Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
The Blind Spots of Agentic Pentesting and How to Close Them
AI-powered penetration testing can uncover complex attack paths, but safety restrictions and network limitations leave many assets and vulnerabilities untested…
Fedora 43 Aegisub CVE-2026-92705 Fixes Arbitrary Code Execution Advisory
Update to Aegisub 3.5.0, fixing CVE-2026-92705: arbitrary code execution when opening crafted ASS subtitle files containing associated Automation script refere…
Fedora 44 Aegisub 3.5.0 CVE-2026-92705 Arbitrary Code Exec Fix
Update to Aegisub 3.5.0, fixing CVE-2026-92705: arbitrary code execution when opening crafted ASS subtitle files containing associated Automation script refere…
Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control
Two of 31 newly disclosed flaws in Progress Software's MarkLogic Server database could let an account given only some management privileges take administrator …
Debian Stable Vips DSA-6552-1 Addresses Multiple Security Vulnerabilities
Several vulnerabilities have been discovered in vips, a fast image processing library. These vulnerabilities could result in denial of service, memory safety i…
Cisco warns of critical flaws allowing Nexus switch takeover
Cisco released security advisories for five critical vulnerabilities in its NX-OS data center network operating system that could be exploited to run arbitrary…
Atlassian warns of critical file-access flaw in Jira, Confluence
Atlassian is warning customers of a critical vulnerability, tracked as CVE-2026-21589, that can be exploited for arbitrary file-access in multiple self-hosted …
Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers
In 2024, MCP (Model Context Protocol) set out to become the USB-C of AI: one standard for connecting models, agents, and IDEs to tools and data. The protocol d…
Fedora 43 cockpit-machines Local Attack Disclosure CVE-2026-92768 Details
Automatic update for cockpit-machines-357-1.fc43. Changelog for cockpit-machines * Wed Sep 23 2026 Packit - 357-1 - Harden against local attacks from accessing…
Debian Redis High Severity Denial of Service Code Execution DSA-6538-1
Multiple vulnerabilities were discovered in Redis, a persistent key-value database, which could result in denial of service or the execution of arbitrary code.…
Debian libio-compress-perl Critical CPU Exhaustion and Code Exec DLA-4812-1
Multiple vulnerabilities were discovered in libio-compress-perl, a Perl library to allow reading and writing of compressed data. CVE-2025-15649 Uncaught except…
Debian WebKitGTK Important Heap Corruption Privilege Escalation DSA-6534-1
Several vulnerabilities have been discovered in the WebKitGTK web engine, that may lead to heap corruption, local privilege escalation, remote code execution, …
Debian LTS DLA-4802-1 Python-Django Critical Cache Exposure
Multiple vulnerabilities were discovered in Django, the Python-based web development framework: CVE-2026-48587 Potential exposure of private data via whitespac…
Fedora 43 perl-Imager Key Concerns with TGA Color Map and Palette
1.036 bump - Fix CVE-2026-93019 (TGA large color map size interpreted as negative) - Fix CVE-2026-93018 (paletted images: out-of-range color index returned uni…
Fedora 44 perl-Imager Update CVEs 2026-93019 2026-93018 Security Advisory
1.036 bump - Fix CVE-2026-93019 (TGA large color map size interpreted as negative) - Fix CVE-2026-93018 (paletted images: out-of-range color index returned uni…
Fedora 43 perl-Catalyst-Plugin-Static-Simple Key Cache Vulnerability 2026
Catalyst::Plugin::Static::Simple for Perl sets the Cache‑Control header to "public" for every static asset served. Consequently, intermediaries such as shared …
Debian Libdbi-perl Medium Memory Corruption DoS CVE-2026-78030 DLA-4798-1
Vulnerabilities were discovered in libdbi-perl, the Perl Database Interface (DBI), which may lead to memory corruption, denial of service, or arbitrary module …
Fedora 45 Parted Security Fix CVE-2026-89085 CVE-2026-89088
Removed included patches version 3.7.13 (bcl) maint: Update to latest gnulib and bootstrap script (bcl) parted: Fix partition number allocation in do_print (bc…
Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers
Cybersecurity researchers have disclosed details of a mass-scanning campaign that has targeted Vite deployments siphon sensitive data.The first is an automated…
Ubuntu 26.04 Beets Media Injection Vulnerability USN-8747-1 CVE-2026-42052
Beets could allow malicious media metadata to compromise its web interface.
Linux dm-integrity Patch Targets Writeback Checksum Mismatches
A Linux dm-integrity patch posted on Aug 24, 2026 targets a writeback race that can leave stored data with the wrong integrity tag after a crash. Chen Cheng pr…
SUSE Linux Kernel Important Live Patch 49 Advisory 2026-3766-1
A security update for SUSE Linux Kernel fixes 18 vulnerabilities addressing various issues and bugs, including memory leaks and data handling problems, enhanci…
openSUSE postgresql15 Important 24 Issues Fixed 2026-11553-1
An update for PostgreSQL on openSUSE Tumbleweed addresses 24 vulnerabilities, enhancing security with fixes for multiple CVEs rated from moderate to high sever…
Rocky Linux 9 RLSA-2026-56973 MySQL Important Performance Issues
Rocky Linux 9 has released an important security update for MySQL 8.4, addressing multiple unspecified vulnerabilities, bugs, and enhancements to improve datab…