Cybersecurity News

New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commands

Cybersecurity researchers have called attention to a new modular malware called TELEPUZ that's been spreading via websites infected with ClickFix lures since l…

New Agent Data Injection Attack Can Make AI Agents Misclick or Run Attacker Commands

Ask an AI agent to summarize the reviews on a product page, and a single planted review can make it click "Buy Now" instead. Ask a coding assistant to apply a …

GitHub

openSUSE 15.5 python3-lxml Critical Data Exposure Flaw 2026-2754-1

An update that solves one vulnerability can now be installed.

Linux

SUSE 7zip Key Data Exposure Vulnerability Buffer Overflow CVE-2026-22347-1

An update that solves eight vulnerabilities can now be installed.

Linux

openSUSE Python-pydata-sphinx-theme Important Fixes 2026-21173-1

An update that solves 2 vulnerabilities and has 2 bug fixes can now be installed.

Linux

openSUSE Python-Paramiko Moderate Data Integrity Issue CVE-2026-44405

An update that solves one vulnerability and has one bug fix can now be installed.

Linux

Rocky Linux mysql Important Database Security Issues RLSA-2023-3087

Important: mysql:8.0 security, bug fix, and enhancement update

Linux Databases

openSUSE Tumbleweed jackson-databind Moderate Security Issue CVE-2026-54512

An update that solves one vulnerability can now be installed.

Linux

Ubuntu 25.10 AMD Microcode Critical Data Exposure Vulnerability USN-8475-1

Several security issues were fixed in AMD Microcode.

Linux

Rocky Linux 10 PostgreSQL Key Database Security Alert RLSA-2026-27742

Important: postgresql18 security update

Linux Databases

Debian LTS Yelp Serious Data Exfiltration Threat DLA-4647-1

A vulnerability was discovered in yelp, the GNOME help browser, that allows a crafted help document to read files accessible to the user and exfiltrate them to…

Linux

SUSE Containerized Data Importer Important Security Fix 2026-2493-1

An update that solves 12 vulnerabilities can now be installed.

Linux

The openSUSE containerized-data-importer has been fixed for CVE-2024-3727

An update that solves one vulnerability can now be installed.

Linux

openSUSE: 2026:11054-1 : containerized-data-importer-1.65-api-1.65.0-1.1

An update that solves one vulnerability can now be installed.

Linux

openSUSE Tumbleweed Containerized Data Importer Vulnerability 2026-11074-1

An update that solves one vulnerability can now be installed.

Linux

openSUSE Tumbleweed Moderate Containerized Data Importer CVE-2024-3727

An update that solves one vulnerability can now be installed.

Linux

GitHub Breached — Employee Device Hack Led to Exfiltration of 3,800+ Internal Repos

GitHub on Tuesday said it's investigating unauthorized access to its internal repositories after the notorious threat actor known as TeamPCP listed the platfor…

GitHub

Debian 11 tzdata Significant Timezone Update DLA-4569-1 Released

Linux

Rocky Linux 8 tigervnc Major Security Flaw and Data Leakage RLSA-2026-13418

Important: tigervnc security update

Linux

ubuntu 22 L23-2023-5432-1 core-updates Serious Security Breach Alert

An update that solves one vulnerability and has one security fix can now be installed.

Linux

Fedora 42 xdg-dbus-proxy CVE-2026-34080 Data Leak Alert 2026-adc66b374

Update the package, including fix for CVE-2026-34080. See also: upstream security advisory

Linux

Ubuntu 22.04 LTS USN-8217-1 node-follow-redirects Moderate Risk Data Leak

Several security issues were fixed in follow-redirects.

Linux

PhantomCore Exploits TrueConf Vulnerabilities to Breach Russian Networks

A pro-Ukrainian hacktivist group called PhantomCore has been attributed to attacks actively targeting servers running TrueConf video conferencing software in R…

Debian LTS DLA-4548-1 Update Distro-Info-Data EoL Information

Linux