Cybersecurity News

PHP shares mitigation for new RCE vulnerability with no patch

The PHP security team has shared mitigation measures for a new remote code execution vulnerability that affects systems with non-default configurations and has…

PHP

Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials

Cybersecurity researchers have disclosed details of a large-scale campaign that has targeted exposed network edge devices such as Fortinet FortiGate and Palo A…

Fortinet Palo Alto VPN

HPE patches eight max severity RCE and auth bypass AOS flaws

Hewlett Packard Enterprise (HPE) released security updates to patch 72 vulnerabilities in the Aruba Operating System (ArubaOS), including eight maximum-severit…

Debian's Chromium Update Fixes Code Execution and Data Exposure

Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For Debian 12 …

Linux Chrome

Russian-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine Attack

The Russian state-sponsored hacking group Sandworm teamed up with another threat actor to carry out a destructive wiping attack targeting a Ukrainian logistics…

Rocky Linux 9 ca-certificates Update for eMudhra Certificate Distrust

Critical: ca-certificates security update

Linux

Rocky Linux 9 httpd Fixes DoS and Authentication Vulnerabilities

Important: httpd security update

Linux

Rocky Linux 9 qemu-kvm Fixes Guest Agent Symlink Attack

Important: qemu-kvm security, bug fix, and enhancement update

Linux

Rocky Linux 9 grafana-pcp Critical DoS and Certificate Risks

Critical: grafana-pcp security update

Linux

Rocky Linux 9 expat Fixes Denial of Service and Data Disclosure

Important: expat security update

Linux

Rocky Linux 8 grafana-pcp Update Fixes DoS and TLS Risks

Important: grafana-pcp security update

Linux

Rocky Linux 8 LibreOffice Update Fixes Buffer Overflows and Code Execution

Important: flute, libbase, libfonts, libformula, liblayout, libloader, libreoffice, librepository, libserializer, pentaho-libxml, pentaho-reporting-flow-engine…

Linux

Grafana DoS and Certificate Attack Fixes for Rocky Linux 8

Important: grafana security update

Linux

Rocky Linux 8 OpenSSH Update Fixes Access and DoS Issues

Moderate: openssh security update

Linux OpenSSH

Debian Unbound Update Addresses DNSSEC and Emerging DNS Threats

Multiple security vulnerabilities were discovered in Unbound, a validating, recursive, caching DNS resolver. CVE-2026-35501 (DNSSEC) Bypass of a configured isl…

Linux

Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances

AI agents paying for API calls with the x402 SDKs could sign a payment for their full balance of a supported token if a malicious API asked for it, security fi…

Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data

Malicious Brotli data can make an application on an official build of Node.js run attacker-supplied code, security researchers at Imperva have demonstrated. Th…

Linux

Mageia 10 Go Update Addresses Certificate Authority Concerns

Security update

Mageia 10 perl-Mozilla-CA Fixes Compromised Certificate Chain

Security update

Mageia 10 jq Update Addresses Multiple Memory Flaws and Vulnerabilities

Security update

Mageia 10 open-isns Fixes a Double-Free in the iSNS Decoder

Security update

Mageia 10 msgpack Fixes Integer Overflow in Buffer Expansion

Security update

Mageia 10 Roundcube 1.7.5 Fixes Mail Injection and Other Attacks

Security update

Fedora PHP 8.5.12 Fixes Two Remote Code Execution Flaws

Security update: - RCE via OOM corruption, CVE-2026-109618 - RCE via stale global state, CVE-2026-109619

Linux PHP