Cyber ·
USN-8933-1: RabbitMQ Server vulnerabilities fixed in Ubuntu update
Ubuntu Security advisory describes RabbitMQ Server flaws including XSS, denial of service and TLS authentication bypass, with fixes delivered as a package update.
Cyber
Security for teams connecting data, documents and agents to AI.
Articles 706
Cyber ·
Vendor hooks in the Android kernel, from a 2026 LPC session
A Linux Plumbers Conference 2026 session discussed vendor hooks, the preferred way to keep Android kernel changes outside the mainline kernel tree.
Cyber ·
Attack on UK Legal Aid Agency reached records back to 1978, wider than disclosed
A report from The Record's feed says the attack on the UK Legal Aid Agency stole records dating back to 1978, older and broader than the government had previously disclosed. Organizations that keep personal data for decades increase their exposure.
Cyber ·
Godot 4.x: heap out-of-bounds write in the Radiance HDR image loader (CVE-2026-110734, disputed)
Advisory dated October 15, 2026 on an out-of-bounds heap write in the Radiance HDR image loader of Godot 4.x. CVE-2026-110734 was assigned and is marked as disputed by the vendor's position.
Cyber ·
Godot 4.x: out-of-bounds heap write in binary resource loader, CVE-2026-110735 disputed
Public update on an out-of-bounds heap write caused by a negative string length in the binary resource loader of Godot 4.x. Identifier CVE-2026-110735 was assigned, but the record is marked as disputed.
Cyber ·
Godot 4.x: heap out-of-bounds read in OptimizedTranslation receives disputed CVE
The heap out-of-bounds read in message lookup for OptimizedTranslation in Godot 4.x was assigned identifier CVE-2026-110736, which the record marks as disputed by the vendor.
Cyber ·
USN-8922-2: vulnerabilities in the Linux Azure kernel
A machine-translated Ubuntu Security notice reports fixes for several Linux Azure kernel flaws that could allow system compromise. It lists eleven CVE identifiers across subsystems such as NFS, Netfilter and IPv6.
Cyber ·
Espionage campaign against Central Asian countries appears to originate in Kazakhstan
Researchers say a cyberespionage campaign against Central Asian countries, begun about two years ago, appears to originate in Kazakhstan. The report, dated 15 October 2026, was carried in The Record's feed as a machine translation.
Cyber ·
KDE releases documentary on 30 years of the free software project
For the 30th anniversary of KDE, the project released a documentary revisiting the history of the desktop environment, from the public call for help in 1996 to licensing disputes and the rebuild after KDE 4.
Cyber ·
Ubuntu 26.10 released with a focus on enterprise security
Canonical released Ubuntu 26.10, advancing enterprise security, completing the migration to Rust-based uutils coreutils and expanding Microsoft Entra ID authentication integrations.
Cyber ·
Linux security updates published on Thursday, October 15, 2026
Linux distributions including AlmaLinux, Debian, Fedora, Mageia, Oracle, Red Hat, Slackware, SUSE and Ubuntu published security fixes for the kernel, browsers, libraries and network services, according to an LWN feed summary.
Cyber ·
CVE-2026-92120: OAuth1 replay attack in Apache Allura
Low-severity advisory on an OAuth1 request replay flaw in Apache Allura up to version 1.21.0, fixed in version 1.22.0.
Cyber ·
CVE-2026-92119: mass assignment in the Apache Allura REST API
Public advisory dated October 12, 2026 about a mass assignment flaw in the Apache Allura REST API, affecting versions up to 1.21.0. Version 1.22.0 fixes the issue. Severity rated as moderate.
Cyber ·
CVE-2026-92116: missing OAuth1 callback validation in Apache Allura
An OAuth1 callback validation flaw affects Apache Allura up to version 1.21.0. Version 1.22.0 fixes the issue, according to an advisory published on October 12, 2026 on the oss-sec list, with severity rated important.
Cyber ·
Maintainers Summit 2026: LLMs, security bugs and succession in the kernel
The annual invitation-only kernel maintainers meeting, held on 8 October 2026 in Prague, discussed the impact of large language models, security bugs and long-term succession planning.
Cyber ·
Threat intelligence report of October 12: breaches, AI-driven attacks and a critical Veeam flaw
Summary of a weekly threat intelligence report covering breaches in Denmark, ASOS and Ukraine, AI-assisted campaigns and the Veeam flaw CVE-2025-64393, with claims presented as reported.
Cyber ·
LineageOS 24.0 is released on Android 17, ahead of schedule
The LineageOS project announced version 24.0, based on Android 17 and released earlier than expected. According to the text, the project turns 10 years old on December 24, 2026.
Cyber ·
Monday security updates across Linux distributions
Linux distributions issued security updates for kernel, OpenSSL, browsers and dozens of libraries and packages, according to a 12 October 2026 summary from the LWN feed.
Cyber ·
Unpatched cross-namespace secret exfiltration in k8s-config-connector; CVE requested
A researcher reports, via the oss-sec list, cross-namespace secret exfiltration in k8s-config-connector, still present on master as of 11/10/2026. A CVE ID has been requested from MITRE's CNA-LR.
Cyber ·
Unpatched credential leak in Kubernetes cloud-provider-gcp; CVE requested
A researcher reports on the oss-sec list a credential leak in kubernetes/cloud-provider-gcp that remains present in the master branch. The 90-day disclosure deadline passed without a substantive reply, and a CVE identifier has been requested.