Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Simjacker is Being Actively Exploited in The Wild To Steal Location Data
In the murky realm of hacking and jacking, cybercriminals are now using a primitive method for attacking users. Reportedly, researchersSimjacker is Being Activ…
Instagram Flaw That Could Have Previously Exposed User Data Now Patched
It would seem that Facebooks’ Instagram frequently makes it to the news due to its security glitches. Recently, a researcherInstagram Flaw That Could Have Prev…
Debian Symfony Fixes Access Bypass and Data Exposure Issues
Multiple vulnerabilities have been found in the Symfony PHP framework which could lead to a bypass of access restrictions, information disclosure, XML external…
Fedora jackson-databind Update Fixes JSON Parsing and Path Issues
Fix CVE-2026-89407 CVE-2026-89425 CVE-2026-68497 CVE-2026-68498 CVE-2026-83557 CVE-2026-19032 CVE-2026-91777 across aligned packages updated to version 2.18.12
openSUSE Containerized Data Importer 1.65 Fixes Five Security Issues
An update that solves 5 vulnerabilities can now be installed.
Debian LTS Chromium Update Fixes Code Execution and Data Exposure
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For Debian 12 …
Debian Xen Update Addresses Escalation and Data Exposure
Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in guest-to-host privilege escalation or information disclosure. For th…
SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records
SonicWall has warned of two vulnerabilities impacting end-of-life Global Management System (GMS) systems that it said will not be patched. Details of the secur…
Russia-Aligned Gorbag Hackers Exploit WinRAR Flaw to Deploy Data-Stealing Malware
A Russia-aligned threat actor known as Gorbag has been observed using simple information stealer malware in attacks targeting Ukrainian organizations. "Active …
Debian LTS Chromium Update Addresses Code Execution and Data Exposure
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For Debian 12 …
Debian Thunderbird Fixes Code Execution and Data Exposure
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure For the stable distrib…
Debian Thunderbird Update Addresses Code Execution and Data Exposure
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure Debian follows the Thu…
Debian's Chromium Update Fixes Code Execution and Data Exposure
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For Debian 12 …
SUSE coreutils 9.6 Fixes uniq Denial of Service and Data Disclosure
An update that solves one vulnerability can now be installed.
openSUSE Datamodel Code Generator Update for CVE-2026-107377
An update that solves one vulnerability can now be installed.
openSUSE Coreutils Fixes Uniq Denial of Service and Data Exposure
An update that solves one vulnerability and has one bug fix can now be installed.
Oracle Linux 9 jackson-databind Update for CVE-2026-91777
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
SUSE alsa Update Fixes Data Leak and Configuration Crashes
An update that solves two vulnerabilities can now be installed.
openSUSE Leap 15.5 alsa Fixes Data Leak and Application Crashes
An update that solves two vulnerabilities can now be installed.
Rocky Linux Python36 Security Flaw Causes Data Exposure and DoS Risk
Important: python36:3.6 security update
openSUSE python3-paramiko Moderate Data Integrity Issue CVE-2026-44405
An update that solves one vulnerability can now be installed.
SUSE python3-paramiko Moderate Data Integrity Vulnerability CVE-2026-44405
An update that solves one vulnerability can now be installed.
P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands
Cybersecurity researchers have disclosed details of a previously unseen variant of the DarkSword iOS exploit kit called P7 DarkSword. "Compared with the varian…
Linux NTFS Bug Copies Crafted Index Data Before Checking Its Size
Andrey Misiurov has proposed a patch for a Linux NTFS bug that lets a crafted disk image make the kernel read beyond a memory buffer.