Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 31: iwd FEDORA-2019-17419b24a3
bluez 5.52: * improvements for bluetooth mesh * audio bug fixes * general bug fixes ---- ell 0.26: * Fix issue with memory leak and TLS certificates. * Fix iss…
Fedora 31: bluez FEDORA-2019-17419b24a3
bluez 5.52: * improvements for bluetooth mesh * audio bug fixes * general bug fixes ---- ell 0.26: * Fix issue with memory leak and TLS certificates. * Fix iss…
Debian: DSA-4567-1: dpdk security update
It was discovered that the vhost PMD in DPDK, a set of libraries for fast packet processing, was affected by memory and file descriptor leaks which could resul…
Debian LTS: DLA-1977-1: libvncserver security update
LibVNC contained a memory leak (CWE-655) in VNC server code, which allowed an attacker to read stack memory and could be abused for information disclosure.
Debian: DSA-4545-1: mediawiki security update
It was discovered that the Special:Redirect functionality of MediaWiki, a website engine for collaborative work, could expose suppressed user names, resulting …
Debian LTS: DLA-1949-1: xen security update
Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in denial of service, informations leaks or privilege escalation.
A Critical Exim Vulnerability, Lilocked Ransomware on the Rise, but Linux Not to Blame
A Critical Exim Vulnerability, Lilocked Ransomware on the Rise, but Linux Not to Bla
Exim may be the Internet's most popular email server, but the MTA's recent history with security vulnerabilities is concerning to say the least. This past Frid…
Gentoo FreeType Normal Info Leak Multiple Issues GLSA-202608-02
Gentoo Linux has issued a security advisory about multiple vulnerabilities in FreeType, urging users to upgrade to version 2.14.3 to mitigate risks including a…
How Memory Leaks Affect System Stability and Security
A process with a stable workload shouldn't keep growing its resident memory. When it does, the first question isn't how much RAM is available. It's where the a…
Atomic Arch: 400+ AUR Packages Backdoored with eBPF Rootkit and Credential Stealer
An AUR supply chain attack compromised more than 400 Arch Linux packages from 11 June 2026, planting a Rust credential stealer and an eBPF rootkit that hides f…
Multi-OS Cyberattacks: How SOCs Close a Critical Risk in 3 Steps
Your attack surface no longer lives on one operating system, and neither do the campaigns targeting it. In enterprise environments, attackers move across Windo…
Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account
The popular HTTP client known as Axios has suffered a supply chain attack after two newly published versions of the npm package introduced a malicious dependen…
Malicious Go Crypto Module Steals Passwords, Deploys Rekoobe Backdoor
Cybersecurity researchers have disclosed details of a malicious Go module that's designed to harvest passwords, create persistent access via SSH, and deliver a…
React2Shell RCE: Critical Host Compromise Vulnerability Exploit 2025-55182
React2Shell is a server-side vulnerability that turns a normal web request into code execution. It allows unauthenticated remote code execution, without creden…
What Is a Privilege Escalation Vulnerability?
Imagine this scenario: you're managing Linux servers that host critical applications, where uptime is everything and security is non-negotiable. You're diligen…
Docker Desktop 4.44.3 Security Update Mitigates Container Escape Risk
Docker containers are supposed to provide a safe boundary''a virtual sandbox separating workloads from the host machine. When that boundary gets breached, we'r…
Rust, C, & RaaS: Qilin Ransomwares Approach to Cross-Platform Attacks
As a Linux admin, you're no stranger to juggling servers, permissions, and late-night emergencies. Let me introduce you to Qilin ransomware ''a crafty, cross-p…
Mageia 9: 2025-0149 critical: libpam hashed password leak
libpam vulnerable to leaking hashed passwords. (CVE-2024-10041) References: - https://bugs.mageia.org/show_bug.cgi?id=34219 - https://lists.opensuse.org/archiv…
Finding & Fixing Security Bugs with Oracle Ksplice's Known Exploit Detection
Oracle Ksplice is an invaluable tool that fundamentally reshapes how we apply and monitor Linux security patches. Oracle Ksplice's Known Exploit Detection take…
New Supply Chain Attack Targets Telegram Bots
We Linux security administrators face a growing challenge with sophisticated supply chain attacks targeting popular development ecosystems, such as npm. The la…
Understanding & Protecting Against the Anubis Ransomware Threat
The Anubis ransomware group has emerged as a growing threat, targeting Linux environments, NAS devices, and ESXi systems. What sets Anubis apart is its novel r…
New OpenSSH Bugs Revealed: MitM and DoS on the Radar
Qualys researchers have recently identified two significant vulnerabilities in OpenSSH that put Linux and FreeBSD systems at severe risk. These bugs enable man…
Staying Ahead of Salt Typhoon: Key Strategies for Detection and Prevention
Recent reports have revealed a sophisticated intrusion campaign conducted by Salt Typhoon, targeting major U.S. telecommunications providers. To safeguard agai…