Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Ubuntu 5794-1: Linux kernel (AWS) vulnerabilities
Several security issues were fixed in the Linux kernel.
SUSE: 2022:3654-1 important: amazon-ssm-agent
An update that fixes one vulnerability is now available.
Ubuntu 5682-1: Linux kernel (AWS) vulnerabilities
Several security issues were fixed in the Linux kernel.
Ubuntu 5580-1: Linux kernel (AWS) vulnerabilities
Several security issues were fixed in the Linux kernel.
Ubuntu 5572-1: Linux kernel (AWS) vulnerabilities
Several security issues were fixed in the Linux kernel.
SUSE: 2022:2831-1 moderate: Recommended aws-efs-utils, python-ansi2html, python-py, python
An update that solves one vulnerability, contains one feature and has one errata is now available.
SUSE: 2022:2583-1 important: aws-iam-authenticator
An update that fixes one vulnerability is now available.
Ubuntu 5513-1: Linux kernel (AWS) vulnerabilities
Several security issues were fixed in the Linux kernel.
openSUSE: 2021:1206-1 moderate: aws-cli, python-boto3, python-botocore, python-service_i
An update that solves one vulnerability, contains two features and has 6 fixes is now available.
openSUSE: 2021:2817-1 moderate: aws-cli, python-boto3, python-botocore, python-service_i
An update that solves one vulnerability, contains two features and has 6 fixes is now available.
Linus Torvalds rejects 'beyond stupid' AWS-made Linux patch for Intel CPU Snoop atta
After much debate, Linus Torvalds has rejected a controversial patch to address potential leaks of secrets from a CPU's cores.
SUSE: 2020:0251-1 moderate: aws-c
An update that solves one vulnerability and has four fixes is now available.
Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed
Amazon's Threat Intelligence team on Wednesday said it detected an attempt to exploit the newly disclosed PHP2Shell vulnerabilities on October 17, 2026, agains…
Fedora 43 webkitgtk Important Security Update CVE-2026-84635 CVE-2026-64753
Update to 2.54.1: Allow pasting in-memory image data from clipboard. Add User-Agent quirk for Amazon Luna. Align the filter surface with the device pixel grid.…
Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers
Cybersecurity researchers have disclosed details of a mass-scanning campaign that has targeted Vite deployments siphon sensitive data.The first is an automated…
Ubuntu 16.04 Linux Kernel Important Privilege Escalation Issues USN-8530-2
Ubuntu 16.04 LTS received security updates for the linux-aws-hwe kernel to correct several vulnerabilities that could allow local attackers to escalate privile…
Ubuntu 26.04 Kernel Update Privilege Escalation USN-8618-1 CVE-2025-54518
Ubuntu 26.04 LTS has addressed multiple vulnerabilities in the Linux kernel affecting AWS and Raspberry Pi systems, requiring users to update their packages an…
GhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding Agents
Researchers at Wiz found that a flaw in six popular AI coding assistants lets a booby-trapped code project quietly take control of a developer's computer. The …
Linux Foundation Launches Akrites to Strengthen Software Supply Chain Security
The Linux Foundation has officially launched Akrites, a coordinated industry initiative designed to improve how critical open source vulnerabilities are valida…
Interlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026-20131 for Root Access
Amazon Threat Intelligence is warning of an active Interlock ransomware campaign that's exploiting a recently disclosed critical security flaw in Cisco Secure …
Ubuntu: Kernel Critical Updates Network DoS Vulnerabilities 2025:0011-1
Canonical has released a coordinated set of Ubuntu kernel advisories, including USN-7789-2, USN-7792-3, USN-7809-1, USN-7810-1, and USN-7811-1. Each update add…
Hazy Hawk Exploits DNS Records to Hijack CDC, Corporate Domains for Malware Delivery
A threat actor known as Hazy Hawk has been observed hijacking abandoned cloud resources of high-profile organizations, including Amazon S3 buckets and Microsof…
CERT-UA Identifies Malicious RDP Files in Latest Attack on Ukrainian Entities
The Computer Emergency Response Team of Ukraine (CERT-UA) has detailed a new malicious email campaign targeting government agencies, enterprises, and military …
AndroxGh0st Malware Targets Laravel Apps to Steal Cloud Credentials
Cybersecurity researchers have shed light on a tool referred to as AndroxGh0st that's used to target Laravel applications and steal sensitive data."It works by…