The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A group of academics from VUSec and Scuola Superiore Sant'Anna have disclosed details of a new Spectre CPU vulnerability variant that affects Just-In-Time (JIT…
A malicious npm package named "indexed-btree" has been observed hiding its malicious behavior within application code rather than using lifecycle scripts, indi…
The crun container runtime has changed how GPU-enabled workloads launch a key graphics helper.
Debian released updates for nvidia-graphics-drivers, addressing multiple security vulnerabilities. Users are encouraged to upgrade to version 535.309.01-0+deb1…
Oracle Linux 9 has updated Java packages addressing CVEs for August 2026, including specifics on rpm files for x86_64 and aarch64 architectures and embargo det…
SUSE has released a security update for MozillaFirefox addressing 58 vulnerabilities, including critical issues in components like Graphics and JavaScript, wit…
Fedora 44 has updated trafficserver to version 10.2.0, enhancing functionality for HTTP caching and proxy services while addressing multiple security vulnerabi…
A malicious SIM card can order the device it sits in to run commands of the attacker's choosing. On the cellular modules built into electric-vehicle chargers, …
Fedora 43 has updated perl-Devel-Cover to version 1.51-4, enhancing code coverage metrics for Perl while also addressing previous security vulnerabilities rela…
An update for Rocky Linux 10 addresses kernel vulnerabilities and includes bug fixes and enhancements, specifically targeting denial of service issues and grap…
An update for perl-Devel-Cover 1.52-4.fc44 in Fedora 44 introduces code coverage metrics for Perl, alongside a Perl version update to 5.42.3 for improved quali…
Fedora 43 has released nsd version 4.15.0, improving Prometheus metrics, adjusting logging noise, and addressing multiple bugs, enhancing the performance and s…
Rocky Linux 8 has released an important security update for libXfont2 addressing multiple heap buffer overflow vulnerabilities with specific CVE identifiers an…
Mageia has released updated packages for version 10 to address security issues, specifically a heap buffer overflow and a use-after-free vulnerability in the g…
Mageia 10 has released updated Xonotic packages to address issues with broken online statistics support, as detailed in the bug report.
Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Ge…
A vulnerability has been found in the mesa 3D graphics library, possibly allowing out of bound memory access by craftet input. CVE-2026-40393 An out-of-bounds …
Threat actors associated with the Anubis ransomware operation have been observed exploiting the Citrix Bleed 2 (CVE-2025-5777) vulnerability to obtain initial …
Fixes GHSA-r3hx-x5rh-p9vv: via eval() in Elasticsearch Result Deserialization https://github.com/django-haystack/django- haystack/security/advisories/GHSA-r3hx…
Fixes GHSA-r3hx-x5rh-p9vv: via eval() in Elasticsearch Result Deserialization https://github.com/django-haystack/django- haystack/security/advisories/GHSA-r3hx…
BIRD 3.3.1 (2026-06-09) BGP: Fix crash when incoming connection for disabled protocol arrives BGP: Fix parsing labelled NLRIs with no next hop BGP: Fix cork be…
BIRD 3.3.1 (2026-06-09) BGP: Fix crash when incoming connection for disabled protocol arrives BGP: Fix parsing labelled NLRIs with no next hop BGP: Fix cork be…
A new Mini Shai-Hulud supply chain attack campaign, codenamed Miasma, has compromised @redhat-cloud-services packages to steal credentials and secrets from dev…
Linux security has traditionally depended on logs, metrics, and alerts. That model works well when systems behave predictably. Inputs come in, processes run, e…