The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The Wikimedia Foundation, which hosts Wikipedia, has confirmed that it has discovered activity by rogue OpenAI agents on its platforms, including unsuccessful …
Google has now suspended submissions to its Open Source Software Vulnerability Rewards Program (OSS VRP) after being flooded by AI-generated reports.…
Automatic update for cockpit-machines-357-1.fc43. Changelog for cockpit-machines * Wed Sep 23 2026 Packit - 357-1 - Harden against local attacks from accessing…
A domain used as harmless placeholder text showed up in roughly 1,700 repositories. Then somebody registered it and started serving malicious lures. That is th…
container-tools:rhel8 security and bug fix update
Privilege escalation in a container does not always begin with a new exploit.
Linux maintainers are testing a patch for a page-cache bug after KASAN reproduced a use-after-free in filemap_map_pages(). On Sep 3, 2026, Andrew Morton said h…
Vulnerability management has been a staple of security programs since the dawn of the cybersecurity discipline. The symbiotic relationship between vulnerabilit…
openSUSE released a security update for apptainer addressing a vulnerability related to file extraction that could overwrite files outside designated directori…
A new update for the containerized-data-importer1.66-api package in openSUSE Tumbleweed addresses twelve vulnerabilities, enhancing security for affected users.
An update for kubevirt1.9-container-disk on openSUSE Tumbleweed addresses 10 security vulnerabilities, improving system security with various package installat…
SUSE released a moderate security update for containerd addressing CVE-2026-35469, which fixes a memory amplification vulnerability that could cause a denial o…
A security update for containerd addresses four vulnerabilities, including a significant denial of service risk, affecting various SUSE Linux Enterprise produc…
SUSE has released a security update for apptainer addressing two vulnerabilities, CVE-2026-39821 and CVE-2026-56852, affecting multiple SUSE products, with ins…
A security update for apptainer addresses two vulnerabilities, fixing issues with privilege escalation and handling invalid UTF-8 input, applicable to several …
An important security update for openSUSE Leap 16.0 addresses two vulnerabilities in apptainer, improving functionality and fixing issues related to file owner…
Anthropic says Claude Mythos Preview helped derive an end-to-end key-recovery attack against HAWK-256 and a 200- to 800-fold speedup for an attack on seven-rou…
SUSE released an important security update for python-aiohttp, addressing eight vulnerabilities that may lead to resource exhaustion, DoS attacks, and cookie h…
SUSE has released a security update for containerd addressing four vulnerabilities, including a denial of service issue in SPDY frame parsing for SUSE Linux Mi…
For decades, Linux defenders relied on a comfortable assumption: a public security patch did not imply an imminent vulnerability. While open-source openness ma…
Security firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba's JSON library for Java. In affected Spring Boot applica…
SUSE released a security update for python-aiohttp addressing 19 vulnerabilities, including memory usage issues and denial of service risks across multiple SUS…
Zimbra is urging customers to apply updates to address a critical security vulnerability impacting the Classic Web Client that could result in arbitrary code e…
Researchers at Wiz found that a flaw in six popular AI coding assistants lets a booby-trapped code project quietly take control of a developer's computer. The …