Menu

Latest articles

Fedora 44 perl-MIME-tools Update Addresses MIME Parsing Risks
Fedora 45 rust-num-modular Update Adds Crypto Crate Improvements
Fedora 45 Updates Rust num-bigint and Cryptography Crates
Fedora rust-num-modular0.6 Update Adds Rust Crate Improvements
Fedora rust-num-prime Update Adds Crypto Crate Improvements
Fedora 45 rust-zmij Update Improves Constant-Time Cryptography
Fedora 45 Updates Rust num-bigint and Related Crypto Crates
Fedora 45 Updates rust-ctutils and Related Rust Crypto Crates
Fedora 45 Updates for Rust-Based Elliptic Curve Cryptography
Fedora 45 Updates rust-crypto-bigint and Cryptography Crates
Fedora 45 Updates rust-zstd-sys to Improve zstd Crate Safety
Fedora rust-zstd-safe 8.2.0 Addresses Risks in the zstd Crate
Fedora rust-zstd Update Resolves Rust Crate Safety Issues
Fedora 45 Updates rust-zstd-safe7 for zstd Crate Issues
Fedora 45 rust-zstd0.13 Update Fixes zstd Crate Security Issues
Fedora 45 FreeRDP 3.33.0 Adds Updated Remote Desktop Clients
Fedora 45 Fixes Command Injection Vulnerability in the gpsprof Command
Fedora 45 Updates ruby-build to Version 20261023 with the Latest Changes
Fedora Goose Update Fixes Terminal Shell History Leak and Improves Security
Threat actor targets Indian fintechs on weekends when defenders aren’t watching
India’s Computer Emergency Response Team has warned the nation’s financial services industry of a “significant escalation” in attacks by what it describes [...]
Slackware OpenSSH Update Fixes the sshd Password Bypass
APT Package Swap Fix for Debian and Ubuntu-Based Linux Systems
A flaw in APT, the tool that installs software on Debian and Ubuntu, could let an attacker replace a package after it passed a security check.
Rails Fixes Show Where Web Application Security Can Fail
Rails, a software framework used to build websites, has fixed flaws that could let an uploaded file do more than its owner intended.
How Governments Detect VPN Traffic, and Why Encryption Alone Doesn’t Hide It
Feds warn grocers: Don’t chill on cyber defenses as freezer hacking spree heats up
If you have any industrial smart freezers, look out. The US federal government is urging owners and operators to disconnect them from the internet, apply [...]
The White House is apparently a popular residential proxy exit spot
Whether through malware or other means, devices associated with the White House network appear to be serving as residential proxy exit nodes, potentially [...]
DSA-6612-1 symfony – security update
DSA-6611-1 imagemagick – security update
DSA-6610-1 xen – security update
DSA-6609-1 trapperkeeper-authorization-clojure – security update
DSA-6608-1 puppet-agent – security update
DSA-6607-1 apt – security update
AWS launches Kiro bots to help devs coordinate AI coding agents
AWS on Thursday launched Kiro bots, generally available within Kiro Crew, its open-source multi-agent development environment, to help developers [...]
Get root on a musl Linux system by slamming it with an overly long password
On certain Linux systems, an attacker could gain root access by entering a password longer than 256 bytes. The vulnerability, dubbed *sshole by Wakefield [...]
October crypto-tracker hack: Access cracked, law enforcement tokens packed
Blockchain analysis outfit Chainalysis has confirmed that when attackers broke into its systems in October, they managed to grab usernames, password [...]
Hackers Tamper With Refrigeration Controls at France’s National Blood Service
OpenAI releases GPT-6 Cyber, and promises this one stays within ‘rules of engagement’
OpenAI, on Thursday, released its latest cybersecurity-tuned model, GPT-6 Cyber, which the House of Altman says combines “stronger cybersecurity [...]
SlippyNunchucks hijacks Sogou Input Method’s brand promotion mechanism to distribute malware
ESET Research analyzes a DNS hijacking operation abusing insecure HTTP communications in Windows versions of Sogou Input Method
Tobacco company got smoked by leaving secret recipes on a file share
Welcome once again to PWNED, where all of the security victims are self-owned. Today, we celebrate a company that makes a supremely unhealthy product [...]
OpenMatter Network Positions Decentralized Computing as an Alternative to Data Centers for AI
Anthropic won’t fix a Claude Dispatch flaw that could let attackers execute remote commands across corporate boundaries
A vulnerability in Anthropic’s Claude products lets any browser extension that can control Claude Dispatch make Claude Desktop run code on the computer – [...]
New York’s Queens Public Library battles ransomware crims: Wi-Fi, checkouts, and website go dark
New York City’s Queens Public Library (QPL) is battling a ransomware attack, it confirmed on Wednesday evening via social media and to patrons [...]
Beyond Cold Storage: Why Hardware Wallets Need Open Source and Clear Signing
Norway’s aid agency pwned and all users’ data is stolen
Norway’s national aid agency, Norad, has confirmed that cyber criminals broke into its systems, stealing information about each and every registered [...]
Moving Lightwell patches into production by orchestrating the release lifecycle
In this article:Vulnerability remediation requires more than just merging code: While opening a pull request (PR) updates a dependency, that’s not [...]
Future-proofing enterprise AI: The impact of post-quantum cryptography on Red Hat AI Enterprise
We are rapidly approaching an intersection of 2 generational technology shifts: The explosive adoption of generative artificial intelligence (AI), and the [...]
Sovereignty in the AI era: Choice, control, and autonomy
For the past few years, AI felt like a high-stakes exhibition game. Teams across every industry were on the pitch experimenting with large language models, [...]
Fake ChatGPT and Claude Apps Use Signed Executables to Install Yoba Malware
Meta acquires Conductor as AI coding shifts toward multi-agent development
Meta has acquired AI coding startup Conductor, gaining technology that coordinates work across competing AI coding agents as it seeks a bigger role in [...]
AlmaLinux 8 Expat Update Addresses DoS and Data Exposure Risks
AlmaLinux 8 libXtst Update Fixes a DoS in the RECORD Parser
Rocky Linux 9 libXi Update Blocks X11 Code Execution Risks
Rocky Linux 9 Thunderbird 153.5.0 Important Security Fixes
Rocky Linux 10 util-linux fixes mount and partition risks
Rocky Linux 10 PipeWire Fixes Pulse Server Stack Overflow
Rocky Linux 10 Podman Update Addresses OCI Archive File Writes
Rocky Linux 10 Kernel Fixes for Network and Memory Issues
Rocky Linux 10 libXi Update Fixes Device Reply Code Execution
Rocky Linux 10 OpenTelemetry Collector Gets Important Fixes
The Smartest Part of a Home Camera Is Moving Off the Cloud
Why enterprise AI needs unified metadata infrastructure
Enterprise AI has produced a lot of noise about models, GPUs, vector databases, and agent frameworks. Those conversations matter. But the shift that will [...]
Your LLM writes good SQL. That’s not the same as safe SQL
A few years into working with data, I’ve learned that the hardest part of an AI system is rarely the model. Usually it’s the question of who gets to ask [...]
Smashing Security podcast #491: How AI agents are spooking the banks
Apple turns iCloud into spy cloud, will start looking at public share links
If you share content using public iCloud links, Apple could soon be looking over your shoulder and checking for “harmful content.” The iBiz [...]
Debian Xen Update Addresses Escalation and Data Exposure
Debian Trapperkeeper Authorization Fixes Host ACL Checks
Debian Puppet Agent Update Blocks Server Code Execution
Fake GTA VI Download Sites Push Malware Ahead of Launch
Gorbag: Orcs at the border harvesting intelligence from Ukraine
ESET researchers uncover Gorbag, a Russia-aligned group using simple infostealers to harvest data from Ukrainian organizations near the front line
Firefox ESR 153.5.1-1.1 Gets a Moderate Fix on openSUSE
openSUSE cramfs-tools Update for CVE-2026-8274
openSUSE CoreDNS Update Fixes Remote Denial-of-Service Vulnerability
Amazon CloudWatch Agent DoS Fix for openSUSE Tumbleweed
openSUSE switcheroo Update Addresses Remote Service Disruption
openSUSE Trivy 0.76.0 Update Fixes Two Security Vulnerabilities
openSUSE vexctl Update Fixes Five Security Issues and Improves Security
openSUSE joserfc Update Fixes a Reported Security Issue
openSUSE Tumbleweed Updates for libpolkit-agent-1-0 package
openSUSE perl-Dancer2 2.2.2-1.1 Fixes Four Security Issues
Mageia 10 Minetest Fixes Lua Sandbox Escape and Code Execution
Mageia 10 Caja Update Restores Image Thumbnail Previews
Ubuntu ADOdb Fix for Crafted SQL Input and Program Execution
US gov IT worker pleads guilty to sending Top Secret files to Ethiopia
He swore an allegiance to the US, but he was working for someone else. An IT specialist who worked across US government departments and held Top Secret [...]
MariaDB enhances agent development for its next-gen database platform
MariaDB on Wednesday said it was adding four new agent-focused capabilities to Enterprise Platform 2027, the latest version of its enterprise database [...]
7 Best Security Add-Ons for Microsoft Entra in 2026
Rocky Linux 10 fence-agents Update Addresses PyJWT Authentication Bypass
Rocky Linux 10 DPDK Fixes Vhost and Memory Safety Issues
Rocky Linux 10 Kernel Update Fixes ethtool CMIS Reply Length
Rocky Linux 10 FreeRDP Update Fixes Remote Code Execution and DoS
Rocky Linux 9 DPDK Fixes Memory Errors Triggered by Guest Activity
Critical PyJWT Authentication Fixes for Rocky Linux 9 fence-agents
Rocky Linux 9 Cockpit Update Fixes DoS and Memory Leak Issues
Rocky Linux 9 Kernel Update Fixes ethtool Issues and Improves Networking
Rocky Linux 8 raptor2 Fixes Heap Overflow and Code Execution
Rocky Linux 8 FreeRDP Fixes Three Denial of Service Issues
Rocky Linux 8 Cockpit Update Fixes DoS and Memory Leak Issues
Rocky Linux 8 python-dns Update Stops DNS Traversal DoS
Hackers Alter Refrigeration Settings, Forcing European Stores to Discard Food
Cockpit fixes for Oracle Linux 9 address three reported issues
Oracle Linux 9 fence-agents Update Fixes Five PyJWT Issues