Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Ubuntu Libgit2 Security Advisory USN-8628-1 Multiple Issues Fixed
Ubuntu released security updates for libgit2 addressing multiple vulnerabilities that could allow remote code execution, denial of service, and credential leak…
SUSE OpenSSL-3 Important DoS Impact Advisory 2026-23058-1
An important security update for OpenSSL 3 on SUSE Linux Micro 6.0 addresses a DoS vulnerability related to remote memory allocations, fixable via standard upd…
Fedora 43 pgAdmin4 Security Advisory New Fixes for Multiple Risks
Fedora has released an update for pgAdmin 4 to version 9.17, addressing various bugs and vulnerabilities such as unauthenticated data manipulation and remote c…
openSUSE openssl-3 Moderate DoS Risk Advisory 2026-3486-1
A security update for openssl-3 has been released for several SUSE products, addressing a remote denial of service vulnerability in the TLS ClientHello. Users …
Fedora 43 ProFTPD ACL Bypass Fix CVE-2026-35025 Advisory 2026-d314ce6051
The Fedora update for ProFTPD version 1.3.9c includes a new module, mod_procfs, which addresses a critical ACL bypass vulnerability by preventing certain file …
Mageia tdlib Bug Fix Security Advisory 2026-0072 for Telegram Client
The article announces updates for purple-telegram-tdlib in Mageia 10 and 9, addressing a chat access issue for group administrators and migrating to a new acti…
SUSE glib2 Important Out-of-Bounds Errors Advisory 2026-3235-1
A security update for glib2 addresses six vulnerabilities, enhancing the security of various SUSE products and improving protection against potential out-of-bo…
Mak’s Weekly Security Roundup: Linux Updates You Shouldn't Ignore This Week
Before the week gets away from you, take a look at what's landed across the Linux ecosystem. The volume of security advisories hasn't slowed, and while not eve…
Fedora 43 perl-Archive-Tar Important Path Traversal CVE-2026-42496 Advisory
Fixed CVE-2026-42496 - Path traversal via crafted symlinks allows arbitrary file access Backported from 3.08
Microsoft Warns of Two Actively Exploited Defender Vulnerabilities
Microsoft has disclosed that a privilege escalation and a denial-of-service flaw in Defender has come under active exploitation in the wild.The former, tracked…
Ubuntu Copy Fail High Local Privilege Escalation Threat Advisory 2026-31431
Most Linux hardening focuses on access. This vulnerability bypasses that entirely.
Fedora 43 Valkey 8.1.6 DoS Fix Advisory 2026-8d275f4438
Valkey 8.1.6 - Released Mon 23 February 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Securit…
Microsoft Warns Developers of Fake Next.js Job Repos Delivering In-Memory Malware
A "coordinated developer-targeting campaign" is using malicious repositories disguised as legitimate Next.js projects and technical assessments to trick victim…
CISA Flags Four Security Flaws Under Active Exploitation in Latest KEV Update
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, cit…
Debian 11 libmatio Critical DoS Heap Corruption Advisory DLA-4459-1
Multiple vulnerabilities has been discovered in libmatio, a MAT File I/O Library. CVE-2025-50343 A Denial of Service (DoS) and in certain cases heap corruption…
Google Warns of Active Exploitation of WinRAR Vulnerability CVE-2025-8088
Google on Tuesday revealed that multiple threat actors, including nation-state adversaries and financially motivated groups, are exploiting a now-patched criti…
Debian OpenSSL Critical DSA-6113-1 DoS Information Leak Execution
Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit, which may result in denial of service, information leaks, or potentia…
CISA Updates KEV Catalog with Four Actively Exploited Software Vulnerabilities
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, ci…
n8n Warns of CVSS 10.0 RCE Vulnerability Affecting Self-Hosted and Cloud Versions
Open-source workflow automation platform n8n has warned of a maximum-severity security flaw that, if successfully exploited, could result in authenticated remo…
Fedora 42: roundcubemail Important XSS Fix with Advisory ID 2025-fec36f9eaf
Release 1.6.12 Support IPv6 in database DSN (#9937) Don't force specific error_reporting setting Fix compatibility with PHP 8.5 regarding array_first() Remove …
WatchGuard Warns of Active Exploitation of Critical Fireware OS VPN Vulnerability
WatchGuard has released fixes to address a critical security flaw in Fireware OS that it said has been exploited in real-world attacks.Tracked as CVE-2025-1473…
Fedora 42: Security Advisory for golang-github-facebook-time CVE-2025-65637
Update logrus for https://access.redhat.com/security/cve/cve-2025-65637
Hackers Actively Exploiting 7-Zip Symbolic Link–Based RCE Vulnerability (CVE-2025-11001)
A recently disclosed security flaw impacting 7-Zip has come under active exploitation in the wild, according to an advisory issued by the U.K. NHS England Digi…
ASD Warns of Ongoing BADCANDY Attacks Exploiting Cisco IOS XE Vulnerability
The Australian Signals Directorate (ASD) has issued a bulletin about ongoing cyber attacks targeting unpatched Cisco IOS XE devices in the country with a previ…