Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
AlienFox Malware Targets API Keys and Secrets from AWS, Google, and Microsoft Cloud Services
A new "comprehensive toolset" calledAlienFoxis being distributed on Telegram as a way for threat actors to harvest credentials from API keys and secrets from p…
Ubuntu 5884-1: Linux kernel (AWS) vulnerabilities
Several security issues were fixed in the Linux kernel.
Ubuntu 5794-1: Linux kernel (AWS) vulnerabilities
Several security issues were fixed in the Linux kernel.
SUSE: 2022:3654-1 important: amazon-ssm-agent
An update that fixes one vulnerability is now available.
Ubuntu 5682-1: Linux kernel (AWS) vulnerabilities
Several security issues were fixed in the Linux kernel.
Ubuntu 5580-1: Linux kernel (AWS) vulnerabilities
Several security issues were fixed in the Linux kernel.
Ubuntu 5572-1: Linux kernel (AWS) vulnerabilities
Several security issues were fixed in the Linux kernel.
SUSE: 2022:2831-1 moderate: Recommended aws-efs-utils, python-ansi2html, python-py, python
An update that solves one vulnerability, contains one feature and has one errata is now available.
SUSE: 2022:2583-1 important: aws-iam-authenticator
An update that fixes one vulnerability is now available.
Ubuntu 5513-1: Linux kernel (AWS) vulnerabilities
Several security issues were fixed in the Linux kernel.
openSUSE: 2021:1206-1 moderate: aws-cli, python-boto3, python-botocore, python-service_i
An update that solves one vulnerability, contains two features and has 6 fixes is now available.
openSUSE: 2021:2817-1 moderate: aws-cli, python-boto3, python-botocore, python-service_i
An update that solves one vulnerability, contains two features and has 6 fixes is now available.
Linus Torvalds rejects 'beyond stupid' AWS-made Linux patch for Intel CPU Snoop atta
After much debate, Linus Torvalds has rejected a controversial patch to address potential leaks of secrets from a CPU's cores.
SUSE: 2020:0251-1 moderate: aws-c
An update that solves one vulnerability and has four fixes is now available.
Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers
Cybersecurity researchers have disclosed details of a mass-scanning campaign that has targeted Vite deployments siphon sensitive data.The first is an automated…
Your Cloud Security Checklist Doesn't Work the Way You Think It Does
If managing security across multiple cloud providers wasn't hard enough, each one fails in a different way. For the 2026 Cloud Security Index, Intruder analyze…
Ubuntu 16.04 Linux Kernel Important Privilege Escalation Issues USN-8530-2
Ubuntu 16.04 LTS received security updates for the linux-aws-hwe kernel to correct several vulnerabilities that could allow local attackers to escalate privile…
Ubuntu 26.04 Kernel Update Privilege Escalation USN-8618-1 CVE-2025-54518
Ubuntu 26.04 LTS has addressed multiple vulnerabilities in the Linux kernel affecting AWS and Raspberry Pi systems, requiring users to update their packages an…
New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens
A Go botnet called NadMesh turned up in early July hunting exposed AI services, and the operator's own dashboard claims 3,811 unique AWS keys.A Shodan harveste…
GhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding Agents
Researchers at Wiz found that a flaw in six popular AI coding assistants lets a booby-trapped code project quietly take control of a developer's computer. The …
Linux Foundation Launches Akrites to Strengthen Software Supply Chain Security
The Linux Foundation has officially launched Akrites, a coordinated industry initiative designed to improve how critical open source vulnerabilities are valida…
When Identity is the Attack Path
Consider a cached access key on a single Windows machine. It got there the way most cached credentials do - a user logged in, and the key stored itself automat…
Interlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026-20131 for Root Access
Amazon Threat Intelligence is warning of an active Interlock ransomware campaign that's exploiting a recently disclosed critical security flaw in Cisco Secure …
When Cloud Outages Ripple Across the Internet
Recent major cloud service outages have been hard to miss. High-profile incidents affecting providers such as AWS, Azure, and Cloudflare have disrupted large p…