Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
[Webinar] How Modern Attack Paths Cross Code, Pipelines, and Cloud
TL;DR: Stop chasing thousands of "toast" alerts. Join experts from Wiz to learn how hackers connect tiny flaws to build a "Lethal Chain" to your data—and how t…
Debian 11 DLA-4573-1 libpng Important Heap Disclosure Fix
A security vulnerability has been discovered in libpng, a library implementing an interface for reading and writing PNG (Portable Network Graphics) files, whic…
PCPJack Credential Stealer Exploits 5 CVEs to Spread Worm-Like Across Cloud Systems
Cybersecurity researchers have disclosed details of a new credential theft framework dubbed PCPJack that targets exposed cloud infrastructure and ousts any art…
Debian 11 libexif Important Crashes Info Leaks DLA-4558-1 CVE-2026-32775
Three security vulnerabilities were discovered in libexif, a library to reads and writes EXIF metainformation from and to images files, that can causes crashes…
ThreatsDay Bulletin: $290M DeFi Hack, macOS LotL Abuse, ProxySmart SIM Farms +25 New Stories
You scroll past one incident and see another that feels familiar, like it should have been fixed years ago, but it still works with small changes. Same bugs. S…
Ubuntu 18.04 LTS Slurm Critical Socket Issue CVE-2022-29501
Slurm could be made to send data to an arbitrary unix socket on the host.
Debian 11 perl Important Code Injection Weakness DLA-4538-1 CVE-2025-40909
Vincent Lef¨vre discovered that, in the Perl programming language, at thread creation the current directory may temporarily change in other threads, altering f…
NIST Limits CVE Enrichment After 263% Surge in Vulnerability Submissions
The National Institute of Standards and Technology (NIST) has announced changes to the way it handles cybersecurity vulnerabilities and exposures (CVEs) listed…
Debian 11 inetutils Important DLA-4527-1 Privilege Escalation Threat
Several vulnerabilities were discovered in the inetutils implementation of telnetd and telnet, which may result in privilege escalation or information disclosu…
Debian bookworm DSA-6194-1 pyasn1 Medium DoS CVE-2026-30922
It was discovered that pyasn1, a generic ASN.1 library for Python, is prone to a denial of service vulnerability when decoding ASN.1 data with deeply nested st…
Fedora 42 python-ujson 5.12.0 Buffer Overflow DoS Advisory 2026-0f099ed388
Update to 5.12.0. This release updates the license field in the Python metadata and fixes a buffer overflow/infinite loop from indent handling.
Fedora 43 python-ujson Critical DoS Buffer Overflow 2026-bf741e26e4
Update to 5.12.0. This release updates the license field in the Python metadata and fixes a buffer overflow/infinite loop from indent handling.
Product Walkthrough: How Mesh CSMA Reveals and Breaks Attack Paths to Crown Jewels
Security teams today are not short on tools or data. They are overwhelmed by both. Yet within the terabytes of alerts, exposures, and misconfigurations – secur…
Debian 11 Ansible Critical Code Execution Risk DLA-4502-1 CVE-2024-11079
A flaw was found in ansible, a configuration management, deployment, and task execution system. This vulnerability allows attackers to bypass unsafe content pr…
Five Malicious Rust Crates and AI Bot Exploit CI/CD Pipelines to Steal Developer Secrets
Cybersecurity researchers have discovered five malicious Rust crates that masquerade as time-related utilities to transmit .env file data to the threat actors.…
Ubuntu 23 Python Security Random Essentials Addressing Buffer Overflow
0.011 - Update data pointer on resize for rdrand; Clean up string length handling 0.010 - Disallow requesting strings with negative lengths CVE-2026-2597; Try …
Fedora 43 perl-Crypt-SysRandom-XS Important Heap Overflow CVE-2026-2597
0.011 - Update data pointer on resize for rdrand; Clean up string length handling 0.010 - Disallow requesting strings with negative lengths CVE-2026-2597; Try …
Debian 11 gnutls28 Critical Denial Of Service CVE-2025-9820 DLA-4492-1
Vulnerabilities were found in GnuTLS, a portable library which implements the Transport Layer Security and Datagram Transport Layer Security protocols, which m…
Debian 11 GLib2.0 DLA-4491-1 Multiple DoS Memory Issues CVE-2026-0988
Multiple issues were found in GLib, a general-purpose, portable utility library, that could lead to denial of service, memory corruption or potentially arbitra…
Debian LTS 11 nova Important Resize Safety Issue DLA-4486-1 CVE-2026-24708
Dan Smith discovered that nova, a cloud computing fabric controller, calls qemu-img without format restrictions for resize, which may result in unsafe image re…
Debian DSA-6145-1 Nova Image Resize Issue CVE-2026-24708
Dan Smith discovered that nova, a cloud computing fabric controller, calls qemu-img without format restrictions for resize, which may result in unsafe image re…
Ubuntu 25.10 nginx Critical Insertion Security Flaw USN-8038-1
nginx could be made to insert content into proxied server data.
Debian 11 rlottie Critical Boundary Check Issue DLA-4474-1 CVE-2025-0634
Several issues have been found in rlottie, a library for rendering vector based animations and art. Most of these CVEs have been already fixed by Fix-crash-on-…
Malicious NGINX Configurations Enable Large-Scale Web Traffic Hijacking Campaign
Cybersecurity researchers have disclosed details of an active web traffic hijacking campaign that has targeted NGINX installations and management panels like B…