Security for teams connecting data, documents and agents to AI.
Articles 706
Cyber ·
Python 3.15 adds the built-in sentinel and frozendict types, adopts UTF-8 by default and includes improvements to the experimental JIT compiler. The information comes from an automatic translation of a news item published in the LWN feed.
Cyber ·
At the GNU Tools Cauldron 2026, a kernel developer presented GCC changes to support forward-edge CFI in the kernel, a technique aimed at preventing or detecting diversion of control flow.
Cyber ·
A leader of the Your Mule Cashout (YMCO) operation has pleaded guilty. According to the report, the network organized money mules in the US and Europe from 2007 to 2014 to launder cybercriminal proceeds.
Cyber ·
iRhythm, known for wearable cardiac sensors, has begun notifying states about the impact of a data breach that occurred in the summer. According to the report headline, the incident affects hundreds of thousands of people.
Cyber ·
The FBI director said the agency will keep working with partners to dismantle what remains of the ShinyHunters group and its associates, wherever they operate.
Cyber ·
systemd maintainers reviewed the project's achievements over the past year and answered questions about its size and health, and whether it could replace Kubernetes, at the All Systems Go! 2026 conference.
Cyber ·
The Belarusian Cyber Partisans confirmed they remained for months inside the network of the Moscow Health Department, according to a machine-translated report from The Record feed.
Cyber ·
Let's Encrypt announced that, from 10 February 2027, it will issue TLS certificates valid for 64 days, with the last 90-day certificate expiring on 11 May 2027. The change is the second step of a plan toward 45 days in 2028.
Cyber ·
Security advisory with CVSS 8.8 for Apache Camel Karavan from version 4.0.0 before 4.22.1, which applies to the cluster every resource in kubernetes.yaml without checking resource types or rejecting sensitive pod settings.
Cyber ·
Advisory dated October 9, 2026: the project file API used a supplied name without restriction as a path segment when writing to Git. CVSS 8.8; versions 3.18.0 up to before 4.22.1.
Cyber ·
An oss-sec post dated October 9, 2026 reports that a heap overflow in OpenJPEG was fixed on the main branch but remains in releases 2.5.3 and 2.5.4, and that the project lacks regular maintenance.
Cyber ·
Distributions including AlmaLinux, Debian, Fedora, Oracle, Red Hat, SUSE and Ubuntu published security updates for several packages, according to a machine-translated summary of the LWN feed.
Cyber ·
Low-severity advisory on missing limits in Apache CXF StaxUtils, which can consume memory and CPU when parsing very large XML documents. Versions 3.6, 4.0 and 4.2 are listed as affected.
Cyber ·
Apache CXF advisory on the Netty-based HTTP client, which does not check that the host name matches the server TLS certificate, with affected versions and fixed release lines.
Cyber ·
Low-severity advisory on Apache CXF: the multipart/MTOM attachment header parser did not fully enforce configured limits, which can lead to memory exhaustion. Fixed versions: 4.2.4, 4.1.9 and 3.6.13.
Cyber ·
Moderate-severity advisory on Apache CXF XML signature interceptors that did not guarantee the XML delivered to the application was covered by the verified signature. Fixed versions are listed.
Cyber ·
Security advisory on Apache CXF STSTokenValidator, which shares the SAML signature validation result across requests. Versions from 4.2.0 before 4.2.4, from 4.0.0 before 4.1.9, and before 3.6.13 are listed as affected.
Cyber ·
Security advisory on Apache CXF: validated STS tokens were cached using a 32-bit non-cryptographic hash, which may allow an attacker to craft a colliding token. Fixed versions are listed.
Cyber ·
A low-severity flaw in the Apache CXF FIQL query parser, disclosed on 9 October 2026, can cause denial of service in specific version ranges.
Cyber ·
In October 2026, US lawmakers warned that a proposed sale of Spirit Airlines assets, linked to an AI training deal, could expose emails, messages and personal, employment and financial records.
Looking for something else?DocumentationContact
