Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Railway warns devs to rotate secrets after potential breach
Cloud platform Railway published an urgent warning to users after detecting suspicious activity on its systems that store customer environment variables earlie…
CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server.…
Anthropic AI agent gives fake murder tip to US cops in global breach
Georgia Wells and Joseph Pisani report: Rogue AI models have hacked companies and tried to break into government websites. Now one has submitted a fake tip for…
Ubuntu curl Important Sensitive Data Exposure USN-8651-1 CVE-2026-11856
Ubuntu Security Notice USN-8651-1 warns of a curl vulnerability affecting multiple Ubuntu releases, allowing sensitive information exposure. Users should updat…
openSUSE Containerized Data Importer Moderate Threat Advisory 2026-11305-1
An update that solves 13 vulnerabilities can now be installed.
Debian 11 tzdata Significant Timezone Update DLA-4569-1 Released
Fedora 42 xdg-dbus-proxy CVE-2026-34080 Data Leak Alert 2026-adc66b374
Update the package, including fix for CVE-2026-34080. See also: upstream security advisory
Debian LTS DLA-4548-1 Update Distro-Info-Data EoL Information
Ubuntu 24.04 LTS Linux Kernel Critical Data Exploit Advisory USN-8031-3
Several security issues were fixed in the Linux kernel.
Ubuntu 24.04: linux-hwe-6.14 Critical Data Leakage Advisory USN-7856-1
Several security issues were fixed in the Linux kernel.
Ubuntu 25.04: Linux Kernel Critical Data Leak Advisory USN-7833-1
Several security issues were fixed in the Linux kernel.
SUSE: MariaDB Moderate Data Access Threats Advisory 2025:03275-1
* bsc#1239150 * bsc#1239151 * bsc#1249212 * bsc#1249213 * bsc#1249219
Mageia 9: QtBase6 & QtBase5 Critical DoS CVE-2025-5455 Advisory 2025-0212
An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code. If…
Microsoft Warns of Unpatched Office Vulnerability Leading to Data Exposure
Microsoft has disclosed an unpatched zero-day in Office that, if successfully exploited, could result in unauthorized disclosure of sensitive information to ma…
Nood RAT Malware Attacks Linux Servers, Threatens Sensitive Data
The Nood RAT malware is a new threat to Linux servers worldwide. Security researchers say Nood RAT is designed to steal sensitive information from targeted ser…
Hackers Exploited ColdFusion Vulnerability to Breach Federal Agency Servers
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned of active exploitation of a high-severity Adobe ColdFusion vulnerability by unidentifie…
Microsoft Warns of Cyber Attacks Attempting to Breach Cloud via SQL Server Instance
Microsoft has detailed a new campaign in which attackers unsuccessfully attempted to move laterally to a cloud environmentthrough an SQL Server instance."The a…
Multiple Hacker Groups Exploit 3-Year-Old Vulnerability to Breach U.S. Federal Agency
Multiple threat actors, including a nation-state group, exploited a critical three-year-old security flaw in Progress Telerik to break into an unnamed federal …
IBM == Insecure Business Machines: No-auth remote root exec exploit in Data Risk Manager drops after Big Blue snubs bug repo
IBM has admitted to making 'a process error, improper response' to a bug report that identified four vulnerabilities in its enterprise security software, and t…
Comodo Forums Hack Exposes 245,000 Users' Data ' Recent vBulletin 0-day Used
If you have an account with the Comodo discussion board and support forums, also known as ITarian Forum, you should change your password immediately.Cybersecur…
Debian DSA-6198-1 Valkey Critical Denial of Service Risk Advisory
Two security vulnerabilities were discovered in Valkey, a persistent key-value database with network interface, which could result in denial of service or data…
Debian LTS: DLA-4063-1: gnutls28 Security Advisory Updates
Bing Shi discovered that GnuTLS, a portable library which implements the Transport Layer Security and Datagram Transport Layer Security protocols, had ineffici…
Mageia 2025-0043: libtasn1 Security Advisory Updates
When an input DER data contains a large number of SEQUENCE OF or SET OF elements, decoding the data and searching a specific element in it take quadratic time …
CISA: No Wider Federal Impact from Treasury Cyber Attack, Investigation Ongoing
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday said there are no indications that the cyber attack targeting the Treasury Departmen…