Menu

Latest articles

Dev says Google warned him about account hijack – then charged him $11,000 anyway
Startup sues Palo Alto Networks’ Koi Security, saying an AI-hallucinated report falsely linked it to Chinese espionage
Visual Studio Code improves tools for agents

Important: perl:5.32 security update

Important: mariadb:10.11 security, bug fix, and enhancement update

Moderate: autotrace security update

Moderate: autotrace security update

Important: perl:5.32 security update

Important: mariadb:10.11 security, bug fix, and enhancement update

Smooth AI criminal drives ‘first’ end-to-end agentic ransomware attack
Linux Kernel Module Rootkits: How Attackers Hide After Compromising Cloud Workloads
The Gentlemen ransomware: what you need to know

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

An update that solves 23 vulnerabilities and has 4 bug fixes can now be installed.

An update that solves one vulnerability and has one bug fix can now be installed.

Trojanized GitHub PoC Repositories Deliver ChocoPoC Malware to Security Researchers

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

An update that solves 2 vulnerabilities can now be installed.

An update that solves 3 vulnerabilities can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves 2 vulnerabilities can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves 2 vulnerabilities can now be installed.

An update that solves one vulnerability can now be installed.

An update that solves one vulnerability can now be installed.

cifs-utils could be made to run programs as an administrator.

Ctrl+Alt+Oops: FortiBleed criminal’s logins stitch two gangs together

Several security issues were fixed in the Linux kernel.

Microsoft said exploitation was ‘less likely’ … but CISA just added SharePoint RCE to KEV list

nghttp2 could allow unintended access to network services.

LibVNCServer could be made to crash or run programs if it received specially crafted network traffic.

Can’t patch fast enough? Zero trust as a last line of defense
Pacemaker manufacturer Medtronic warns patients cybercrooks may have swiped health data
India gives WhatsApp three days to defend username rollout amid security fears
AWS raises AgentCore runtime quotas by up to 5x to help enterprises scale AI agents
Argo CD flaw shows why GitOps infrastructure should be treated as tier zero
Oracle E-Business Suite was under attack via critical flaw before the public exploit code was even released
Best practices for using AI to generate C# code
What do AI observability tools actually do?
Why an idempotency key isn’t an idempotency guarantee
Hackers shoveled snow for company, were rewarded with network admin access

Important: php:7.4 security update

Important: php:7.4 security update

Important: php:7.4 security update

Important: php:7.4 security update

Important: php:7.4 security update

Important: php:7.4 security update

TypeScript 7.0 reaches release candidate stage
Smashing Security podcast #474: Polymarket can predict the future. So how did it miss this hack?
SnapLogic MCP Builder eases creation of MCP servers
EvilTokens device-code phishing kit totally more evil than we all thought
Claude Sonnet 5.0 heads straight down the middle of the road to dodge controversy

https://security-tracker.debian.org/tracker/DSA-6374-1

AWS aims to lower log analytics costs with new analytics engine for managed OpenSearch
Somebody told DeepSeek to build in-browser ransomware and it gleefully complied
A better way to control AI costs

Important: kernel security, bug fix, and enhancement update

Important: python3.14 security, bug fix, and enhancement update

Important: mysql:8.0 security, bug fix, and enhancement update

Low: libpq security update

Moderate: gcc-toolset-12-binutils security update

Important: pandoc security update

Moderate: lynx security update

Moderate: autotrace security update

Moderate: autotrace security update

Important: perl:5.32 security update

Important: mariadb:10.11 security, bug fix, and enhancement update

Important: buildah security update

Moderate: golang security, bug fix, and enhancement update

Moderate: freeradius:3.0 security update

Moderate: python27:2.7 security update

Moderate: python-wheel security update

Moderate: libfastjson security update

Moderate: wayland security, bug fix, and enhancement update

Important: kernel security, bug fix, and enhancement update

Important: python3.14 security, bug fix, and enhancement update

This month in security with Tony Anscombe – June 2026 edition

Three-day patching deadlines, exposed fuel-tank systems, scams costing billions of dollars, and social media bans for children all gave Tony plenty to unpack in June 2026

Red teamers turned Claude Desktop into a double agent to do their evil bidding
End of support looms for .NET 8 and .NET 9

Important: perl-IO-Compress security update

Moderate: glibc security, bug fix, and enhancement update

Important: perl-Archive-Tar security update

Important: git-lfs security update

Important: giflib security update

Moderate: mod_md security update

Moderate: mod_md security update

Important: git-lfs security update

Moderate: glibc security, bug fix, and enhancement update

Important: giflib security update

Important: perl-Archive-Tar security update

Important: perl-IO-Compress security update

Moderate: mod_md security update

Important: git-lfs security update

Moderate: glibc security, bug fix, and enhancement update

Important: giflib security update

Important: perl-Archive-Tar security update

Important: perl-IO-Compress security update