Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands
Cybersecurity researchers have disclosed details of a previously unseen variant of the DarkSword iOS exploit kit called P7 DarkSword. "Compared with the varian…
OAuth grants pile up faster than you can review them. Here's how to keep up.
OAuth grants create data highways between SaaS apps, AI agents, and other tools. And, they are multiplying faster than any security team can review them. As th…
Linux NTFS Bug Copies Crafted Index Data Before Checking Its Size
Andrey Misiurov has proposed a patch for a Linux NTFS bug that lets a crafted disk image make the kernel read beyond a memory buffer.
Debian LTS DLA-4820-1 node-lodash Critical Integrity Breach
Several vulnerabilities were discovered in node-lodash, a Node.js module providing utility functions for common programming tasks. CVE-2025-13465 Prototype pol…
openSUSE jackson-databind Moderate Security Patch 2026-11877-1
An update that solves 5 vulnerabilities can now be installed.
openSUSE Tumbleweed Jackson Dataformat CSV Security Update 2026-11879-1
An update that solves one vulnerability can now be installed.
Debian LTS Swift Significant Data Exposure CVE-2026-71191 DLA-4801-1
Two vulnerabilities were discovered in Swift, OpenStack's object storage service, that could lead to information disclosure. CVE-2026-71191 / OSSA-2026-030 An …
Debian LTS lxml Significant Data Leak Privilege Escalation DLA-4799-1
Multiple vulnerabilities were discovered in lxml, a set pythonic binding for the libxml2 and libxslt libraries, which may lead to information disclosure or pri…
SUSE 16.0 Alloy Key Vulnerabilities in Denial of Service and Data Leak
An update that solves seven vulnerabilities can now be installed.
SUSE Containerized-Data-Importer Important Security Update 2026-4209-1
An update that solves 27 vulnerabilities can now be installed.
Fedora 43 python-configargparse Vulnerability Exposes Critical Config Data
Update to 1.7.7. Version 1.7.6 is a security fix for GHSA-6m27-337c-jcgf. Config file or environment variable can trigger writing out a config file, overwritin…
openSUSE Update Addresses Vulnerabilities in Containerized Data Importer
An update that solves 5 vulnerabilities can now be installed.
openSUSE Leap 16.0 Security Update Containerized Data Importer Fixes
An update that solves 39 vulnerabilities and has 21 bug fixes can now be installed.
Ubuntu curl Important Sensitive Data Exposure USN-8651-1 CVE-2026-11856
Ubuntu Security Notice USN-8651-1 warns of a curl vulnerability affecting multiple Ubuntu releases, allowing sensitive information exposure. Users should updat…
Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks
Cybersecurity and intelligence agencies from South Korea and the U.S. warned of Gunra ransomware attacks targeting critical infrastructure sectors and organiza…
Gunra Ransomware Exploits Fortinet FortiOS, FortiProxy Flaws to Breach Networks
Cybersecurity and intelligence agencies from South Korea and the U.S. warned of Gunra ransomware attacks targeting critical infrastructure sectors and organiza…
Debian Caddy Important Access Control Breaches DSA-6429-1 CVE-2026-27585
Multiple vulnerabilities in the Caddy web server can lead to unauthorized access and other security issues; users are urged to upgrade to version 2.6.2-12+deb1…
Fedora pgAdmin4 Critical Data Issues Remote Access 2026-f0550055a7
Fedora 44 has released an update for pgAdmin 4 to version 9.17, fixing various security vulnerabilities and enhancing features for PostgreSQL administration an…
Oracle 10 Tomcat Important Data Encryption Issues and Fixes ELSA-2026-18537
Oracle released security updates for Tomcat on Oracle Linux 10 to address various vulnerabilities, including important fixes for information disclosure and enc…
openSUSE Containerized Data Importer Moderate Threat Advisory 2026-11305-1
An update that solves 13 vulnerabilities can now be installed.
openSUSE Tumbleweed Jackson-Databind Moderate Threat Update 2026-11279-1
An update that solves 2 vulnerabilities can now be installed.
openSUSE 15.5 python3-lxml Critical Data Exposure Flaw 2026-2754-1
An update that solves one vulnerability can now be installed.
SUSE 7zip Key Data Exposure Vulnerability Buffer Overflow CVE-2026-22347-1
An update that solves eight vulnerabilities can now be installed.
openSUSE Python-pydata-sphinx-theme Important Fixes 2026-21173-1
An update that solves 2 vulnerabilities and has 2 bug fixes can now be installed.