Security for teams connecting data, documents and agents to AI.
Articles 706
Cyber ·
Important-severity advisory on the Apache Struts REST plugin, which reads request bodies without a size limit and can cause excessive server memory use from a single request.
Cyber ·
A moderate-severity advisory, published on October 5, 2026 on the oss-sec feed, describing resource amplification in Apache Struts when BigDecimal parameters are rendered by the tag library.
Cyber ·
Moderate-severity advisory on an OGNL expression language injection flaw in the legacy RESTful action mapper of Apache Struts, shared on the oss-sec list on 5 October 2026, with affected version ranges listed.
Cyber ·
US and Australia warned of a newly observed problem in customer-managed NetScaler deployments, distinct from vulnerabilities disclosed the previous week. Citrix said it is monitoring the issue and that it is not linked to those earlier reports.
Cyber ·
CPAN Security Group advisory, published October 5, 2026 on the oss-sec list, covering Net::Whois::Raw versions before 2.99044, where the pwhois tool may query the wrong domain when the name contains Unicode characters.
Cyber ·
Advisory from the CPAN Security Group, published on October 5, on YAML for Perl versions before 1.30: a loaded document can trigger the DESTROY method of arbitrary classes.
Cyber ·
CPAN Security Group advisory on the YAML module for Perl: perl/glob documents loaded in versions before 1.27_001 can overwrite package variables and lead to arbitrary code execution.
Cyber ·
ATB, Ukraine's largest supermarket chain, confirmed a cyberattack after hackers posted an extortion demand on its website, according to The Record's feed.
Cyber ·
CUPS maintainers announced a vulnerability disclosure policy and said version 2.4.20 will include several security fixes, according to an oss-sec mailing list post dated October 5, 2026.
Cyber ·
Advisory on a heap buffer overflow in the OpenJPEG encoder, versions 2.4.0 to 2.5.4 and git master, triggered by encoding parameters rather than a crafted input file.
Cyber ·
A ransomware attack affected the College of Medicine at the University of Illinois Chicago (UIC) and resulted in the theft of some information stored on its servers, according to the news feed The Record.
Cyber ·
The Rust Foundation published recordings and photos from RustConf 2026, held in Montreal, Canada. According to the source, which is an automatic translation of a LWN feed item, LWN covered four talks from the event.
Cyber ·
The Sashiko maintainer presented at Kernel Recipes 2026 how the system uses a language model to generate automatic kernel patch reviews and which improvements are in progress.
Cyber ·
Ubuntu Security notice on authorization flaws in OpenStack Aodh and Watcher, which may expose alarm metadata or trigger unauthorized action plans.
Cyber ·
Ubuntu Security notice USN-8871-1, dated 5 October 2026, fixes several Linux kernel flaws for Raspberry Pi. One, affecting some Arm processors, could let a local attacker bypass memory protections or elevate privileges.
Cyber ·
An Ubuntu Security notice fixes vulnerabilities in the Linux kernel for Azure in the NFS, IPv6 and Netfilter subsystems, identified as CVE-2025-38724, CVE-2026-53131 and CVE-2026-53221.
Cyber ·
Summary of a report on extortion and leaks, including the Arizona state courts attack, the Times Car and Fakturownia breaches, ransomware at an air navigation firm, AI agents doing reconnaissance, and malicious Custom GPTs in ClickFix campaigns.
Cyber ·
Russian cybersecurity researchers attributed a two-year silent espionage campaign against a Russian healthcare network to the Belarusian Cyber Partisans, according to a report carried in The Record's feed.
Cyber ·
Release of version 3.0 of the MusicBrainz Picard tag editor, with a Qt6 update, a new plugin system, interface improvements, cover art processing and ISRC submission.
Cyber ·
Ubuntu Security notice on LibreOffice flaws when processing WMF and PICT images, PDFs, CFF and Graphite fonts and package URLs, with risks of denial of service, code execution or information exposure.
Looking for something else?DocumentationContact
