Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Mageia 9 Advisory MGASA-2026-0020 for python-pyasn1 DoS Vulnerability
MGASA-2026-0020 - Updated python-pyasn1 packages fix security vulnerability
Fedora 42: gpsd Critical Buffer Overflow & DoS CVE-2025-67268 Advisory
Security fixes for CVE-2025-67268 and CVE-2025-67269.
SUSE: Kernel Important Patch Advisory 2026:0149-1 CVE-2021-47557 DoS
An update that solves 221 vulnerabilities, contains two features and has 37 security fixes can now be installed.
Debian 11: Thunderbird Critical Arbitrary Code Exec Advisory DLA-4442-1
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. For Debian 11 bullseye, these problems have bee…
Ubuntu 22.04: Snowflake Important Denial of Service Advisories USN-7966-1
Several security issues were fixed in Snowflake.
Fedora 43: Foomuuri D-Bus Fixes & System Hardening Advisories
Upstream update to v0.31 with fixes to CVE-2025-67603 and CVE-2025-67858. CVE-2025-67603: Add PolicyKit authorization to D-Bus methods. CVE-2025-67858: Verify …
ThreatsDay Bulletin: RustFS Flaw, Iranian Ops, WebUI RCE, Cloud Leaks, and 12 More Stories
The internet never stays quiet. Every week, new hacks, scams, and security problems show up somewhere.This week’s stories show how fast attackers change their …
n8n Warns of CVSS 10.0 RCE Vulnerability Affecting Self-Hosted and Cloud Versions
Open-source workflow automation platform n8n has warned of a maximum-severity security flaw that, if successfully exploited, could result in authenticated remo…
Mageia 9: ruby-rack Important DoS Threat Advisory MGASA-2025-0334
MGASA-2025-0334 - Updated ruby-rack packages fix security vulnerabilities
Fortinet Warns of Active Exploitation of FortiOS SSL VPN 2FA Bypass Vulnerability
Fortinet on Wednesday said it observed "recent abuse" of a five-year-old security flaw in FortiOS SSL VPN in the wild under certain configurations.The vulnerab…
Debian 11: Critical ReDoS DoS Advisory DLA-4418-1 for python-mechanize
Erik Krogh Kristensen and Rasmus Petersen from the GitHub Security Lab discovered a ReDoS (Regular Expression Denial of Service) vulnerability in python-mechan…
Ubuntu 24.04: Advisory USN-7921-2 for Real-time Kernel CVE-2025-39946
Several security issues were fixed in the Linux kernel.
WatchGuard Warns of Active Exploitation of Critical Fireware OS VPN Vulnerability
WatchGuard has released fixes to address a critical security flaw in Fireware OS that it said has been exploited in real-world attacks.Tracked as CVE-2025-1473…
Fedora 42: Fix for mod_md Bug Related to CVE-2025-55753 Advisory
This update includes the latest upstream release of mod_md, with various bug fixes and enhancements. See https://github.com/icing/mod_md/releases for more info…
AlmaLinux 9 python3.9 Moderate Buffer Overflow Advisories 2024-5642
python3.9 security update
Mageia 9: Golang Critical DNS Constraint Advisory MGASA-2025-0326
MGASA-2025-0326 - Updated golang packages fix security vulnerabilities
Mageia 9: Unbound Important Domain Hijacking Advisory MGASA-2025-0318
MGASA-2025-0318 - Updated unbound packages fix security vulnerabilities
Slackware 15.0: libpng High Severity OOB Read CVE-2025-66293 Advisory
New libpng packages are available for Slackware 15.0 and -current to fix a security issue.
Ubuntu 14.04: Critical Kernel Issues Advisory USN-7911-1 CVE-2023-52975
Several security issues were fixed in the Linux kernel.
AI Adoption Surges While Governance Lags — Report Warns of Growing Shadow Identity Risk
Baltimore, MD, 2nd December 2025, CyberNewsWireAI Adoption Surges While Governance Lags — Report Warns of Growing Shadow Identity Risk on Latest Hacking News |…
Ubuntu 25.10: CRaC JDK 25 Important XML External Entity Advisory 2025-53066
Several security issues were fixed in CRaC JDK 25.
Mageia 9: libpng Important Heap Overflow Advisory MGASA-2025-0314
MGASA-2025-0314 - Updated libpng packages fix security vulnerabilities
Ubuntu 25.10: WebKitGTK Critical RCE & DoS Advisory USN-7895-1
Several security issues were fixed in WebKitGTK.
ThreatsDay Bulletin: AI Malware, Voice Bot Flaws, Crypto Laundering, IoT Attacks — and 20 More Stories
Hackers have been busy again this week. From fake voice calls and AI-powered malware to huge money-laundering busts and new scams, there’s a lot happening in t…