Security for teams connecting data, documents and agents to AI.
Articles 706
Cyber ·
Ubuntu Security advisory on six libxml2 flaws that may lead to denial of service, code execution, XXE injection and SSRF. One of them affects only Ubuntu 26.04 LTS.
Cyber ·
The Go project marked v0.60.0 of golang.org/x/net to fix vulnerabilities, including memory exhaustion in an HTTP/2 server caused by Trailer headers. The advisory was forwarded through the oss-sec feed on October 8, 2026.
Cyber ·
On 8 October 2026 the Go project released versions 1.27.2 and 1.26.9, minor point updates that include 15 security fixes according to the project's announcement.
Cyber ·
The United States and other nations took down digital tools and infrastructure of Integrity Tech, a Beijing-based company, used for widespread vulnerability scanning and, in some cases, intrusions, as part of the Flax Typhoon campaign.
Cyber ·
Cisco Talos describes malware techniques that attempt to manipulate AI-assisted analysis and recommends treating text extracted from samples as evidence, not as instructions. The content is dated 8 October 2026.
Cyber ·
The Ubuntu Security feed published advisory USN-8909-1 on libde265, an H.265 decoding library. Crafted bitstreams can cause a NULL pointer dereference and make the program crash.
Cyber ·
Tomáš Šedovič, a program manager at the Rust Foundation, presented at Kangrejos 2026 how the Rust project organizes, tracks and changes its goals, with Rust for Linux developers in mind.
Cyber ·
The US Department of Justice charged the owner of a ransomware recovery company with wire fraud, alleging he secretly hid ransom payments while overcharging attack victims.
Cyber ·
ASOS said attackers accessed an employee's account and sent a fraudulent push notification. The investigation, conducted with outside experts, identified access to names, contact details and some non-personal account information.
Cyber ·
A researcher describes searching for conversation history in OpenCode and Hermes to support forensic investigations of AI use. Published on 8 October 2026 through the SANS ISC feed.
Cyber ·
A 25-year-old man who helped steal almost US$ 260,000 in cryptocurrency through a SIM swap fraud was sentenced to two and a half years in prison by a London court, according to the feed of The Record.
Cyber ·
Two competing proposals address the link between swap cache slots and space in persistent swap files in the Linux kernel, with no agreement yet for mainline integration.
Cyber ·
Ubuntu Security advisory describes a flaw in libgit2 TLS certificate validation that could allow a man-in-the-middle attack and exposure of confidential information, according to the text dated October 8, 2026.
Cyber ·
Ubuntu Security notice on a signed integer overflow in the libarchive ZIP writer when processing encrypted entries, with risk of crash or arbitrary code execution.
Cyber ·
Summary of security updates published by AlmaLinux, Debian, Fedora, Mageia, Oracle, Slackware, SUSE and Ubuntu for packages such as kernel, glibc, firefox, bind, sudo and vim, based on a machine-translated news feed.
Cyber ·
Ubuntu Security notice USN-8906-1 describes an update that fixes numerous Linux kernel flaws, including a TLB invalidation issue on some Arm processors (CVE-2025-10263).
Cyber ·
Ubuntu Security published advisory USN-8905-1, an update fixing several security issues in the Linux kernel across architecture, drivers, filesystems and networking. The advisory lists many CVE identifiers.
Cyber ·
Ubuntu notice USN-8904-1 describes a Linux kernel update for Azure that fixes several security issues across subsystems, drivers, file systems and network components. The received text is truncated, so the full list of identifiers should be checked in the original source.
Cyber ·
An Ubuntu Security notice describes an update fixing several Linux kernel flaws across drivers, file systems, networking, memory and KVM. The received text is truncated, so the full number of CVE identifiers cannot be counted here.
Cyber ·
A message on the oss-sec list, published October 7, 2026, asks whether the CVE-2026-59265 flaw in Apache OpenOffice, which may allow system control through a malicious document, also affects LibreOffice.
Looking for something else?DocumentationContact
