Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Malicious npm Package Stole Files From Claude AI User Directory via GitHub
Cybersecurity researchers have discovered a new malicious package on the npm registry that comes with information stealing capabilities.According to OX Securit…
openSUSE Tumbleweed golang-github-prometheus Moderate CVE-2026-40179
An update that solves one vulnerability can now be installed.
OpenAI Patches ChatGPT Data Exfiltration Flaw and Codex GitHub Token Vulnerability
A previously unknown vulnerability in OpenAI ChatGPT allowed sensitive conversation data to be exfiltrated without user knowledge or consent, according to new …
Fedora 42 golang-github-openprinting-ipp-usb Denial of Service Risk
0.9.31
Ubuntu 26 Alpha Essential python-github-anotherpackage Upgrade 2025-78901-9
An update that solves 3 vulnerabilities and has 3 bug fixes can now be installed.
SUSE golang-github-prometheus-prometheus Key Security Update 2026-20232-1
An update that solves two vulnerabilities and contains one feature can now be installed.
Fedora 42: golang-github-tetratelabs-wazero Important Update CVE-2025-47906
Update to 1.11.0 upstream release Resolves: rhbz#2413614
Ubuntu 23: golang-github-google-wire Critical Patch CVE-2025-47906
Rebuilt for CVE-2025-47906
Fedora 42: Updating golang-github-projectdiscovery-mapcidr for Major Bugs
Update to 1.1.97
Important CVE Rebuild for Fedora 42 with golang-github-evanw-esbuild
Rebuild for CVEs
Fedora 42: golang-github-jwt Important Rebuild for CVE-2025-61723
Rebuilt for CVE-2025-61723
Fedora 42: Advisory for golang-github-alecthomas-chroma-2 CVE-2025-58185
Rebuilt for CVE-2025-58185
Fedora 43: golang-github-crypto-6 CVE-2025-62671 Recompiled Upgrade
Rebuilt for CVE-2025-61723
Fedora 42: Security Advisory for golang-github-facebook-time CVE-2025-65637
Update logrus for https://access.redhat.com/security/cve/cve-2025-65637
Fedora 41: golang-github-openprinting-ipp-usb Critical Memory Leak Alert
Rebuild with the latest golang in repos
Fedora 43: Critical Vulnerabilities in golang-github-openprinting-ipp-usb
Rebuild with the latest golang in repos
HiddenGh0st, Winos and kkRAT Exploit SEO, GitHub Pages in Chinese Malware Attacks
Chinese-speaking users are the target of a search engine optimization (SEO) poisoning campaign that uses fake software sites to distribute malware."The attacke…
Malicious Nx Packages in ‘s1ngularity’ Attack Leaked 2,349 GitHub, Cloud, and AI Credentials
The maintainers of the nx build system have alerted users to a supply chain attack that allowed attackers to publish malicious versions of the popular npm pack…
North Korea Uses GitHub in Diplomat Cyber Attacks as IT Worker Scheme Hits 320+ Firms
North Korean threat actors have been attributed to a coordinated cyber espionage campaign targeting diplomatic missions in their southern counterpart between M…
1,500+ Minecraft Players Infected by Java Malware Masquerading as Game Mods on GitHub
A new multi-stage malware campaign is targeting Minecraft users with a Java-based malware that employs a distribution-as-service (DaaS) offering called Stargaz…
SUSE: 2025:01988-1 moderate: golang-github-prometheus-node_exporter patch
* bsc#1236516 * bsc#1238686 * jsc#MSQA-992 Cross-References:
openSUSE: 2026:02054-2 low: golang-github-alertmanager-prometheus
Fedora 42 Update: golang-github-nats-io-nkeys 2025-c4e168069a security fix
updates dependencies to close security loophole
Debian 11: DLA-4151-1 critical: golang-github-gorilla-csrf issue
The following vulnerability has been discovered in the gorilla/csrf package for Go: Prior to 1.7.3, gorilla/csrf did not validate the Origin header against an …