Menu

Category Archives: Security

Articles about security

Multi-Cloud Blind Spots Are Leaving Security Teams Exposed
Live Video Moderation Challenges Traditional Content Safety Systems
Palo Alto’s firewall OS has been under attack from multiple ransomware groups since June
Multiple ransomware groups, including Qilin and Inc, have been exploiting a high-severity authentication bypass bug in Palo Alto Networks’ PAN-OS, [...]
BAE Systems Cyber Incident Disrupts US Bankruptcy Notices
openSUSE Podman 4.9.5 Rebuilt Against Current Go Security Release
SUSE Podman 4.9.5 Update Rebuilds Against Current Go Security Release
SUSE Linux Enterprise 15 SP5 Kernel Live Patch 34 Fixes Four Issues
SUSE Linux Micro 6.2 p11-kit Update Fixes RPC Parsing Issues
SUSE Linux Micro 6.2 Fixes 81 NVIDIA Driver Security Flaws
Swamped curl maintainers take low-level flaws public to survive vulnerability ‘avalanche’
An “avalanche of vulnerability reports” is forcing curl to move lower-severity cases into public view, reserving private handling for high and [...]
Ubuntu Refreshes CA Certificates Across Supported Releases
Rocky Linux 10 MariaDB 11.8 Update Fixes PCRE2 Memory Corruption
Rocky Linux 10 urllib3 Fixes DoS and HTTPS Proxy Security Risks
Rocky Linux 10 glibc Fixes DoS and Heap Overflow Issues
Rocky Linux 10 perl-URI Update Fixes Hostname Encoding Bypass
Rocky Linux 10 Wireshark Update Fixes DoS and Buffer Overflows
Rocky Linux 10 Emacs Update Fixes Image and TRAMP Exploits
Rocky Linux 10 OpenEXR Update Addresses EXR File Threats
Rocky Linux 10 Xwayland Fixes Code Execution and Escalation
Rocky Linux 10 librabbitmq Update Fixes Heap Overflow, CVE-2026-44236
Rocky Linux 9 environment-modules Fixes Bash Completion Injection
Rocky Linux perl-URI Fixes the Hostname Encoding Bypass
Rocky Linux 9 cockpit-files Fixes Symlink Ownership Flaws
Rocky Linux 9 Xwayland Fixes Code Execution and Escalation
Rocky Linux 9 xorg-x11-server Update Blocks Code Execution Risks
Rocky Linux 9 webkit2gtk3 Fixes Critical ANGLE Code Execution
Rocky Linux 9 Emacs Fixes the Flymake Code Execution Issue
Rocky Linux PostgreSQL Update Fixes pgvector Index Build Code Execution
Rocky Linux 9 Fixes urllib3 Memory and Proxy Security Risks
Rocky Linux 9 RESTEasy Fixes Image DoS and Origin Issues
Rocky Linux 9 PostgreSQL 18 Fixes pgvector Code Execution
Mageia 10 x11-server Fixes Memory Corruption Issues and Improves Stability
openSUSE Hashcat Important Fixes for Three Security Flaws
openSUSE python-joserfc Fixes Critical JWS Signature Bypass
CoreDNS Update Stops HTTP/2 Heap Exhaustion on openSUSE Leap 16.0
openSUSE Leap 16.0 gh Update Fixes File Write and HTTP/2 Risks
openSUSE tinyproxy Critical HTTP Header Fixes 2026-22133-1
openSUSE Leap 16.0 Varnish Update Fixes Request Smuggling
grok-build Update Resolves Pack Parsing DoS on openSUSE Leap 16.0
openSUSE libxls Update Fixes Memory Issues and Parser Errors
openSUSE Leap 16.0 PuTTY Update Fixes Remote Attack Vulnerabilities
openSUSE gitoxide Update Blocks Control Bytes, Advisory 2026-22126-1
Grafana 12.4.10 Fixes DoS and Authentication Bypass on openSUSE Leap 16.0
openSUSE Tumbleweed cpp15 Update Addresses CVE-2026-102010
openSUSE Aspell Update Fixes Three Local Security Issues
openSUSE BCEL Update Fixes Two Security Issues and Improves Security
openSUSE JupyterLab Templates Update Fixes CVE-2026-103923
ImageMagick 7.1.2.32 Fixes 22 Issues on openSUSE Tumbleweed
Xreader 4.6.9 Fix for openSUSE Tumbleweed – Update and Repair Guide
openSUSE Tumbleweed Traefik Update Fixes Five Security Issues
openSUSE Tumbleweed Kernel-devel Update Fixes 389 Issues
openSUSE Tumbleweed inspektor-gadget 0.57.0-1.1 Fixes Remote DoS
openSUSE Tumbleweed glibc Update Fixes Three Security Issues
Ubuntu Squid Update Fixes HTTP and Cache Issues on Ubuntu Systems
Ubuntu sudo-rs Fixes sudoedit File Placement and Privilege Escalation
‘Password1’ and a forgotten test account land Welsh outfits in hot water
A test account protected by “Password1” helped an intruder steal personal data relating to 3,300 people, mostly children, in a ransomware [...]
Scammers Abuse Frame.io Notifications to Steal Microsoft 365 Credentials
Bullhorn sees red after cyberattack knocks recruitment platform offline
Bullhorn is the latest tech giant finding itself on the wrong end of a cyberattack, forcing the recruitment software provider to shut down its platform [...]
Samsung Black Friday 2026: Galaxy Offers to Look Out For
Nearly 480,000 Phishing Emails Traced to Computer Hidden Behind Hotel Fridge
Whitehall shuts the front door on digital ID but leaves the back open
Britain’s national digital ID scheme may be dead, but Whitehall appears to have forgotten to tell the infrastructure. Despite the government [...]
Oracle Linux 9 kernel Important Security Advisory ELSA-2026-83156
Oracle Linux 8 kernel Important Security Update ELSA-2026-500398
Oracle Linux 7 Kernel Important Security Advisories ELSA-2026-500397
Oracle Linux 9 ELSA-2026-500399 Kernel Important Update
Oracle Linux 8 Kernel Important Security Update ELSA-2026-500397
Oracle Linux Kernel Security Update ELSA-2026-500399 for CVEs issued
Oracle Linux 8 Python36 Important Fix for CVE-2026-88029 ELSA-2026-82858
Oracle Linux 9 Kernel Important Security Fix ELSA-2026-500398
Oracle Linux 8 Kernel Important Bug Fix Advisory ELSA-2026-83157
Oracle Linux 8 Kernel Important Security Update ELSA-2026-82807
Oracle Linux 10 Advisory ELSA-2026-83207 Kernel Important Bug Fix
UK finance watchdog wants firms to report AI failures and close calls
The UK’s financial regulator says firms’ incident reporting must cover significant AI failures and near-misses as increasingly autonomous [...]
Guide to Compliance and Cybersecurity in Healthcare Software Development
Police arrest Qilin ransomware suspect on holiday, as links made to Synnovis hack that contributed to patient’s death
When ‘access denied’ becomes an agent’s next objective
One line from a recent AI incident caught my attention. Describing how an OpenAI agent got into a Medicare statistics portal, Australian Prime Minister [...]
The local computing rebellion
Take a close look at your monthly software bills. The charges that once seemed small and separate can add up to a new kind of dependency: subscriptions for [...]
Enterprise AI needs more than an AI engineer
Anthropic has a $100 million plan to help enterprises get more from AI. No, it doesn’t involve agents. It involves people. Lots of people. How retro. On [...]
Why cyber resilience is now a boardroom priority for UK public services
The UK public sector has reached a cyber resilience inflection point. A new Prime Minister has taken office, and significant machinery-of-government [...]
ICANN testing tech to let law enforcement access non-public WHOIS info
ICANN has started testing authentication schemes that will allow law enforcement agencies to make urgent requests for non-public WHOIS information – when [...]
DeepSeek deep-sixed at all US federal civilian agencies
The US Department of Homeland Security on Monday issued an order directing federal civilian agencies not to use technology products from Chinese AI lab [...]
Grocery giant Ahold Delhaize confirms cyberattack forced US and European systems offline
Dutch grocery giant Ahold Delhaize, which operates US supermarket chains Food Lion, Giant Food, and Stop & Shop, said it proactively took IT systems [...]
Security patches need patches now that attackers have AI
Updating your software only gets you so far. A scary scenario – security fixes themselves being bypassed – is becoming more common, according [...]
Oracle Linux 9 environment-modules Fixes Bash Completion Injection
Oracle perl-URI Moderate Hostname Encoding Bypass ELSA-2026-84588
Oracle WebKit 2.54.1 Critical Security Update and Important Fixes
Oracle Linux 9 xorg-x11-server Patch for Five Security Issues
Oracle Linux 8 libsoup Fixes WebSocket Buffer Overflows
Ubuntu libXtst Fixes X Server Reply and Memory Handling
Mageia OpenSSH Update Fixes Authentication and SFTP Issues
Mageia 10 libpng Update Fixes Decompression Use-After-Free
Mageia 10 flatpak-builder Update Blocks Host Code Execution
US Ransomware Negotiator Suspected of Helping ShinyHunters Extort Victims
SUSE Xen 4.12.4 Fixes Four Issues – A Reboot Is Required
openSUSE Kernel Live Patch Fixes Four System Vulnerabilities
SUSE Linux Enterprise Kernel Live Patch Fixes Four Issues
openSUSE AusweisApp 2.6.0 Fixes Two Security Issues and Improves Security
openSUSE Tumbleweed pgvector-devel Update, CVE-2026-103484
openSUSE Podman Update Resolves Three Container Security Issues
openSUSE Tumbleweed Velociraptor Fixes 40 Security Issues