Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 44 perl-Mojolicious Critical CSRF Attack Mitigation 2026-4334fd85bc
The Fedora update for perl-Mojolicious 9.48 addresses a security issue with CSRF tokens vulnerable to BREACH attacks by masking tokens with a fresh random valu…
SUSE ImageMagick Moderate Issues Fix Security Update SUSE-SU-2026-22829-1
A new security update for ImageMagick resolves 11 vulnerabilities affecting SUSE Linux Enterprise Server 16.0, addressing critical issues such as memory leaks …
Installed Is Not Remediated: How to Verify Linux Security Patches in Production
There are several reasons why Linux has such a good reputation and has become such a good standard across the world. It is the power behind most internet serve…
Fedora 43 pam Important Timing Attack Fix 2026-adc8ddbeaa
Fedora released a security update for the PAM library to fix a timing leak issue in the pam_userdb module, addressing CVE-2026-54411 and enhancing authenticati…
Fedora 44 Netatalk Service Disruption and Information Leak Advisories
Fedora has released an update for Netatalk version 4.5.1, introducing security fixes and improvements to the Apple Filing Protocol file server software and its…
openSUSE ImageMagick Important Memory Leak Policy Bypass Vuln 2026-21426-1
openSUSE released an important security update for ImageMagick addressing 15 vulnerabilities, including memory leaks and command injection issues, affecting op…
SUSE ImageMagick Important Heap Buffer Overflow Fix SUSE-2026-3219-1
A security update for ImageMagick addresses 25 vulnerabilities, including heap buffer overflows and memory leaks, providing critical patches for affected SUSE …
openSUSE GraphicsMagick Low Memory Leak Advisory 2026-3201-1
A security update for GraphicsMagick addresses a memory leak vulnerability (CVE-2026-61870) affecting several SUSE products, allowing users to install necessar…
Debian Linux Major Privilege Escalation Denial of Service Issues DSA-6393-1
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. For the stabl…
Debian LTS Linux Critical Privilege Escalation and DoS Update DLA-4688-1
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. For Debian 12…
Detecting Linux System Compromise Early: Behavioral Indicators and Log-Based Detection
There's a gap between what Linux systems log by default and what you actually need to detect a compromise. Most environments have logging active, which creates…
Ubuntu Linux-NVIDIA Critical Security Flaws 8507-1 System Compromise
Several security issues were fixed in the Linux kernel.
Linux Kernel Module Rootkits: How Attackers Hide After Compromising Cloud Workloads
If you think you know what’s running on your Linux host, you’re probably wrong. Not because you’re bad at your job—but because the kernel is lying to you.
Ubuntu 24.04 LTS Linux-nvidia-tegra Important System Compromise Vuln 8498-1
Several security issues were fixed in the Linux kernel.
SUSE rpcbind Moderate Memory Leak Buffer Overflow Vuln 2026-22331-1
# Security update for rpcbind Announcement ID: SUSE-SU-2026:22331-1 Release Date: 2026-06-22T14:34:40Z Rating: moderate References:
Network Security Monitoring: Common Linux Monitoring Gaps That Hide Threats
If you’re relying on standard network logs to protect your Linux infrastructure, you’re flying blind. Most organizations believe they have network security mon…
Oracle Linux 9 libxslt Moderate Memory Leak Fix ELSA-2026-28243
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Debian LTS Beets Remote Code Exec Vulnerability DLA-4641-1
It was discovered that beets, a media library management system, is vulnerable to run arbitrary JavaScript code in the victim browser, exfiltrate viewable data…
Debian Linux DSA-6355-1 Multiple Threats Privilege Escalation DoS
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. For the stabl…
How to Find and Remove Malicious Cron Jobs on Linux
A compromised Linux server can continue running malware long after the initial intrusion. One of the most common persistence techniques is a malicious cron job…
Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential-Stealing Worm
A new Mini Shai-Hulud supply chain attack campaign, codenamed Miasma, has compromised @redhat-cloud-services packages to steal credentials and secrets from dev…
Misuse of Cron Jobs for Long-Term Access in Linux Environments
Cron has existed in Unix and Linux environments for decades, handling backups, cleanup scripts, patching jobs, log rotation, monitoring tasks, and other mainte…
Linux Security Monitoring Challenges and EDR Visibility Gaps
An attacker compromises a Linux container, launches a cryptominer, sets up a way to stay in the system through a background task, and disappears before the inv…
Why Linux Servers Get Hacked More Often Than People Think
Linux runs a massive part of the internet. Cloud platforms, databases, containers, web hosting, APIs, and internal business infrastructure all depend heavily o…