Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 44 Nextcloud 34.0.3 Important Security Advisories for 2026
Fedora 44 has released an update for NextCloud version 34.0.3, addressing multiple security vulnerabilities including cross-site scripting and prototype pollut…
Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second
Cybersecurity researchers have disclosed details of a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) from a co-located Wor…
SUSE google-osconfig-agent Important Security Fix Advisory 2026-23073-1
A security update for google-osconfig-agent addresses two vulnerabilities in SUSE Linux Micro 6.1, prompting users to install patches to mitigate risks of priv…
SUSE google-guest-agent Important Privilege Escalation Issues 2026-23077-1
A security update for google-guest-agent addressing two vulnerabilities in SUSE Linux Micro 6.1 is now available, with important fixes for privilege escalation…
SUSE google-guest-agent Fixes Critical Privilege Escalation and Loop Issues
A security update for google-guest-agent addresses two vulnerabilities in SUSE Linux Micro 6.0, facilitating potential privilege escalation and an infinite loo…
SUSE google-osconfig-agent Moderate Input Issue CVE-2026-56852 2026-3496-1
A security update for google-osconfig-agent addresses CVE-2026-56852, fixing an improper handling of invalid UTF-8 bytes that could cause an infinite loop in a…
SUSE google-guest-agent Moderate Infinite Loop Vulnern 2026-3497-1
A security update for google-guest-agent has been released to address CVE-2026-56852, which involves improper handling of invalid UTF-8 leading to infinite loo…
Google Deletes 3 ADK AI Workflows After Malicious GitHub Issue Could Trigger Privileged Agent
Google deleted three AI agent workflows from its Agent Development Kit (ADK) Python repository. Pillar Security showed that a public GitHub issue could manipul…
SUSE google-guest-agent Important Privilege Escalation Vulnern 2026-3439-1
SUSE has released a security update for google-guest-agent addressing two vulnerabilities that could lead to validation bypass and infinite loops, affecting se…
Fedora 43 Nextcloud 34.0.2 Advisory CVE-2026-59882 Security Risk
Fedora 43 has updated Nextcloud to version 34.0.2, enhancing file synchronization capabilities while addressing security flaws related to URI host validation i…
Fedora 44 Nextcloud 34.0.2 Security Issue Advisory 2026-df06189438
Fedora 44 has updated NextCloud to version 34.0.2, offering file syncing and sharing, with improvements and bug fixes related to security flaws and enhancement…
openSUSE Leap 16.0 google-guest-agent Privilege Escalation and Loop Issues
openSUSE has released a security update for google-guest-agent, addressing two vulnerabilities that could lead to privilege escalation and an infinite loop iss…
SUSE google-osconfig-agent Important Privilege Escalation Risk 2026-3432-1
A security update for google-osconfig-agent addresses two vulnerabilities, allowing privilege escalation and potential infinite loops, applicable to various SU…
openSUSE google-osconfig-agent Moderate Security Threat Vuln 2026-11349-1
The google-osconfig-agent-20260708.00-3.1 update for openSUSE Tumbleweed addresses a vulnerability identified as CVE-2026-56852, rated as moderate with CVSS sc…
Fedora 43 2026-4a2d23b470 google-osconfig-agent Important DoS Issues
Fedora 43 has released an update for the Google OS Config Agent, fixing several bugs and vulnerabilities identified by CVEs, and recommending installation via …
Fedora 44 google-osconfig-agent Denial of Service Update 2026-9781489c3a
The Fedora 44 update for the google-osconfig-agent version 20260717.00 includes several enhancements and bug fixes, addressing issues like build failures and a…
openSUSE Tumbleweed Google-Osconfig-Agent Moderate DoS Vuln 2026-11331-1
An update for the google-osconfig-agent on openSUSE Tumbleweed addresses a moderate vulnerability (CVE-2026-39821) that has been rated with CVSS scores of 7.4 …
Google Launches Gemini 3.5 Flash Cyber AI to Find and Fix Software Vulnerabilities
Google's DeepMind on Tuesday announced the release of Gemini 3.5 Flash Cyber, a specialized artificial intelligence (AI) model built atop 3.5 Flash that's desi…
New Bit2Watt Attack Could Let Cloud Tenants Disrupt Power Grids Without an Exploit
A cloud tenant using nothing but ordinary GPU access can push a data center's power draw up and down fast enough to threaten the grid it runs on, with no explo…
Linux IAM Misconfigurations That Put Cloud Environments at Risk
For years, we secured our Linux infrastructure by building walls: VPCs, security groups, and hardened SSH configurations. We treated the cloud like a virtual d…
ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API
The threat actor known as ToddyCat has been attributed to a new malware called Umbrij that's designed to gain surreptitious access to a victim's email correspo…
DoJ Seizes Huione Cloud Account Tied to Cyber Scam Money Laundering
The U.S. Department of Justice (DoJ) on Tuesday announced the seizure of a cloud computing account put to use by subsidiaries of Cambodia-based corporate congl…
Ubuntu 26.04 Google Guest Agent Important Denial Service Issues USN-8447-3
Several security issues were fixed in Google Guest Agent.
New OXLOADER Loader Uses Malicious Google Ads to Deliver CastleStealer
Cybersecurity researchers have disclosed details of a new campaign that delivers CastleStealer by means of a previously unreported malware loader dubbed OXLOAD…