Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Cisco Addressed Multiple Bugs In Data Center Network Manager
Cisco recently issued patches for numerous security bugs in the Data Center Network Manager. These include multiple medium and high-severityCisco Addressed Mul…
StrandHogg 2.0 Vulnerability Targets Android Devices To Steal Data
Last year, Android devices suffered cyber attacks after attackers exploited the StrandHogg vulnerability to steal banking data. Now, after aStrandHogg 2.0 Vuln…
Hackers Breach LineageOS, Ghost, DigiCert Servers Using SaltStack Vulnerability
Days after cybersecurity researchers sounded the alarm over two critical vulnerabilities in the SaltStack configuration framework, a hacking campaign has alrea…
New 'CacheOut' Attack Leaks Data from Intel CPUs, VMs and SGX Enclave
Another month, another speculative execution vulnerability found in Intel processors.If your computer is running any modern Intel CPU built before October 2018…
WP Database Reset Plugin Had Some 'Easily Exploitable' Vulnerabilities
Another threat to WordPress sites has surfaced online. Researchers have discovered some serious security vulnerabilities in theÂWP Database Reset plugin.WP Dat…
Debian: DSA-4542-1: jackson-databind security update
It was discovered that jackson-databind, a Java library used to parse JSON and other data formats, did not properly validate user input before attempting deser…
PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network
Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected China-nexus …
Hackers steal customer data from major Russian hosting provider FirstVDS
Hackers have stolen passwords, access credentials and other sensitive data belonging to customers of Russian hosting provider FirstVDS after exploiting a vulne…
Sandbox vulnerability gives rogue AI agents a path to escape and leak data, research says
The new research, published by AI security startup AIR, found that a network filtering flaw in Vercel Sandbox — a tool used to run code in isolated environment…
Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks
Attackers behind a string of personal data leaks at Japanese organizations have abused APIs for mobile apps and targeted known software flaws, the JPCERT Coord…
Fedora 44 cockpit-machines Important Data Exposure Fix 2026-57e39fc2fa
Automatic update for cockpit-machines-357-1.fc44. Changelog for cockpit-machines * Wed Sep 23 2026 Packit - 357-1 - Harden against local attacks from accessing…
Linux File Truncation Patch Targets Data Loss Beyond the Requested Range
A Linux patch series addresses how file truncation or hole punching could discard valid data beyond the range an application asked to remove.
Fedora 45 evolution-data-server Update Bug Fixes CVE-2026-88859
Update to 3.62.0 evolution-data-server Bug Fixes: I#660 - GOA EWS: Do not require OABUrl in autodiscover I#662 - EBackend: Document how OAuth2 sources should a…
Fedora 43 perl-Data-Entropy Important Remote Access Fix CVE-2026-18536
Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. This update fixes that issue (CVE-2026-18536).
Fedora 44 perl-Data-Entropy Update CVE-2026-18536 Remote Entropy Fix
Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. This update fixes that issue (CVE-2026-18536).
Fedora 45 perl-Data-Entropy Important Remote Access Issue CVE-2026-18536
Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. This update fixes that issue (CVE-2026-18536).
openSUSE Tumbleweed Containerized Data Importer Moderate Issue 2026-11514-1
A new update for the containerized-data-importer1.66-api package in openSUSE Tumbleweed addresses twelve vulnerabilities, enhancing security for affected users.
Debian LTS Ironic Critical Sensitive Data Issues DLA-4743-1
Debian LTS Advisory DLA-4743-1 addresses multiple vulnerabilities in the Ironic package, including unredacted sensitive data in responses and command injection…
SUSE gstreamer-plugins-base Important User Data Validation Fix 2026-23059-1
SUSE has released an important security update for gstreamer-plugins-base, addressing the CVE-2024-4453 vulnerability related to improper validation of EXIF me…
Debian libraw Significant Vulnerability In Application Crash Data Integrity
Multiple vulnerabilities in the libraw library could cause application crashes, data corruption, or information disclosure, leading to upgrades in Debian 11 an…
Fedora 43 python-django5 Low Risk Data Exposure Bugs 2026-fbb9501b22
The Fedora 43 update for python-django5 to version 5.2.16 addresses three low-severity CVEs, enhancing security by fixing issues related to data exposure and p…
Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data
Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe Acrobat Chrome extension that has over 314 million users, wh…
Opera GX Flaw Let Malicious Sites Auto-Install Mods to Steal Data From Visited Pages
Researchers found a flaw in Opera GX, the gaming-focused version of the Opera browser, that let a malicious website silently install a browser add-on and use i…
AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack
Security firm Sysdig says it has found what it believes is the first ransomware attack run from start to finish by an AI agent.Its Threat Research Team calls t…