Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Instagram Flaw That Could Have Previously Exposed User Data Now Patched
It would seem that Facebooks’ Instagram frequently makes it to the news due to its security glitches. Recently, a researcherInstagram Flaw That Could Have Prev…
Debian Symfony Fixes Access Bypass and Data Exposure Issues
Multiple vulnerabilities have been found in the Symfony PHP framework which could lead to a bypass of access restrictions, information disclosure, XML external…
Hackers exploit SSHole OpenSSH flaw to breach Linux systems
Hackers are actively exploiting the "SSHole" vulnerability (CVE-2026-123158) in OpenSSH to execute commands, steal credentials, and establish persistent access…
Fedora jackson-databind Update Fixes JSON Parsing and Path Issues
Fix CVE-2026-89407 CVE-2026-89425 CVE-2026-68497 CVE-2026-68498 CVE-2026-83557 CVE-2026-19032 CVE-2026-91777 across aligned packages updated to version 2.18.12
openSUSE Containerized Data Importer 1.65 Fixes Five Security Issues
An update that solves 5 vulnerabilities can now be installed.
QNAP says hackers breaching NAS devices in Plex2Shell attacks
QNAP urges users to update Plex Media Server to the latest version available in the QNAP App Center, as hackers are exploiting the Plex2Shell vulnerability cha…
Debian LTS Chromium Update Fixes Code Execution and Data Exposure
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For Debian 12 …
ThreatsDay: Apache OFBiz RCE, DreamHost Breach, DeFi Site Hijacks + 17 More Stories
How much damage can someone do without breaking much? Quite a lot, it seems. A stolen login can open doors across several systems. A trusted setting can be use…
Debian Xen Update Addresses Escalation and Data Exposure
Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in guest-to-host privilege escalation or information disclosure. For th…
SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records
SonicWall has warned of two vulnerabilities impacting end-of-life Global Management System (GMS) systems that it said will not be patched. Details of the secur…
Russia-Aligned Gorbag Hackers Exploit WinRAR Flaw to Deploy Data-Stealing Malware
A Russia-aligned threat actor known as Gorbag has been observed using simple information stealer malware in attacks targeting Ukrainian organizations. "Active …
Debian LTS Chromium Update Addresses Code Execution and Data Exposure
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For Debian 12 …
Debian Thunderbird Fixes Code Execution and Data Exposure
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure For the stable distrib…
Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two vulnerabilities impacting Adobe Commerce and Magento, and Google's Brotli…
Debian Thunderbird Update Addresses Code Execution and Data Exposure
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure Debian follows the Thu…
Debian's Chromium Update Fixes Code Execution and Data Exposure
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For Debian 12 …
SUSE coreutils 9.6 Fixes uniq Denial of Service and Data Disclosure
An update that solves one vulnerability can now be installed.
openSUSE Datamodel Code Generator Update for CVE-2026-107377
An update that solves one vulnerability can now be installed.
openSUSE Coreutils Fixes Uniq Denial of Service and Data Exposure
An update that solves one vulnerability and has one bug fix can now be installed.
CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server.…
Oracle Linux 9 jackson-databind Update for CVE-2026-91777
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
SUSE alsa Update Fixes Data Leak and Configuration Crashes
An update that solves two vulnerabilities can now be installed.
openSUSE Leap 15.5 alsa Fixes Data Leak and Application Crashes
An update that solves two vulnerabilities can now be installed.
openSUSE Helm Major Information Breach and Crash Fix 2026-22057-1
An update that solves 3 vulnerabilities and has 3 bug fixes can now be installed.