September 2, 2026
SUSE Linux Enterprise Micro 6.0 Kernel Security Update 2026-23389-1
SUSE Micro 6.0 Kernel Important Security Update 2026-23390-1
September 2, 2026
Cops, CrowdStrike disrupt Sality botnet by poisoning the network and diverting into sinkholes
International law enforcement agencies, working with CrowdStrike and Shadowserver Foundation, have disrupted Sality, a 23-year-old peer-to-peer botnet used [...]
September 1, 2026
Another Artifactory CVE under attack by AI agents or humans
Security researchers reported that someone is exploiting CVE-2026-82329, a critical JFrog Artifactory authentication-bypass bug, just days after the vendor [...]
September 1, 2026
Attacker stole a METR API key, used $600K worth of credits, and no one noticed for weeks
AI model testing organization METR has disclosed two attacks that happened earlier this year, including one in which an attacker stole an API key and spent [...]
September 1, 2026
SUSE libapr-util1 Critical SQL Injection Heap Overflow Vuln 2026-3905-1
September 1, 2026
SUSE python3-sqlparse Important Denial of Service Vulnern 2026-3906-1
September 1, 2026
SUSE Python-sqlparse Important Denial of Service Advisory 2026-3907-1
September 1, 2026
Firefox helps iPhone users bypass ads on web sites while making money showing its own ads
After several weeks of anticipation, Mozilla has started rolling out ad blocking to the iOS version of its popular browser, but you can still expect to see [...]
September 1, 2026
Anthropic pledges to try harder to keep models under control, asks partners to chip in
Anthropic says it’s taking steps to limit the misbehavior of its AI models after a review found Claude models going beyond the scope of fictional [...]
September 1, 2026
This month in security with Tony Anscombe – August 2026 edition
Details about the Hugging Face hack, critical infrastructure under attack, a spoofed in-flight Wi-Fi network, and more of this month’s cybersecurity news
September 1, 2026
Apache Fory serialization framework adds JSON support for Kotlin and Scala
The Apache Fory community has announced the release of Fory 1.7.0, an update of the multi-language serialization framework that adds Fory JSON support for [...]
September 1, 2026
OpenClaw rolls out system-wide overhaul, updates security controls across agent platform
OpenClaw has released what it describes as the largest update in its history, introducing a system-wide overhaul spanning runtime behavior, plugins, and [...]
September 1, 2026
33-hour BGP hijack of Softaculous traffic prompts security scramble
Softaculous and Virtualizor customers are being urged to reset credentials and inspect their servers after a 33-hour BGP hijacking incident diverted [...]
September 1, 2026
Why tech needs a new kind of English major
I saw Spider-Man: Brand New Day last week. I struggled to enjoy it. I guess I hit CGI overload, although its 89% score on Rotten Tomatoes suggests others [...]
September 1, 2026
A look at AWS’s agentic toolkit for cloud migration
Amazon Bedrock AgentCore is an AWS technology that deserves a closer look because it is not simply another migration automation tool. It is an agentic AI [...]
September 1, 2026
4 standards solve agent identity. None solves the harder question: Is it still the agent you approved?
I’ve stopped being surprised by the service account nobody can explain. It was created for a migration that finished years ago. It still holds credentials. [...]
September 1, 2026
Moburst Targets Fortune 500 Brands as AEO Partner
Moburst, a digital growth agency, is positioning its Answer Engine Optimization practice specifically at enterprise and Fortune 500 brands, arguing that [...]
September 1, 2026
Compose Multiplatform 1.12.0 welcomes coding agents with MCP server
JetBrains has released Compose Multiplatform 1.12.0, an update to the declarative framework for sharing Kotlin UI code across platforms. Highlights of the [...]
September 1, 2026
openSUSE Unbound Important DoS Threat Resolution 2026-3885-1
September 1, 2026
openSUSE Yast2-Samba-Client Important Command Injection Fix 2026-3888-1
September 1, 2026
openSUSE yast2-samba-client Important Command Injection Vuln 2026-3889-1
September 1, 2026
openSUSE 2026 yast2-auth-client Important OS Command Injection Fix
September 1, 2026
Broadcom says that enterprise AI agents need two things: Data they can trust and boundaries they can’t cross
For enterprises deploying AI agents, security and trust are top-of-mind issues. When given the authority to act autonomously, they can inadvertently leak [...]
September 1, 2026
openSUSE Python-httplib2 Important Memory Overflow Vuln 2026-3898-1
September 1, 2026
Ubuntu OpenZFS Important Authorization Bypass Risk USN-8705-2
September 1, 2026
Healthcare cyberattacks hit pacemakers and millions of patient records
Two major healthcare businesses, Boston Scientific and McKesson, disclosed more details over the weekend about separate cyberattacks that disrupted global [...]
August 31, 2026
Debian LTS Expat Security Update DLA-4765-1 for Various CVEs
August 31, 2026
Debian 11 to 12 libdbd-csv-perl Regression Fix Update DLA-4764-2
August 31, 2026
SUSE SSSD Moderate Out-of-Bounds Memory Issues Vuln 2026-23347-1
August 31, 2026
SUSE gzip Moderate Buffer Overflow Vulnerability 2026-23356-1
August 31, 2026
SUSE Unbound Important DoS Issues Fixed in Advisory 2026-23360-1
August 31, 2026
eBPF Security Research Misses eBPF’s Own Attack Surface
An eBPF security system can produce precise Linux telemetry while leaving a harder question unanswered: what happens if the eBPF layer itself is [...]
August 31, 2026
Linux CPU Hotplug Exposes Regmap IRQ Use-After-Free Path
Linux interrupt maintainer Thomas Gleixner traced a Kernel Address Sanitizer report to incomplete regmap IRQ cleanup on Aug 30, 2026. The crash appeared [...]
August 31, 2026
Linux GPU Security Issue: DRM Patch Addresses Cross-Driver Fence UAF Reads
Jonghyuk Kim submitted a Linux Direct Rendering Manager scheduler patch series on Aug 28, 2026 that targets a use-after-free read shared by several GPU [...]
August 31, 2026
OpenClaw 2.0 pours glitter on slow-burning security dumpster fire
OpenClaw has unveiled what its makers call its largest ever update – large enough to earn a 2.0 moniker – with usability taking center stage, along with [...]
August 31, 2026
Attack hides malware in PNGs and drops custom reverse tunnel on victims’ machines
An unknown miscreant is using “TerminalFix” to trick unsuspecting users into running PowerShell commands that infect their computers with a [...]
August 31, 2026
SUSE Qt6-SVG Vital Update Handling Use-After-Free CVE-2025-10729
August 31, 2026
SUSE gstreamer-plugins-bad Moderate Parser Desync CVE-2026-52718
August 31, 2026
SUSE python-pip Moderate Improper URL Handling Vuln 2026-23319-1
August 31, 2026
SUSE snphost Important OpenSSL Issues Fix Advisory 2026-23327-1
August 31, 2026
Anthropic cracks down on hijacked user accounts mining AI tokens
Rather than paying for their own Claude usage, crims are using malware to steal access to other people’s accounts. Aware of this issue, Anthropic has [...]
August 31, 2026
Cursor customers will lose access to OpenAI coding models in November
OpenAI will stop AI coding platform Cursor from accessing its models from November 12, following the acquisition of Cursor parent Anysphere by Elon Musk‘s [...]
August 31, 2026
Governance by design: Turning AI policy into executable controls
Governance determines whether a generative AI program remains a set of pilots or becomes a durable capability. I treat governance as engineering work. The [...]
August 31, 2026
Hands-on with Unsloth Desktop, for running and training LLMs locally
LM Studio makes it easy to run LLMs on one’s own hardware, whether as a desktop app or a server for others in one’s organization. But LM Studio isn’t the [...]
August 31, 2026
DSA-6477-1 linux – security update
August 30, 2026
openSUSE libopenssl-3-devel Important Security Fix 2026-11623-1
August 30, 2026
openSUSE coturn Moderate Security Update Vuln 2026-11617-1
August 30, 2026
Linux Kernel 7.1-rc5 Tracing Reader Use-After-Free Bug Discovery
Removing a Linux trace instance should end its lifetime. An open tracefs reader can currently keep using that instance after another task removes it, [...]
August 30, 2026