Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 43 Perl-Mojolicious Important CSRF Token Fix FEDORA-2026-6f12b08313
The Fedora update for perl-Mojolicious version 9.48 addresses a security flaw related to CSRF tokens, enhancing protection against BREACH attacks by masking to…
Fedora 44 perl-Mojolicious Critical CSRF Attack Mitigation 2026-4334fd85bc
The Fedora update for perl-Mojolicious 9.48 addresses a security issue with CSRF tokens vulnerable to BREACH attacks by masking tokens with a fresh random valu…
Mageia 10 libyang Security Advisory CVE-2026-41401 Heap Use-After-Free
Mageia 10 received an update addressing a security vulnerability, specifically a Heap Use-After-Free Write in XML Metadata Parsing (CVE-2026-41401), enhancing …
Ubuntu 26.04 LTS Linux Kernel Important Security Flaws USN-8603-1
Ubuntu 26.04 LTS users are advised to update their kernel due to multiple vulnerabilities affecting AMD processors, including potential privilege escalation an…
Debian webkit2gtk Critical JavaScript Exec Risk DSA-6398-1
Multiple vulnerabilities in WebKitGTK have been identified, leading to process crashes, memory corruption, and potential data leaks; users are urged to upgrade…
Fedora 43 perl-DBI Critical Denial of Service Fix FEDORA-2026-c0abcba354
Fedora 43 released an update for perl-DBI version 1.651, addressing multiple security vulnerabilities including CVE-2026-15043 and others, improving database A…
Debian LTS xz-utils Critical Buffer Overflow Vuln DLA-4690-1 CVE-2026-34743
It was discovered that there was a potential buffer overflow in xz-utils, a popular data-compression utility and library. CVE-2026-34743 If the lzma_index_deco…
New Bit2Watt Attack Could Let Cloud Tenants Disrupt Power Grids Without an Exploit
A cloud tenant using nothing but ordinary GPU access can push a data center's power draw up and down fast enough to threaten the grid it runs on, with no explo…
New 7-Zip Vulnerability Could Let Crafted XZ Archives Run Code During Extraction
Opening a crafted XZ archive in 7-Zip could let an attacker run code on the machine. The flaw, CVE-2026-14266, is a heap-based buffer overflow in how the archi…
Fedora 44 Erlang Important Denial Of Service Auth Bypass CVE-2026-48858
Backport fixes for CVE-2026-48858 (ftp SSRF), CVE-2026-49759 (SCTP DoS), CVE-2026-48860 (dist-over-TLS auth bypass), CVE-2026-54886 (ssh SFTP DoS), CVE-2026-54…
Fedora 43 Erlang Critical Auth Bypass DoS Vulnerability Fix 2026-965be97ac0
Backport fixes for CVE-2026-48858 (ftp SSRF), CVE-2026-49759 (SCTP DoS), CVE-2026-48860 (dist-over-TLS auth bypass), CVE-2026-54886 (ssh SFTP DoS), CVE-2026-54…
Fedora 44 python-django5 Low Threat CVE Updates 2026-595d35a4d1
Update python-django5 to version 5.2.16 Fixes three low-severity CVEs CVE-2026-48588: Potential exposure of private data via cached Set-Cookie response CVE-202…
Rocky Linux 9 jackson-annotations Important Code Execution Risk RLSA-2026
Important: jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update
Debian 11 dhcpcd5 Moderate Denial of Service Update DLA-4686-1
Two vulnerabilities were discovered in dhcpcd5, a DHCP client, which may result in denial of service and possibly data corruption. For Debian 11 bullseye, thes…
Microsoft Maps Three Salesforce Attack Paths Tied to a Year of ShinyHunters Activity
Attackers whose methods line up with the data-extortion group ShinyHunters have spent the past year walking into corporate Salesforce environments without expl…
Debian LTS Redis Remote Code Execution Issues DLA-4682-1
It was discovered that there were two issues in Redis, the in-memory key/value database: CVE-2026-23631 An authenticated attacker could have exploited the mast…
Debian LTS mesa High Severity Out-of-Bounds Memory Access CVE-2026-40393
A vulnerability has been found in the mesa 3D graphics library, possibly allowing out of bound memory access by craftet input. CVE-2026-40393 An out-of-bounds …
Six New U-Boot Flaws Could Let Malicious Images Crash Devices or Run Code at Boot
Researchers at firmware security firm Binarly have found six new flaws in U-Boot, the small program that starts up hardware as varied as home routers, smart ca…
New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos
Attackers are hiding a data-stealing trojan inside fake exploit code aimed at the people who hunt bugs for a living. The malware, called ChocoPoC, travels in P…
Network Security Monitoring: Common Linux Monitoring Gaps That Hide Threats
If you’re relying on standard network logs to protect your Linux infrastructure, you’re flying blind. Most organizations believe they have network security mon…
Debian LTS Beets Remote Code Exec Vulnerability DLA-4641-1
It was discovered that beets, a media library management system, is vulnerable to run arbitrary JavaScript code in the victim browser, exfiltrate viewable data…
The Top 10 Attack Surface Exposures in 2026
Breaches don't always start with a zero-day. An exposed admin panel can get brute-forced, or credentials reused from a previous attack. But when a vulnerabilit…
Fedora 44 Xen Critical Security Issues Update 2026-24b84f97af
x86 HVM I/O port list traversal [XSA-491, CVE-2026-42487] domctl lock open to abuse [XSA-492, CVE-2026-42489, CVE-2026-42490] Arm: Completion of memory accesse…
How AI Hallucinations Are Creating Real Security Risks
AI hallucinations are introducing serious security risks into critical infrastructure decision-making by exploiting human trust through highly confident yet in…