Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 43 AusweisApp2 Software Update Advisory 2026-44f6d8f2e7
An update to AusweisApp2 version 2.5.5 is now available for Fedora 43, allowing online identification with German ID cards and providing access to stored data.
Fedora 44 AusweisApp2 Security Advisory Update 2026-2fff59246b
Fedora 44 has released AusweisApp2 version 2.5.5, which allows online identification using German ID cards, featuring data self-assessment. Users can update vi…
Fedora 44 python-sqlalchemy Security Fixes Advisory 2026-6f7b906353
An update for python-sqlalchemy (2.0.52) includes bug fixes and enhancements for related packages, providing improved flexibility for SQL databases with a high…
Fedora 43 DokuWiki Bypass Fix Advisory 2026 - 99a0f106c9
Fedora 43 has released an update for DokuWiki, fixing a bypass issue in the "disableactions" mechanism, enhancing its usability in documentation without needin…
Mageia 10 Sar2 Bug Fix Notification for Advisory 2026-0094
An update for Mageia 10 addresses a bug in sar2 that prevented the game from starting due to data path issues, resolving the reported problem.
Fedora 44 pdns Security Advisory Update 5.0.7 2026-706965c440
Fedora has released an update for PowerDNS version 5.0.7, enhancing its authoritative DNS server capabilities while addressing security issues and providing co…
Debian 12 DLA-4739-1 Chromium Important Security Flaws Fixed
Debian LTS Advisory DLA-4739-1 highlights security vulnerabilities in Chromium that could lead to code execution, denial of service, or data exposure, recommen…
SUSE rpm Important Buffer Overflow Security Advisory SUSE-SU-2026-3600-1
A security update for rpm addresses a critical heap buffer overflow vulnerability in NDB database backend, affecting several SUSE products and recommending ins…
Debian openjdk-21 Important Cert Issues DoS Risk DSA-6425-1
Debian has released an advisory for OpenJDK-21 addressing multiple vulnerabilities that could lead to certificate validation issues, denial of service, or data…
Fedora 43 pgAdmin4 Security Advisory New Fixes for Multiple Risks
Fedora has released an update for pgAdmin 4 to version 9.17, addressing various bugs and vulnerabilities such as unauthenticated data manipulation and remote c…
Mageia 10 libyang Security Advisory CVE-2026-41401 Heap Use-After-Free
Mageia 10 received an update addressing a security vulnerability, specifically a Heap Use-After-Free Write in XML Metadata Parsing (CVE-2026-41401), enhancing …
ThreatsDay Bulletin: $290M DeFi Hack, macOS LotL Abuse, ProxySmart SIM Farms +25 New Stories
You scroll past one incident and see another that feels familiar, like it should have been fixed years ago, but it still works with small changes. Same bugs. S…
2027 Budget Proposal: Why CISA Funding Cuts Matter to Linux Security Teams
When federal security budgets are cut, the data that stops hackers from breaking into your Linux servers begins to dry up.
Fedora 42 python-ujson 5.12.0 Buffer Overflow DoS Advisory 2026-0f099ed388
Update to 5.12.0. This release updates the license field in the Python metadata and fixes a buffer overflow/infinite loop from indent handling.
Mageia 9 FlightGear Bug Fix Advisory MGAA-2026-0007 Released
MGAA-2026-0007 - Updated flightgear,simgear & flightgear-data packages fix bug
ThreatsDay Bulletin: GhostAd Drain, macOS Attacks, Proxy Botnets, Cloud Exploits, and 12+ Stories
The first ThreatsDay Bulletin of 2026 lands on a day that already feels symbolic — new year, new breaches, new tricks. If the past twelve months taught defende…
Fedora 42: roundcubemail Important XSS Fix with Advisory ID 2025-fec36f9eaf
Release 1.6.12 Support IPv6 in database DSN (#9937) Don't force specific error_reporting setting Fix compatibility with PHP 8.5 regarding array_first() Remove …
ThreatsDay Bulletin: AI Malware, Voice Bot Flaws, Crypto Laundering, IoT Attacks — and 20 More Stories
Hackers have been busy again this week. From fake voice calls and AI-powered malware to huge money-laundering busts and new scams, there’s a lot happening in t…
Mageia 9: Simgear Important Bug Fix Advisory MGAA-2025-0093
MGAA-2025-0093 - Updated simgear, flightgear and flightgear-data packages fix bug
Debian 11: libphp-adodb Important SQL Injection Advisory DLA-4340-1
libphp-adodb, a class library that provides abstractions for performing queries and managing databases, was affected by a vulnerability. Improper escaping of a…
ThreatsDay Bulletin: MS Teams Hack, MFA Hijacking, $2B Crypto Heist, Apple Siri Probe & More
Cyber threats are evolving faster than ever. Attackers now combine social engineering, AI-driven manipulation, and cloud exploitation to breach targets once co…
Malicious Nx Packages in ‘s1ngularity’ Attack Leaked 2,349 GitHub, Cloud, and AI Credentials
The maintainers of the nx build system have alerted users to a supply chain attack that allowed attackers to publish malicious versions of the popular npm pack…
Manufacturing Security: Why Default Passwords Must Go
If you didn't hear about Iranian hackers breaching US water facilities, it's because they only managed to control a single pressure station serving 7,000 peopl…
China-linked Salt Typhoon Exploits Critical Cisco Vulnerability to Target Canadian Telecom
The Canadian Centre for Cyber Security and the U.S. Federal Bureau of Investigation (FBI) have issued an advisory warning of cyber attacks mounted by the China…