Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Rocky Linux Announces Major Security Update for libXfont2 Heap Overflow
Rocky Linux 8 has released an important security update for libXfont2 addressing multiple heap buffer overflow vulnerabilities with specific CVE identifiers an…
Mageia 10 x11-server Important Heap Overflow Use-After-Free Fix 2026-0303
Mageia has released updated packages for version 10 to address security issues, specifically a heap buffer overflow and a use-after-free vulnerability in the g…
Debian LTS mesa High Severity Out-of-Bounds Memory Access CVE-2026-40393
A vulnerability has been found in the mesa 3D graphics library, possibly allowing out of bound memory access by craftet input. CVE-2026-40393 An out-of-bounds …
Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials
Threat actors associated with the Anubis ransomware operation have been observed exploiting the Citrix Bleed 2 (CVE-2025-5777) vulnerability to obtain initial …
Debian 11 DLA-4573-1 libpng Important Heap Disclosure Fix
A security vulnerability has been discovered in libpng, a library implementing an interface for reading and writing PNG (Portable Network Graphics) files, whic…
New GPUBreach Attack Enables Full CPU Privilege Escalation via GDDR6 Bit-Flips
New academic research has identified multiple RowHammer attacks against high-performance graphics processing units (GPUs) that could be exploited to escalate p…
Debian 11 DLA-4521-1 libpng1.6 Critical Exploit DDoS CVE-2026-33416
Two security vulnerabilities were discovered in libpng, a library implementing an interface for reading and writing PNG (Portable Network Graphics) files, whic…
Debian libpng1.6 Critical DDoS Exec Vulnerability DSA-6189-1 Alert
Two security vulnerabilities were discovered in libpng, a library implementing an interface for reading and writing PNG (Portable Network Graphics) files, whic…
Debian libjpeg8 Security Flaw Denial of Service Buffer Overflow DSA-6140-2
A buffer overflow was discovered in libpng, a library implementing an interface for reading and writing PNG (Portable Network Graphics) files, which could resu…
Weekly Recap: Outlook Add-Ins Hijack, 0-Day Patches, Wormable Botnet & AI Malware
This week’s recap shows how small gaps are turning into big entry points. Not always through new exploits, often through tools, add-ons, cloud setups, or workf…
Traditional Security Frameworks Leave Organizations Exposed to AI-Specific Attack Vectors
In December 2024, the popular Ultralytics AI library was compromised, installing malicious code that hijacked system resources for cryptocurrency mining. In Au…
Debian LTS: postgresql-13 Critical DoS Integer Wraparound CVE-2025-12817
A couple of vulnerabilities were discovered in postgresql-13, the widely-popular database management system: CVE-2025-12817 Missing authorization in PostgreSQL…
Debian 11: libgd2 Important DoS Issues CVE-2021-38115 DLA-4411-1
Vulnerabilities were found in libgd2, the GD Graphics Library, which could lead to Denial of Service via crafted input files. CVE-2021-38115 Maryam Ebrahimzade…
⚡ Weekly Recap: F5 Breached, Linux Rootkits, Pixnapping Attack, EtherHiding & More
It’s easy to think your defenses are solid — until you realize attackers have been inside them the whole time. The latest incidents show that long-term, silent…
Debian 11: Critical Buffer Overflow Flaw in svgpp DLA-4337-1 CVE-2021-44960
An issues has been found in svgpp: a C++ library for parsing and rendering Scalable Vector Graphics (SVG) files.
$50 Battering RAM Attack Breaks Intel and AMD Cloud Security Protections
A group of academics from KU Leuven and the University of Birmingham has demonstrated a new vulnerability called Battering RAM to bypass the latest defenses on…
New $50 Battering RAM Attack Breaks Intel and AMD Cloud Security Protections
A group of academics from KU Leuven and the University of Birmingham has demonstrated a new vulnerability called Battering RAM to bypass the latest defenses on…
Phoenix RowHammer Attack Bypasses Advanced DDR5 Memory Protections in 109 Seconds
A team of academics from ETH Zürich and Google has discovered a new variant of a RowHammer attack targeting Double Data Rate 5 (DDR5) memory chips from South K…
Storm-0501 Exploits Entra ID to Exfiltrate and Delete Azure Data in Hybrid Cloud Attacks
The financially motivated threat actor known as Storm-0501 has been observed refining its tactics to conduct data exfiltration and extortion attacks targeting …
Misconfigurations Are Not Vulnerabilities: The Costly Confusion Behind Security Risks
In SaaS security conversations, “misconfiguration” and “vulnerability” are often used interchangeably. But they’re not the same thing. And misunderstanding tha…
Scattered Spider Hijacks VMware ESXi to Deploy Ransomware on Critical U.S. Infrastructure
The notorious cybercrime group known as Scattered Spider is targeting VMware ESXi hypervisors in attacks targeting retail, airline, and transportation sectors …
GPUHammer: New RowHammer Attack Variant Degrades AI Models on NVIDIA GPUs
NVIDIA is urging customers to enable System-level Error Correction Codes (ECC) as a defense against a variant of a RowHammer attack demonstrated against its gr…
Linux Foundation Announces FAIR Package Manager for WordPress Stability
Alright, Linux admins and security pros, let's talk WordPress . I know''typically, "WordPress" doesn't top the list of thrilling topics in our corner of the te…
Data Security Best Practices for Strengthening Linux Networks
When it comes to managing Linux systems, there's one thing every admin knows: security is a constant battle. Sure, you've set up the basics''firewalls, permiss…