Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
SUSE: 2019:2786-1 moderate: docker-runc
An update that fixes one vulnerability is now available.
SUSE: 2019:2787-1 moderate: docker-runc
An update that fixes one vulnerability is now available.
SUSE: 2019:1368-2 important: Recommended sles12sp3-docker-image, sles12sp4-image, system-user-root
An update that fixes one vulnerability is now available.
Debian Incus Critical Security Issues Advisory DSA-6518-1
Multiple security issues were discovered in Incus, a system container and virtual machine manager, which could result in a bypass of security/authorisation res…
Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry
Cybersecurity researchers have disclosed Go-based malware distributed via two Go Modules and two Terraform providers, marking the first time threat actors are …
CRI-O Restore Flaw Can Bypass Kubernetes Security Policies
Kubernetes groups one or more containers into a pod, the basic unit it deploys.
Red Hat Quay Build Workflow Could Expose Registry Credentials
As of September 17, Red Hat had documented a flaw in a Red Hat Quay build workflow that could expose container registry credentials to code retrieved from a mu…
Linux Software Supply Chain & Security Workflows
A Linux system can be hardened, monitored, and carefully administered while still receiving untrusted code through a package, dependency, container image, buil…
SUSE kubevirt Important Security Issues Resolved 2026-3630-1
SUSE released a security update for kubevirt and related containers, addressing 16 vulnerabilities including risks of denial of service and privilege escalatio…
LinuxSecurity HOWTO: The Modern Linux Security Operations Playbook
Linux security problems rarely stay in one place. An authentication issue can lead to unexpected privilege. A container problem can reach the host. Missing log…
Ubuntu 16.04 Linux Kernel Important Privilege Escalation Issues USN-8530-2
Ubuntu 16.04 LTS received security updates for the linux-aws-hwe kernel to correct several vulnerabilities that could allow local attackers to escalate privile…
Ubuntu 16.04 LTS Kernel Important Flaw Escalation CVE-2026-43503
Ubuntu Security Notice USN-8529-2 reveals multiple vulnerability fixes in the Linux kernel affecting Ubuntu 16.04 LTS, with local attackers potentially escalat…
Fedora 44 fuse-overlayfs Important SUID/SGID Escalation Fix 2026-4e0490640f
Fedora has released an update for fuse-overlayfs to version 1.17, addressing a privilege escalation vulnerability related to SUID/SGID bit preservation on file…
ENCFORGE Ransomware Targets AI Models After Langflow RCE Exploit
An AI-driven threat actor called JADEPUFFER built ransomware that hunts AI model files specifically, entering through a known Langflow RCE and pivoting via an …
Fedora 43 moby-engine Update v29.6.2 Denial of Service Vulnerability
An update for the moby-engine in Fedora 43 has been released, addressing upstream security vulnerabilities and introducing version 29.6.2, making Docker contai…
Mak’s Weekly Security Roundup: Linux Updates You Shouldn't Ignore This Week
Before the week gets away from you, take a look at what's landed across the Linux ecosystem. The volume of security advisories hasn't slowed, and while not eve…
Fedora 43 Kernel Significant Jailbreak Resolution 2026-35e2185559
The 7.0.14-101/201 kernel builds contain a fix for an unprivileged container / jail escape. This has not been assigned a CVE number yet, but a POC is in the wi…
Debian LXD Critical Command Execution Bypass Issues DSA-6373-1
Multiple security issues were discovered in LXD, a system container and virtual machine manager, which could result in a bypass of security restrictions or the…
Debian Incus Critical Bypass Command Exec Vulnerability DSA-6370-1
Multiple security issues were discovered in Incus, a system container and virtual machine manager, which could result in a bypass of security restrictions or t…
Compromised VS Code Extension Puts Linux Development Pipelines at Risk
The compromise of Nx Console shows how much infrastructure now sits behind a single developer account. GitHub repositories, CI/CD pipelines, container build sy…
Linux Security Monitoring Challenges and EDR Visibility Gaps
An attacker compromises a Linux container, launches a cryptominer, sets up a way to stay in the system through a background task, and disappears before the inv…
Why Linux Servers Get Hacked More Often Than People Think
Linux runs a massive part of the internet. Cloud platforms, databases, containers, web hosting, APIs, and internal business infrastructure all depend heavily o…
PCPJack Credential Stealer Exploits 5 CVEs to Spread Worm-Like Across Cloud Systems
Cybersecurity researchers have disclosed details of a new credential theft framework dubbed PCPJack that targets exposed cloud infrastructure and ousts any art…
Debian LXD Critical Issues Denial of Service CVE-2026-40197 DSA-6247-1
Multiple security issues were discovered in LXD, a system container and virtual machine manager, which could result in denial of service. For the oldstable dis…