Menu

Category Archives: Security

Articles about security

update to latest upstream release to fix CVEs

Update to 5.0.6 CVE-2026-42005 Security Advisory: https://doc.powerdns.com/authoritative/security- advisories/powerdns-advisory-2026-07.html

Update to buildah 1.43.2 and podman 5.8.3 Security fix for CVE-2026-44517

Update to buildah 1.43.2 and podman 5.8.3 Security fix for CVE-2026-44517

https://security-tracker.debian.org/tracker/DSA-6377-1

https://security-tracker.debian.org/tracker/DSA-6375-1

Important: mariadb:10.11 security, bug fix, and enhancement update

AI token prices are cooling — but why?
AdaptHealth says attackers sweet-talked their way into cloud systems and stole patient data
How to Investigate Linux Persistence During Incident Response

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves six vulnerabilities can now be installed.

An update that solves 25 vulnerabilities can now be installed.

An update that solves 71 vulnerabilities and has two fixes can now be installed.

An update that solves 169 vulnerabilities and has 11 fixes can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves six vulnerabilities and has one fix can now be installed.

An update that solves six vulnerabilities and has one fix can now be installed.

An update that solves six vulnerabilities and has one fix can now be installed.

An update that solves six vulnerabilities and has one fix can now be installed.

An update that solves six vulnerabilities and has one fix can now be installed.

An update that solves five vulnerabilities and has one fix can now be installed.

An update that solves eight vulnerabilities and has one fix can now be installed.

An update that solves six vulnerabilities and has one fix can now be installed.

An update that solves six vulnerabilities and has one fix can now be installed.

NetNut cracked as Google and FBI target 2 million-device botnet
Meta’s AI chief says new Muse Spark update will sharpen coding, agentic AI
Improving the Linux Security Dashboard Through User Input and Feedback

————————————————————-

An update that solves one vulnerability and has one bug fix can now be installed.

An update that solves one vulnerability and has one bug fix can now be installed.

An update that solves 22 vulnerabilities and has 9 bug fixes can now be installed.

An update that solves 7 vulnerabilities and has 6 bug fixes can now be installed.

An update that solves one vulnerability and has one bug fix can now be installed.

An update that solves 6 vulnerabilities and has 6 bug fixes can now be installed.

An update that solves one vulnerability and has one bug fix can now be installed.

An update that solves 4 vulnerabilities and has 5 bug fixes can now be installed.

An update that solves one vulnerability and has one bug fix can now be installed.

An update that solves 3 vulnerabilities and has one bug fix can now be installed.

Don’t waste your next cloud outage
User swore hacker called General Failure had invaded his PC
Microsoft launches AI engineering company
Dev says Google warned him about account hijack – then charged him $11,000 anyway
Startup sues Palo Alto Networks’ Koi Security, saying an AI-hallucinated report falsely linked it to Chinese espionage
Visual Studio Code improves tools for agents

Important: perl:5.32 security update

Important: mariadb:10.11 security, bug fix, and enhancement update

Moderate: autotrace security update

Moderate: autotrace security update

Important: perl:5.32 security update

Important: mariadb:10.11 security, bug fix, and enhancement update

Smooth AI criminal drives ‘first’ end-to-end agentic ransomware attack
Linux Kernel Module Rootkits: How Attackers Hide After Compromising Cloud Workloads
The Gentlemen ransomware: what you need to know

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

An update that solves one vulnerability and has one bug fix can now be installed.

An update that solves 23 vulnerabilities and has 4 bug fixes can now be installed.

Trojanized GitHub PoC Repositories Deliver ChocoPoC Malware to Security Researchers

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

An update that solves one vulnerability can now be installed.

An update that solves 3 vulnerabilities can now be installed.

An update that solves 2 vulnerabilities can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves 2 vulnerabilities can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves 2 vulnerabilities can now be installed.

An update that solves one vulnerability can now be installed.

cifs-utils could be made to run programs as an administrator.

Ctrl+Alt+Oops: FortiBleed criminal’s logins stitch two gangs together

Several security issues were fixed in the Linux kernel.

Microsoft said exploitation was ‘less likely’ … but CISA just added SharePoint RCE to KEV list

nghttp2 could allow unintended access to network services.

LibVNCServer could be made to crash or run programs if it received specially crafted network traffic.

Can’t patch fast enough? Zero trust as a last line of defense
Pacemaker manufacturer Medtronic warns patients cybercrooks may have swiped health data
India gives WhatsApp three days to defend username rollout amid security fears
AWS raises AgentCore runtime quotas by up to 5x to help enterprises scale AI agents
Argo CD flaw shows why GitOps infrastructure should be treated as tier zero
Oracle E-Business Suite was under attack via critical flaw before the public exploit code was even released
Best practices for using AI to generate C# code
Why an idempotency key isn’t an idempotency guarantee
What do AI observability tools actually do?
Hackers shoveled snow for company, were rewarded with network admin access

Important: php:7.4 security update

Important: php:7.4 security update

Important: php:7.4 security update

Important: php:7.4 security update

Important: php:7.4 security update

Important: php:7.4 security update

TypeScript 7.0 reaches release candidate stage
Smashing Security podcast #474: Polymarket can predict the future. So how did it miss this hack?
SnapLogic MCP Builder eases creation of MCP servers
EvilTokens device-code phishing kit totally more evil than we all thought
Claude Sonnet 5.0 heads straight down the middle of the road to dodge controversy

https://security-tracker.debian.org/tracker/DSA-6374-1