffice 7.1.8.1 Fixes Buffer Overflows and Code Execution
Oracle Linux 8 Kernel Fixes for Multiple Security Issues
Oracle Kernel Update Addresses Heap Overflow and Other Issues
Next-gen privacy protocols: WireGuard vs OpenVPN vs Shadowsocks
Mageia 10 urpmi Fixes Kernel Cleanup and Upgrade Issues
Seccomp Flaw Lets Programs Bypass Some Linux Restrictions
A program could get past some Linux security rules by changing the number it sends with a request.
Debian OpenJDK-25 Update Fixes Sandbox and Certificate Issues
Brotli Flaw Is Being Used in Attacks
Attackers are exploiting a flaw in Brotli, Google’s software for unpacking compressed data.
DSA-6585-2 thunderbird – regression update
DSA-6589-1 php-mongodb – security update
DSA-6588-1 openjdk-21 – security update
DSA-6587-1 pdns – security update
Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble
Attackers are probing a critical Oracle E-Business Suite vulnerability that can lead to remote code execution (RCE), despite Oracle issuing a patch earlier [...]
Debian Firefox ESR Update Addresses Multiple Security Issues
From Rules to AI and Back 
Summit Public Schools Breach Exposes 115 GB of Student and Staff Data
OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery
openSUSE Tumbleweed curl Update Addresses 23 Security Issues
openSUSE Tumbleweed DPDK Fixes Address 14 Security Issues
openSUSE CoreDNS Update Addresses Remote Service Disruption
openSUSE Tumbleweed zbar Update Fixes Two Denial-of-Service Flaws
openSUSE ALSA Update Fixes Two Local Access Issues and Improves Security
openSUSE Tumbleweed Chromedriver Update Fixes 37 Security Issues
openSUSE Tumbleweed libsndfile Update Fixes Local Audio DoS
openSUSE Tumbleweed nginx 1.31.7 Fixes Five Security Issues
openSUSE Codex Update Fixes Three Remote Service Disruptions
openSUSE Poppler Update Addresses CVE-2026-107705 Security Flaw
Mageia fio Update Fixes Job File Crash and Improves Reliability
Mageia 10 mgaonline Fixes Wayland Crash and Migration Issues
Mageia drakxtools Adds More Detailed System Memory Information
Scanner Poses as 32 AI Bots to Find Credentials and Private Keys
Serial ransomware crook gets 70 months behind bars for Nefilim, Hive roles
Ukrainian ransomware crook Artem Stryzhak has been sentenced to 70 months in the slammer by a New York federal court for his role as an affiliate of the [...]
Hive ransomware affiliate jailed, years after FBI infiltrated the gang’s systems
Gheist turns GitHub Actions into a secret extraction service
A threat actor dubbed Gheist is turning compromised GitHub accounts into credential-harvesting platforms. By planting malicious GitHub Actions workflows in [...]
Cisco open sources tool for detecting AI agents on hacking sprees
Cisco has open sourced a behavior detection engine that watches AI agents, to help security teams prevent rogue agents from going off the rails like they [...]
123 Reg discloses ‘AI cyberattack’ on customer data, suspects China nexus
UK domain registrar 123 Reg (no relation – Ed) says it was the victim of an “AI-driven cyberattack” that exposed customer data. Customers began receiving [...]
Responsible disclosure in the age of Vulnpocalypse
New tools can find potential flaws faster than teams can assess and fix them. When a serious flaw is discovered, the central challenge is ensuring [...]
Top Free VPNs for Linux: Enhance Privacy and Bypass Restrictions
Linux is famous for its strong security. Yet, adding a Virtual Private Network (VPN) boosts privacy even more. A VPN encrypts connections and protects [...]
AI Alignment Failed When an Agent Targeted an Open-Source Project
An AI coding assistant tried to add harmful code to a real open-source project during a security test.
Fake AI Attacks Target US Firms as Researchers Warn of Corporate Credential Theft
Fake US Court Notices Target 100,000+ Businesses With LodaRAT
Oracle adds native Snowflake service to OCI to ease data integration
Oracle on Tuesday said it has partnered with Snowflake to make the latter’s AI Data Cloud available as a native service on Oracle Cloud Infrastructure [...]
Six elements of resilient AI orchestration platforms
While many organizations are in early AI agent rollouts, research suggests that more will scale to greater numbers of agents and assistants in the coming [...]
Eight reasons you are better than coding agents
Last week I wrote about how coding agents are better developers than humans. I’ll stand by that — the current agents can write code better, faster, longer, [...]
Attackers compromised 42 GitHub repositories by using files too large to be searched
A security research firm reported Monday that it had identified breaches of 42 third-party GitHub repositories in which attackers had deployed payload [...]
Fedora 43 WebKitGTK Update Fixes Sandbox and Rendering Issues
Fedora 43 Kernel 7.2.13 Stable Update and Fixes for Improved Performance
Fedora 43 eog Update Fixes a PNG Heap Overflow Vulnerability
Fedora 43 Flatpak Fixes Symlink Issues and Local Privilege Escalation
Fedora 43 Libreswan Fixes IKE and IPsec Security Flaws and Vulnerabilities
Fedora Chromium Update Addresses 353 Browser Security Flaws
Fedora util-linux 2.41.6 Fixes Mount and Descriptor Issues
Fedora 43 OpenSSH Fixes Oversized Packet Denial of Service
Fedora 43 perl-DBI Fixes Crashes and Prevents Memory Corruption
Fedora 43 rust-onefetch Rebuilt Using faster-hex 0.10.1
Fedora 43 libinstpatch Update Fixes SoundFont Denial-of-Service
Fedora 43 Updates stargz-snapshotter for Two Security Fixes
Fedora Ghostscript Update Fixes Three Memory Safety Flaws
Fedora 44 Kernel 7.2.13 Update With Important Tree Fixes
Fedora 44 Python 3.12 Update Addresses Tar and SSL Risks
Fedora 44 Brotli 1.2.1 Resolves the Decoder Write Issue
Fedora 44 Brotli Decoder Out-of-Bounds Write Vulnerability Fix
Fedora 44 util-linux Fixes libmount and unshare Issues for Users
Fedora clevis 24 Addresses PKCS#11 Exposure and Key Injection
Fedora 44 mingw-freetype 2.14.3 Fixes a CID Font DoS Vulnerability
Fedora 44 perl-DBI Update Fixes Crashes and Memory Issues
Fedora 44 Updates Its GStreamer Plugins to Version 1.28.8
Fedora 44 Updates GStreamer Good Plugins to Version 1.28.8
Fedora GStreamer Base Plugins Updated to Version 1.28.8
Fedora 44 mingw-gstreamer1 Update Addresses Media Flaws
Fedora 44 Rebuilds rust-onefetch to Resolve the faster-hex Issue
Fedora 44 Updates stargz-snapshotter 0.19.0 for Two CVEs
Fedora libinstpatch 1.1.8 Fixes SoundFont Denial-of-Service Vulnerability
Mageia perl-Text-CSV_XS Update Addresses Multiple Parsing Issues
Mageia 10 Arrow Package Security Fixes – MGASA-2026-0562
Godot Vulnerability Could Let a Language File Run Code in a Game
A Godot vulnerability could let an attacker hide code in a language file and make a game run it on a player’s computer.
MCP Security Flaw in Google Toolbox Could Expose Server Files
An MCP security flaw in Google’s open-source Toolbox for Databases could let an attacker copy files off the server running it or replace files on [...]
Slackware Updates proftpd Against SSH Compression Attack
Oracle Linux 10 xdg-dbus-proxy Fixes Address Sandbox Escape Vulnerability
Oracle Linux 10 Brotli Update Fixes Decoder Write Issues
Oracle xdg-dbus-proxy Fixes the Message Filtering Bypass