Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
INC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 Flaws
The INC Ransomware operation has emerged as the "dominant threat actor" exploiting the recently disclosed security flaws in SonicWall Secure Mobile Access (SMA…
Fedora 43 GitPython 3.1.55 Security Fix GHSA Updates 2026-7dfa949ea9
The Fedora 43 update for GitPython version 3.1.55 addresses multiple vulnerabilities and optimizes object handling for large datasets in this Python library fo…
PostgreSQL 16.14 Key Availability and Security Risks for Fedora 44 in 2026
Fedora 44 has released an automatic update for postgresql16 to version 16.14, addressing multiple security vulnerabilities and including necessary client progr…
Fedora 44 Valkey Important TLS Remote Code Exec Vuln 2026-3d18a65cc4
Fedora has released Valkey 9.0.5 with security fixes addressing remote code execution vulnerabilities and numerous bug fixes, enhancing performance and stabili…
openSUSE java-17-openjdk Important Denial of Service Issues Fix 2026-3406-1
A security update for java-17-openjdk resolves nine vulnerabilities, enhancing security by addressing potential information disclosure, unauthorized data acces…
openSUSE 2026-3396-1 webkit2gtk3 Important JavaScript Execution Risk
A security update for webkit2gtk3 addresses 23 vulnerabilities, including issues that could lead to arbitrary JavaScript execution, unexpected crashes, and dat…
SUSE WebKit2GTK3 Important Memory Corruption Process Crash Fix 2026-3396-1
A security update for webkit2gtk3 addresses 23 vulnerabilities affecting multiple SUSE and openSUSE versions, improving the handling of web content and prevent…
Fedora 43 gpsd Important Command Injection Vulnerability CVE-2026-58459
Fedora 43 updates gpsd to version 3.26.1-7, addressing CVE-2026-58459 to fix a command injection vulnerability, allowing safer GPS data access for multiple cli…
openSUSE WebKit2GTK3 Important Memory Corruption Process Crash 2026-3338-1
SUSE has released an important security update for webkit2gtk3, addressing 23 vulnerabilities, including issues with memory corruption, process crashes, and da…
openSUSE Leap 16.0 agama-web-ui Important Security Patch SUSE-2026-21448-1
openSUSE released a security update for agama-web-ui addressing 13 vulnerabilities with 14 bug fixes, focusing on various issues related to data handling and s…
Fedora 43 Perl-Mojolicious Important CSRF Token Fix FEDORA-2026-6f12b08313
The Fedora update for perl-Mojolicious version 9.48 addresses a security flaw related to CSRF tokens, enhancing protection against BREACH attacks by masking to…
Fedora 44 perl-Mojolicious Critical CSRF Attack Mitigation 2026-4334fd85bc
The Fedora update for perl-Mojolicious 9.48 addresses a security issue with CSRF tokens vulnerable to BREACH attacks by masking tokens with a fresh random valu…
Mageia 10 libyang Security Advisory CVE-2026-41401 Heap Use-After-Free
Mageia 10 received an update addressing a security vulnerability, specifically a Heap Use-After-Free Write in XML Metadata Parsing (CVE-2026-41401), enhancing …
Ubuntu 26.04 LTS Linux Kernel Important Security Flaws USN-8603-1
Ubuntu 26.04 LTS users are advised to update their kernel due to multiple vulnerabilities affecting AMD processors, including potential privilege escalation an…
Debian webkit2gtk Critical JavaScript Exec Risk DSA-6398-1
Multiple vulnerabilities in WebKitGTK have been identified, leading to process crashes, memory corruption, and potential data leaks; users are urged to upgrade…
Fedora 43 perl-DBI Critical Denial of Service Fix FEDORA-2026-c0abcba354
Fedora 43 released an update for perl-DBI version 1.651, addressing multiple security vulnerabilities including CVE-2026-15043 and others, improving database A…
Debian LTS xz-utils Critical Buffer Overflow Vuln DLA-4690-1 CVE-2026-34743
It was discovered that there was a potential buffer overflow in xz-utils, a popular data-compression utility and library. CVE-2026-34743 If the lzma_index_deco…
New Bit2Watt Attack Could Let Cloud Tenants Disrupt Power Grids Without an Exploit
A cloud tenant using nothing but ordinary GPU access can push a data center's power draw up and down fast enough to threaten the grid it runs on, with no explo…
New 7-Zip Vulnerability Could Let Crafted XZ Archives Run Code During Extraction
Opening a crafted XZ archive in 7-Zip could let an attacker run code on the machine. The flaw, CVE-2026-14266, is a heap-based buffer overflow in how the archi…
Fedora 44 Erlang Important Denial Of Service Auth Bypass CVE-2026-48858
Backport fixes for CVE-2026-48858 (ftp SSRF), CVE-2026-49759 (SCTP DoS), CVE-2026-48860 (dist-over-TLS auth bypass), CVE-2026-54886 (ssh SFTP DoS), CVE-2026-54…
Fedora 43 Erlang Critical Auth Bypass DoS Vulnerability Fix 2026-965be97ac0
Backport fixes for CVE-2026-48858 (ftp SSRF), CVE-2026-49759 (SCTP DoS), CVE-2026-48860 (dist-over-TLS auth bypass), CVE-2026-54886 (ssh SFTP DoS), CVE-2026-54…
Fedora 44 python-django5 Low Threat CVE Updates 2026-595d35a4d1
Update python-django5 to version 5.2.16 Fixes three low-severity CVEs CVE-2026-48588: Potential exposure of private data via cached Set-Cookie response CVE-202…
Rocky Linux 9 jackson-annotations Important Code Execution Risk RLSA-2026
Important: jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update
Debian 11 dhcpcd5 Moderate Denial of Service Update DLA-4686-1
Two vulnerabilities were discovered in dhcpcd5, a DHCP client, which may result in denial of service and possibly data corruption. For Debian 11 bullseye, thes…