Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 44 cockpit-machines Important Data Exposure Fix 2026-57e39fc2fa
Automatic update for cockpit-machines-357-1.fc44. Changelog for cockpit-machines * Wed Sep 23 2026 Packit - 357-1 - Harden against local attacks from accessing…
Linux File Truncation Patch Targets Data Loss Beyond the Requested Range
A Linux patch series addresses how file truncation or hole punching could discard valid data beyond the range an application asked to remove.
Fedora 45 evolution-data-server Update Bug Fixes CVE-2026-88859
Update to 3.62.0 evolution-data-server Bug Fixes: I#660 - GOA EWS: Do not require OABUrl in autodiscover I#662 - EBackend: Document how OAuth2 sources should a…
Fedora 43 perl-Data-Entropy Important Remote Access Fix CVE-2026-18536
Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. This update fixes that issue (CVE-2026-18536).
Fedora 44 perl-Data-Entropy Update CVE-2026-18536 Remote Entropy Fix
Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. This update fixes that issue (CVE-2026-18536).
Fedora 45 perl-Data-Entropy Important Remote Access Issue CVE-2026-18536
Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. This update fixes that issue (CVE-2026-18536).
openSUSE Tumbleweed Containerized Data Importer Moderate Issue 2026-11514-1
A new update for the containerized-data-importer1.66-api package in openSUSE Tumbleweed addresses twelve vulnerabilities, enhancing security for affected users.
Debian LTS Ironic Critical Sensitive Data Issues DLA-4743-1
Debian LTS Advisory DLA-4743-1 addresses multiple vulnerabilities in the Ironic package, including unredacted sensitive data in responses and command injection…
SUSE gstreamer-plugins-base Important User Data Validation Fix 2026-23059-1
SUSE has released an important security update for gstreamer-plugins-base, addressing the CVE-2024-4453 vulnerability related to improper validation of EXIF me…
Debian libraw Significant Vulnerability In Application Crash Data Integrity
Multiple vulnerabilities in the libraw library could cause application crashes, data corruption, or information disclosure, leading to upgrades in Debian 11 an…
Fedora 43 python-django5 Low Risk Data Exposure Bugs 2026-fbb9501b22
The Fedora 43 update for python-django5 to version 5.2.16 addresses three low-severity CVEs, enhancing security by fixing issues related to data exposure and p…
Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data
Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe Acrobat Chrome extension that has over 314 million users, wh…
Opera GX Flaw Let Malicious Sites Auto-Install Mods to Steal Data From Visited Pages
Researchers found a flaw in Opera GX, the gaming-focused version of the Opera browser, that let a malicious website silently install a browser add-on and use i…
AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack
Security firm Sysdig says it has found what it believes is the first ransomware attack run from start to finish by an AI agent.Its Threat Research Team calls t…
Vertex AI Vulnerability Exposes Google Cloud Data and Private Artifacts
Cybersecurity researchers have disclosed a security "blind spot" in Google Cloud's Vertex AI platform that could allow artificial intelligence (AI) agents to b…
OpenAI Patches ChatGPT Data Exfiltration Flaw and Codex GitHub Token Vulnerability
A previously unknown vulnerability in OpenAI ChatGPT allowed sensitive conversation data to be exfiltrated without user knowledge or consent, according to new …
Google Gemini Prompt Injection Flaw Exposed Private Calendar Data via Malicious Invites
Cybersecurity researchers have disclosed details of a security flaw that leverages indirect prompt injection targeting Google Gemini as a way to bypass authori…
Mageia 9: Critical Rand Function Vulnerability in perl-Data-Entropy
MGASA-2025-0279 - Updated perl-Data-Entropy packages fix security vulnerability
Fedora 43: luksmeta Critical Data Corruption Fix CVE-2025-11568
Fix handling of large metadata Fix: CVE-2025-11568
Researchers Find ChatGPT Vulnerabilities That Let Attackers Trick AI Into Leaking Data
Cybersecurity researchers have disclosed a new set of vulnerabilities impacting OpenAI's ChatGPT artificial intelligence (AI) chatbot that could be exploited b…
Fedora 41: WordPress 6.8.3 Critical Data Leak & XSS Vulnerability Alert
WordPress 6.8.3 Release Security updates included in this release: A data exposure issue where authenticated users could access some restricted content. Indepe…
Core Linux System Component "Udisks" Opens the Door to Unauthorized Access, Data Leaks
It's always unnerving when a system service you rely on day-to-day turns out to be a potential gateway for unauthorized access. That's the story with CVE-2025-…
Storm-0501 Exploits Entra ID to Exfiltrate and Delete Azure Data in Hybrid Cloud Attacks
The financially motivated threat actor known as Storm-0501 has been observed refining its tactics to conduct data exfiltration and extortion attacks targeting …
LangSmith Bug Could Expose OpenAI Keys and User Data via Malicious Agents
Cybersecurity researchers have disclosed a now-patched security flaw in LangChain's LangSmith platform that could be exploited to capture sensitive data, inclu…