Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian Thunderbird Fixes Code Execution and Data Exposure
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure For the stable distrib…
Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two vulnerabilities impacting Adobe Commerce and Magento, and Google's Brotli…
Debian Thunderbird Update Addresses Code Execution and Data Exposure
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure Debian follows the Thu…
Debian's Chromium Update Fixes Code Execution and Data Exposure
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For Debian 12 …
SUSE coreutils 9.6 Fixes uniq Denial of Service and Data Disclosure
An update that solves one vulnerability can now be installed.
openSUSE Datamodel Code Generator Update for CVE-2026-107377
An update that solves one vulnerability can now be installed.
openSUSE Coreutils Fixes Uniq Denial of Service and Data Exposure
An update that solves one vulnerability and has one bug fix can now be installed.
CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server.…
Oracle Linux 9 jackson-databind Update for CVE-2026-91777
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
SUSE alsa Update Fixes Data Leak and Configuration Crashes
An update that solves two vulnerabilities can now be installed.
openSUSE Leap 15.5 alsa Fixes Data Leak and Application Crashes
An update that solves two vulnerabilities can now be installed.
openSUSE Helm Major Information Breach and Crash Fix 2026-22057-1
An update that solves 3 vulnerabilities and has 3 bug fixes can now be installed.
Rocky Linux Python36 Security Flaw Causes Data Exposure and DoS Risk
Important: python36:3.6 security update
openSUSE python3-paramiko Moderate Data Integrity Issue CVE-2026-44405
An update that solves one vulnerability can now be installed.
SUSE python3-paramiko Moderate Data Integrity Vulnerability CVE-2026-44405
An update that solves one vulnerability can now be installed.
P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands
Cybersecurity researchers have disclosed details of a previously unseen variant of the DarkSword iOS exploit kit called P7 DarkSword. "Compared with the varian…
OAuth grants pile up faster than you can review them. Here's how to keep up.
OAuth grants create data highways between SaaS apps, AI agents, and other tools. And, they are multiplying faster than any security team can review them. As th…
Linux NTFS Bug Copies Crafted Index Data Before Checking Its Size
Andrey Misiurov has proposed a patch for a Linux NTFS bug that lets a crafted disk image make the kernel read beyond a memory buffer.
Debian LTS DLA-4820-1 node-lodash Critical Integrity Breach
Several vulnerabilities were discovered in node-lodash, a Node.js module providing utility functions for common programming tasks. CVE-2025-13465 Prototype pol…
openSUSE jackson-databind Moderate Security Patch 2026-11877-1
An update that solves 5 vulnerabilities can now be installed.
openSUSE Tumbleweed Jackson Dataformat CSV Security Update 2026-11879-1
An update that solves one vulnerability can now be installed.
Debian LTS Swift Significant Data Exposure CVE-2026-71191 DLA-4801-1
Two vulnerabilities were discovered in Swift, OpenStack's object storage service, that could lead to information disclosure. CVE-2026-71191 / OSSA-2026-030 An …
Debian LTS lxml Significant Data Leak Privilege Escalation DLA-4799-1
Multiple vulnerabilities were discovered in lxml, a set pythonic binding for the libxml2 and libxslt libraries, which may lead to information disclosure or pri…
SUSE 16.0 Alloy Key Vulnerabilities in Denial of Service and Data Leak
An update that solves seven vulnerabilities can now be installed.