Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian Trixie Incus Critical DoS Security Advisory DSA-6244-1
Multiple security issues were discovered in Incus, a system container and virtual machine manager, which could result in denial of service, For the stable dist…
Debian DSA-6213-1 LXD Important Privilege Escalation Fix
Multiple security issues were discovered in LXD, a system container and virtual machine manager, which could result in restriction bypass or privilege escalati…
Debian DSA-6212-1 Incus Important Privilege Escalation Issues
Two security issues were discovered in Incus, a system container and virtual machine manager, which could result in restriction bypass or privilege escalation.…
Debian DSA-6188-1 LXD Important Privilege Escalation Risk Fix
Multiple security issues were discovered in LXD, a system container and virtual machine manager, which could result in privilege escalation or the execution of…
Debian Trixie DSA-6184-1 Incus Important Denial of Service CVE-2026-28384
Multiple security issues were discovered in Incus, a system container and virtual machine manager, which could result in denial of service or the execution of …
Trivy Security Scanner GitHub Actions Breached, 75 Tags Hijacked to Steal CI/CD Secrets
Trivy, a popular open-source vulnerability scanner maintained by Aqua Security, was compromised a second time within the span of a month to deliver malware cap…
Alpine Linux 3 RLSB-2026-5783 Key Vulnerability Resolutions Now Released
Important: container-tools:rhel8 security update
Boost Linux Security Using These 10 Vital Testing Tools Now
Linux admins rarely deal with one fixed system anymore. A single environment may include public-facing web apps, internal services, containers, cloud workloads…
Debian Bookworm LXD Important Arbitrary Command Execution DSA-6153-1
Two security issues were discovered in LXD, a system container and virtual machine manager, which could result the in execution of arbitrary commands via malfo…
Linux Security in 2026 Hardening Monitoring and Defense Strategies
Linux runs an enormous share of the modern internet - cloud workloads, web backends, containers, routers, IoT devices, and the quiet infrastructure nobody noti…
TeamPCP Worm Exploits Cloud Infrastructure to Build Criminal Infrastructure
Cybersecurity researchers have called attention to a "massive campaign" that has systematically targeted cloud native environments to set up malicious infrastr…
Debian 11 containerd Critical Permissions DoS Vuln DLA-4467-1
Multiple vulnerabilities were discovered in containerd, an open-source container runtime, used by e.g. Docker or Kubernetes. CVE-2024-25621 Overly broad defaul…
SUSE: kubernetes-client Important Security Update 2025:4380-1
Affected Products: * Containers Module 15-SP6 * Containers Module 15-SP7 * openSUSE Leap 15.6
Debian: Critical Denial of Service & Privilege Escalation DSA-6067-1
Two security vulnerabilities were discovered in the Containerd container runtime, which may result in denial of service or local privilege escalation. For the …
Debian DSA-6057-1 LXD Important Local Privilege Escalation CVE-2025-64507
It was discovered that LXD, a system container and virtual machine manager, is prone to a local privilege escalation vulnerability if unprivileged users are al…
Debian: Incus Important Privilege Escalation CVE-2025-64507 DSA-6051-1
It was discovered that Incus, a system container and virtual machine manager, is prone to a local privilege escalation vulnerability unprivileged users are all…
TARmageddon: async-tar Vulnerability Exposes Linux Archive Extraction Risks
A path traversal flaw in the Rust async-tar library has people looking harder at archive extraction security on Linux. Researchers are calling it TARmageddon, …
Cloud-Native Security in 2025: Why Runtime Visibility Must Take Center Stage
The security landscape for cloud-native applications is undergoing a profound transformation. Containers, Kubernetes, and serverless technologies are now the d…
Fedora 41: toolbox Critical Fixes for CVE-2025-23266, GHSA-fv92-fjc5-jj9h
Security fixes Bumped the minimum github.com/go-viper/mapstructure/v2 version to 2.3.0 for GHSA-fv92-fjc5-jj9h or GO-2025-3787 Bumped the minimum github.com/NV…
Fedora 42: toolbox Security Updates for CVE-2025-23266 CVE-2025-23267
Security fixes Bumped the minimum github.com/go-viper/mapstructure/v2 version to 2.3.0 for GHSA-fv92-fjc5-jj9h or GO-2025-3787 Bumped the minimum github.com/NV…
N. Korean Hackers Used Job Lures, Cloud Account Access, and Malware to Steal Millions in Crypto
The North Korea-linked threat actor known as UNC4899 has been attributed to attacks targeting two different organizations by approaching their employees via Li…
Cryptomining Meets AI: H2Miners Multi-Platform Assault Unveiled
Let's face it: threat actors are getting smarter, and malware isn't just for your typical Windows clickbait anymore. In recent years, the H2Miner botnet has go…
Mageia 9: 2025-0201 critical: Firefox multiple security issues
CVE-2025-6424: A use-after-free in FontFaceSet resulted in a potentially exploitable crash. CVE-2025-6425: An attacker who enumerated resources from the WebCom…
SUSE: 2025:01596-2 - Moderate Helm Update Announcement Released
Affected Products: * Containers Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7