Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 43 pgAdmin4 Security Advisory New Fixes for Multiple Risks
Fedora has released an update for pgAdmin 4 to version 9.17, addressing various bugs and vulnerabilities such as unauthenticated data manipulation and remote c…
Mageia 10 libyang Security Advisory CVE-2026-41401 Heap Use-After-Free
Mageia 10 received an update addressing a security vulnerability, specifically a Heap Use-After-Free Write in XML Metadata Parsing (CVE-2026-41401), enhancing …
ThreatsDay Bulletin: $290M DeFi Hack, macOS LotL Abuse, ProxySmart SIM Farms +25 New Stories
You scroll past one incident and see another that feels familiar, like it should have been fixed years ago, but it still works with small changes. Same bugs. S…
2027 Budget Proposal: Why CISA Funding Cuts Matter to Linux Security Teams
When federal security budgets are cut, the data that stops hackers from breaking into your Linux servers begins to dry up.
Fedora 42 python-ujson 5.12.0 Buffer Overflow DoS Advisory 2026-0f099ed388
Update to 5.12.0. This release updates the license field in the Python metadata and fixes a buffer overflow/infinite loop from indent handling.
Mageia 9 FlightGear Bug Fix Advisory MGAA-2026-0007 Released
MGAA-2026-0007 - Updated flightgear,simgear & flightgear-data packages fix bug
ThreatsDay Bulletin: GhostAd Drain, macOS Attacks, Proxy Botnets, Cloud Exploits, and 12+ Stories
The first ThreatsDay Bulletin of 2026 lands on a day that already feels symbolic — new year, new breaches, new tricks. If the past twelve months taught defende…
Fedora 42: roundcubemail Important XSS Fix with Advisory ID 2025-fec36f9eaf
Release 1.6.12 Support IPv6 in database DSN (#9937) Don't force specific error_reporting setting Fix compatibility with PHP 8.5 regarding array_first() Remove …
ThreatsDay Bulletin: AI Malware, Voice Bot Flaws, Crypto Laundering, IoT Attacks — and 20 More Stories
Hackers have been busy again this week. From fake voice calls and AI-powered malware to huge money-laundering busts and new scams, there’s a lot happening in t…
Mageia 9: Simgear Important Bug Fix Advisory MGAA-2025-0093
MGAA-2025-0093 - Updated simgear, flightgear and flightgear-data packages fix bug
Debian 11: libphp-adodb Important SQL Injection Advisory DLA-4340-1
libphp-adodb, a class library that provides abstractions for performing queries and managing databases, was affected by a vulnerability. Improper escaping of a…
ThreatsDay Bulletin: MS Teams Hack, MFA Hijacking, $2B Crypto Heist, Apple Siri Probe & More
Cyber threats are evolving faster than ever. Attackers now combine social engineering, AI-driven manipulation, and cloud exploitation to breach targets once co…
Malicious Nx Packages in ‘s1ngularity’ Attack Leaked 2,349 GitHub, Cloud, and AI Credentials
The maintainers of the nx build system have alerted users to a supply chain attack that allowed attackers to publish malicious versions of the popular npm pack…
Manufacturing Security: Why Default Passwords Must Go
If you didn't hear about Iranian hackers breaching US water facilities, it's because they only managed to control a single pressure station serving 7,000 peopl…
China-linked Salt Typhoon Exploits Critical Cisco Vulnerability to Target Canadian Telecom
The Canadian Centre for Cyber Security and the U.S. Federal Bureau of Investigation (FBI) have issued an advisory warning of cyber attacks mounted by the China…
Debian LTS: DLA-4074-1: mariadb-10.5 Security Advisory Updates
A vulnerability was discovered in MariaDB, a SQL database server compatible with MySQL. A privileged attacker could cause a Denial-of-Service (DoS) of the Mari…
Debian LTS: DLA-4052-1: postgresql-13 Security Advisory Updates
A security issue was discovered in the PostgreSQL database system. Under certain usage patterns, improper neutralization of quoting syntax could make it possib…
Fedora 41: bind-dyndb-ldap 2025-3551f3ba1b Security Advisory Updates
Update to 9.16.33 (#2342784) Security Fixes: DNS-over-HTTPS flooding fixes. (CVE-2024-12705) Limit additional section processing for large RDATA sets. (CVE-202…
Fedora 41: bind 2025-3551f3ba1b Security Advisory Updates
Update to 9.16.33 (#2342784) Security Fixes: DNS-over-HTTPS flooding fixes. (CVE-2024-12705) Limit additional section processing for large RDATA sets. (CVE-202…
Debian: DSA-5863-1: libtasn1-6 Security Advisory Updates
Bing Shi reported a flaw in Libtasn1, a library to manage ASN.1 structures. Inefficient processing of input DER data containing a large number of SEQUENCE OF o…
CISA Warns of Active Exploitation in Trimble Cityworks Vulnerability Leading to IIS RCE
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned that a security flaw impacting Trimble Cityworks GIS-centric asset management softw…
CISA Warns of Active Exploits Targeting Trimble Cityworks Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned that a security flaw impacting Trimble Cityworks GIS-centric asset management softw…
Fedora 40: fastd 2025-29fc4fefd5 Security Advisory Updates
This release contains a number of small improvements and bugfixes, including mitigations for the LOW severity vulnerability CVE-2025-24356. Bugfixes Add mitiga…
Fedora 41: fastd 2025-b895b18cfe Security Advisory Updates
This release contains a number of small improvements and bugfixes, including mitigations for the LOW severity vulnerability CVE-2025-24356. Bugfixes Add mitiga…