Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Rocky Linux Kernel Important Privilege Escalation RXSA-2026-50978
A security update for the Rocky Linux SIG Cloud 8 kernel addresses privilege escalation vulnerabilities, along with several bug fixes and enhancements affectin…
Rocky Linux 8 Kernel Important Fix Privilege Escalation RXSA-2026-50978
A significant kernel update for Rocky Linux SIG Cloud 8 addresses security vulnerabilities, specifically CVE-2025-54518, alongside bug fixes and enhancements, …
Rocky Linux Kernel Moderate RXSA-2026-49857 CVE-2026-52923 Security Update
An update for Rocky Linux SIG Cloud 8 addresses a kernel security flaw and includes bug fixes and enhancements, specifically targeting CVE-2026-52923 and KVM a…
Rocky Linux Kernel Low Denial of Service Issue RXSA-2026-49870
An update has been released for the Rocky Linux SIG Cloud 9 kernel, addressing a Denial of Service vulnerability and various bug fixes and enhancements.
Significant Security Update for Rocky Linux Kernel Addresses Multiple CVEs
An important kernel update for Rocky Linux SIG Cloud 9 addresses multiple security vulnerabilities and includes bug fixes and enhancements, improving system pe…
Installed Is Not Remediated: How to Verify Linux Security Patches in Production
There are several reasons why Linux has such a good reputation and has become such a good standard across the world. It is the power behind most internet serve…
Kubernetes Storage Flaws Expose a Dangerous Security Blind Spot
Two newly fixed storage bugs in Kubernetes showed more than just a problem with path traversal. They found a common security flaw in the cloud: powerful parts …
Ubuntu 26.04 LTS Kernel Critical Privilege Escalation Issues USN-8593-1
Ubuntu 26.04 LTS addresses multiple vulnerabilities in the Linux kernel affecting IBM and Oracle Cloud systems, requiring users to update and possibly recompil…
Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution
Open a repository in Cursor on Windows and, if a file named git.exe is sitting in the project root, Cursor runs it. No click, no approval dialog, no warning th…
GhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding Agents
Researchers at Wiz found that a flaw in six popular AI coding assistants lets a booby-trapped code project quietly take control of a developer's computer. The …
Linux Foundation Launches Akrites to Strengthen Software Supply Chain Security
The Linux Foundation has officially launched Akrites, a coordinated industry initiative designed to improve how critical open source vulnerabilities are valida…
Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs
A high-severity flaw in Amazon Q Developer let a malicious repository run commands and steal a developer's cloud credentials. The path was short: a developer o…
Ivanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilities
Fortinet, Ivanti, and SAP have released security updates to address multiple critical security vulnerabilities that could result in arbitrary code execution an…
Actively Exploited Chromium V8 Zero-Day: What Linux Admins Need to Know
CISA added CVE-2026-11645 to its Known Exploited Vulnerabilities catalog after Google confirmed active exploitation of the flaw. The bug sits in V8, the JavaSc…
Debian WebKitGTK Critical CVE-2025-46299 App Disclosure March 2026
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-46299 Google Big Sleep discovered that processing maliciously crafted …
Tax Search Ads Deliver ScreenConnect Malware Using Huawei Driver to Disable EDR
A large-scale malvertising campaign active since January 2026 has been observed targeting U.S.-based individuals searching for tax-related documents to serve r…
Debian Bookworm DSA-6165-1 Chromium Critical Exec Denial of Service CVEs
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. Google is awar…
Debian LTS 11 nova Important Resize Safety Issue DLA-4486-1 CVE-2026-24708
Dan Smith discovered that nova, a cloud computing fabric controller, calls qemu-img without format restrictions for resize, which may result in unsafe image re…
Debian DSA-6145-1 Nova Image Resize Issue CVE-2026-24708
Dan Smith discovered that nova, a cloud computing fabric controller, calls qemu-img without format restrictions for resize, which may result in unsafe image re…
CISA Flags Four Security Flaws Under Active Exploitation in Latest KEV Update
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, cit…
New Chrome Zero-Day (CVE-2026-2441) Under Active Attack — Patch Released
Google on Friday released security updates for its Chrome browser to address a security flaw that it said has been exploited in the wild.The high-severity vuln…
⚡ Weekly Recap: AI Skill Malware, 31Tbps DDoS, Notepad++ Hack, LLM Backdoors and More
Cyber threats are no longer coming from just malware or exploits. They’re showing up inside the tools, platforms, and ecosystems organizations use every day. A…
Traditional Security Frameworks Leave Organizations Exposed to AI-Specific Attack Vectors
In December 2024, the popular Ultralytics AI library was compromised, installing malicious code that hijacked system resources for cryptocurrency mining. In Au…
Fedora 43 CEF High CVE-2025-14765 Critical Update for WebGPU Issues
Update to cef-143.0.10+g8aed01b + chromium-143.0.7499.146 (rhbz#2423482) High CVE-2025-14765: Use after free in WebGPU High CVE-2025-14766: Out of bounds read …