Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Linux Porter Discovered M1 Covert Channel Flaw Named ‘M1RACLESâ€
Hector Martin, a hacker who is porting Linux to Apple Silicon Macs through Asahi Linux, has discovered a novel covert channel vulnerability on the M1 chip, cal…
Mageia 2021-0210: pngcheck security upda
This update fixes a divide-by-zero crash bug (and probable vulnerability) in interlaced images with extra compressed data beyond the nominal end of the image d…
Mageia 2020-0363: ansible security upda
An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive data is exposed to content and json output. Thi…
Mageia 2020-0345: mysql-connector-python security upda
Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise MySQL Connectors. Successful attacks require human i…
Debian LTS: DLA-2344-1: mongodb security upda
A denial of service vulnerability was discovered in mongodb, an object/document-oriented database, whereby a user authorized to perform database queries may is…
Debian LTS: DLA-2327-1: lucene-solr security upda
A security vulnerability was discovered in lucene-solr, an enterprise search server. The DataImportHandler, an optional but popular module to pull in data
SciLinux: SLSA-2020-2433-1 Moderate: microcode_ctl on SL6.x i386/x86_
hw: Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543) * hw: L1D Cache Eviction Sampling (CVE-2020-0549) * hw: Vector Register Data Sampling (CVE-20…
Mageia 2020-0211: netkit-telnet security upda
Updated netkit-telnetd packages fix security vulnerability: A vulnerability was found where incorrect bounds checks in the telnet server's (telnetd) handling o…
Slack Patch Critical Vulnerability Allowing Automated Account Takeovers
A critical security vulnerability existed in Slack that could have lead to a massive data breach affecting its customers. SlackSlack Patch Critical Vulnerabili…
9 Years of AMD Processors Vulnerable to 2 New Side-Channel Attacks
AMD processors from as early as 2011 to 2019 carry previously undisclosed vulnerabilities that open them to two new different side-channel attacks, according t…
New ZombieLoad v2 Attack Affects Intel's Latest Cascade Lake CPUs
Zombieload is back.This time a new variant (v2) of the data-leaking side-channel vulnerability also affects the most recent Intel CPUs, including the latest Ca…
Debian LTS: DLA-1954-1: lucene-solr security update
A security vulnerability was discovered in lucene-solr, an enterprise search server. The DataImportHandler, an optional but popular module to pull in data
Warning: Researcher Drops phpMyAdmin Zero-Day Affecting All Versions
A cybersecurity researcher recently published details and proof-of-concept for an unpatched zero-day vulnerability in phpMyAdmin'one of the most popular applic…
Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control
Two of 31 newly disclosed flaws in Progress Software's MarkLogic Server database could let an account given only some management privileges take administrator …
Debian Stable Vips DSA-6552-1 Addresses Multiple Security Vulnerabilities
Several vulnerabilities have been discovered in vips, a fast image processing library. These vulnerabilities could result in denial of service, memory safety i…
Cisco warns of critical flaws allowing Nexus switch takeover
Cisco released security advisories for five critical vulnerabilities in its NX-OS data center network operating system that could be exploited to run arbitrary…
Atlassian warns of critical file-access flaw in Jira, Confluence
Atlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file-access in multiple self-hosted …
Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers
In 2024, MCP (Model Context Protocol) set out to become the USB-C of AI: one standard for connecting models, agents, and IDEs to tools and data. The protocol d…
Fedora 43 cockpit-machines Local Attack Disclosure CVE-2026-92768 Details
Automatic update for cockpit-machines-357-1.fc43. Changelog for cockpit-machines * Wed Sep 23 2026 Packit - 357-1 - Harden against local attacks from accessing…
Debian Redis High Severity Denial of Service Code Execution DSA-6538-1
Multiple vulnerabilities were discovered in Redis, a persistent key-value database, which could result in denial of service or the execution of arbitrary code.…
Debian libio-compress-perl Critical CPU Exhaustion and Code Exec DLA-4812-1
Multiple vulnerabilities were discovered in libio-compress-perl, a Perl library to allow reading and writing of compressed data. CVE-2025-15649 Uncaught except…
Debian WebKitGTK Important Heap Corruption Privilege Escalation DSA-6534-1
Several vulnerabilities have been discovered in the WebKitGTK web engine, that may lead to heap corruption, local privilege escalation, remote code execution, …
Debian LTS DLA-4802-1 Python-Django Critical Cache Exposure
Multiple vulnerabilities were discovered in Django, the Python-based web development framework: CVE-2026-48587 Potential exposure of private data via whitespac…
Fedora 43 perl-Imager Key Concerns with TGA Color Map and Palette
1.036 bump - Fix CVE-2026-93019 (TGA large color map size interpreted as negative) - Fix CVE-2026-93018 (paletted images: out-of-range color index returned uni…