Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora jackson-databind Update Fixes JSON Parsing and Path Issues
Fix CVE-2026-89407 CVE-2026-89425 CVE-2026-68497 CVE-2026-68498 CVE-2026-83557 CVE-2026-19032 CVE-2026-91777 across aligned packages updated to version 2.18.12
openSUSE Containerized Data Importer 1.65 Fixes Five Security Issues
An update that solves 5 vulnerabilities can now be installed.
QNAP says hackers breaching NAS devices in Plex2Shell attacks
QNAP urges users to update Plex Media Server to the latest version available in the QNAP App Center, as hackers are exploiting the Plex2Shell vulnerability cha…
Debian LTS Chromium Update Fixes Code Execution and Data Exposure
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For Debian 12 …
ThreatsDay: Apache OFBiz RCE, DreamHost Breach, DeFi Site Hijacks + 17 More Stories
How much damage can someone do without breaking much? Quite a lot, it seems. A stolen login can open doors across several systems. A trusted setting can be use…
Debian Xen Update Addresses Escalation and Data Exposure
Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in guest-to-host privilege escalation or information disclosure. For th…
SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records
SonicWall has warned of two vulnerabilities impacting end-of-life Global Management System (GMS) systems that it said will not be patched. Details of the secur…
Russia-Aligned Gorbag Hackers Exploit WinRAR Flaw to Deploy Data-Stealing Malware
A Russia-aligned threat actor known as Gorbag has been observed using simple information stealer malware in attacks targeting Ukrainian organizations. "Active …
Debian LTS Chromium Update Addresses Code Execution and Data Exposure
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For Debian 12 …
Debian Thunderbird Fixes Code Execution and Data Exposure
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure For the stable distrib…
Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two vulnerabilities impacting Adobe Commerce and Magento, and Google's Brotli…
Debian Thunderbird Update Addresses Code Execution and Data Exposure
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure Debian follows the Thu…
Debian's Chromium Update Fixes Code Execution and Data Exposure
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For Debian 12 …
SUSE coreutils 9.6 Fixes uniq Denial of Service and Data Disclosure
An update that solves one vulnerability can now be installed.
openSUSE Datamodel Code Generator Update for CVE-2026-107377
An update that solves one vulnerability can now be installed.
openSUSE Coreutils Fixes Uniq Denial of Service and Data Exposure
An update that solves one vulnerability and has one bug fix can now be installed.
CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server.…
Oracle Linux 9 jackson-databind Update for CVE-2026-91777
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
SUSE alsa Update Fixes Data Leak and Configuration Crashes
An update that solves two vulnerabilities can now be installed.
openSUSE Leap 15.5 alsa Fixes Data Leak and Application Crashes
An update that solves two vulnerabilities can now be installed.
openSUSE Helm Major Information Breach and Crash Fix 2026-22057-1
An update that solves 3 vulnerabilities and has 3 bug fixes can now be installed.
Rocky Linux Python36 Security Flaw Causes Data Exposure and DoS Risk
Important: python36:3.6 security update
openSUSE python3-paramiko Moderate Data Integrity Issue CVE-2026-44405
An update that solves one vulnerability can now be installed.
SUSE python3-paramiko Moderate Data Integrity Vulnerability CVE-2026-44405
An update that solves one vulnerability can now be installed.