Security for teams connecting data, documents and agents to AI.
Articles 706
Cyber ·
Security advisory on an authorization flaw in Apache DolphinScheduler before version 3.4.3, rated critical, that lets authenticated users obtain other users' account data.
Cyber ·
Important-severity advisory: authenticated users without administrator roles can access kubeconfig data containing Kubernetes credentials. Affected versions run from 3.1.0 up to before 3.4.3.
Cyber ·
Advisory published on October 7, 2026 on the oss-sec feed: authenticated users can obtain data source connection details without authorization in versions before 3.4.3 of Apache DolphinScheduler.
Cyber ·
Feed item announcing the ISC Stormcast episode for Thursday, October 8, 2026, with the episode address. The body gives no description or summary of topics.
Cyber ·
Moderate-severity advisory for Apache DolphinScheduler: authenticated users can stop task instances and create savepoints in projects they are not authorized to access. Versions before 3.4.3 are affected.
Cyber ·
Published on the oss-sec feed by Wenjun Ruan on 7 October, the moderate-severity flaw lets authenticated users modify task definitions in projects they are not authorized to access. Versions before 3.4.3 are affected.
Cyber ·
Moderate-severity advisory: authenticated users of Apache DolphinScheduler before 3.4.3 can operate schedules, workflow definitions and task instances in other projects.
Cyber ·
Public summary of the LWN.net weekly edition of October 8, 2026, covering kernel flaws, the Gentoo Chromium package, Rust smart pointers, the LAVD scheduler and security updates.
Cyber ·
Tor version 0.4.9.14, published on 7 October 2026, includes important high-severity bug fixes across relay, client, onion service and authority components, and maintainers strongly recommend prompt updating.
Cyber ·
Advisory OSSN-0109, published on October 7, 2026 in the oss-sec feed by maintainer Goutham Pacha Ravi: authenticated users can associate metrics with other users' resources by supplying resource_id to the Gnocchi metric creation endpoint.
Cyber ·
Errata 1 of advisory OSSA-2026-043 assigns CVE-2026-107363 to a flaw in the Zaqar WebSocket, the OpenStack queue service, that allows access to queues of other projects through project substitution. The advisory lists versions from 1.0.0 as affected.
Cyber ·
US authorities offer $10 million for information about a suspect described as a prominent figure in the Hafnium campaign, in which hackers broke into thousands of computers and stole large volumes of documents.
Cyber ·
Ubuntu Security advisory on incorrect handling of malformed RealMedia and ASF files in GStreamer Ugly Plugins, with risks of code execution, denial of service and information exposure.
Cyber ·
Cisco Talos disclosed vulnerabilities already fixed by vendors in Foxit Reader, Windows, Photoshop and macOS, including remote code execution and privilege escalation risks.
Cyber ·
Ubuntu Security advisory dated 7 October 2026 lists eight CVEs in the Go Networking package, with possible denial of service, XSS and access control bypass.
Cyber ·
Lawmakers who oversee military cyber policy want a $11 million mental health program for Cyber Command, based at Fort Meade, Maryland, added to defense spending legislation.
Cyber ·
An investigation identified a breach of FARE, a state program used by Arizona courts to collect fines and debts tied to traffic and criminal offenses. The case was reported in October 2026.
Cyber ·
Security advisory dated October 7, 2026 on project substitution in OpenStack's Zaqar message queue service through the WebSocket channel. The CVE is still pending and the affected-version list in the feed is incomplete.
Cyber ·
A moderate flaw in Apache Geode Web Management can write sensitive information into log files. Versions from 2.0.0 up to before 2.0.3 are affected, and the fix is in 2.0.3.
Cyber ·
Advisory published on 7 October 2026 about the Apache Jackrabbit WebDAV/DavEx client, rated medium severity (CVSS 4.0: 6.9). Externally controlled input can select classes or code in the affected 2.20, 2.22 and 2.23 lines.
Looking for something else?DocumentationContact
