Security for teams connecting data, documents and agents to AI.
Articles 706
Cyber ·
A security notice published on October 2, 2026 reports that malformed phone numbers can cause indefinite CPU consumption in the Apache Directory LDAP API. Versions from 2.1.0 up to, but not including, 2.1.9 are affected.
Cyber ·
An advisory published on October 2, 2026, rates a resource-consumption flaw in the Apache Directory LDAP API as important. Verifying bcrypt passwords with a high cost factor can keep CPU busy for hours.
Cyber ·
An advisory published on October 2, 2026 says Apache Directory LDAP API versions 2.1.0 through releases earlier than 2.1.9 may receive cleartext data when StartTLS begins after a search.
Cyber ·
Published on October 2, 2026, the report says U.S. lawmakers from both parties proposed limits on automatic license plate readers. The initiatives it mentions have different scopes.
Cyber ·
Published on October 2, 2026, the advisory describes unsafe deserialization in Apache Directory LDAP API 2.1.0 through releases before 2.1.9. A malicious or compromised LDAP server could supply a serialized Java class and potentially enable remote code execution.
Cyber ·
A security notice published on October 2, 2026 reports that deeply nested LDAP search filters can cause a stack overflow before authentication. Versions 1.2.0 through releases earlier than 1.2.9 are affected.
Cyber ·
An advisory published on October 2, 2026 reports that a small BER response can trigger excessive memory allocation, an OutOfMemoryError, and denial of service. Versions 1.2.0 up to, but not including, 1.2.9 are affected.
Cyber ·
A notice published on October 2, 2026 reports arbitrary code execution, including remote execution, when a specially crafted document is opened in Apache OpenOffice 4.1.16 or earlier.
Cyber ·
An advisory published on October 2, 2026 reports a moderate access-control flaw in Apache Traffic Server, which does not correctly enforce the matching policy between SNI and the Host header.
Cyber ·
A RustConf 2026 talk covered the effort to let user-defined smart pointers support operations currently available to native references.
Cyber ·
Vicksburg’s mayor said a ransomware incident led the Mississippi city to temporarily shut down systems and disrupted public services. The FBI and other authorities are investigating.
Cyber ·
A report published on October 2, 2026, links the Warlock ransomware group to attacks on critical infrastructure in Portuguese- and Spanish-speaking countries, exploiting multiple Microsoft SharePoint vulnerabilities.
Cyber ·
Announced on October 2, 2026, the September stable release of the Linux Test Project includes 382 patches from 41 authors since the May version.
Cyber ·
On October 2, 2026, AlmaLinux, Debian, Fedora, Mageia, Oracle, Red Hat, SUSE, and Ubuntu announced security updates for various packages, including kernels, browsers, libraries, and system tools.
Cyber ·
On October 2, 2026, CISA added two Zammad vulnerabilities to the KEV catalog based on evidence of active exploitation: session fixation and improper privilege management.
Cyber ·
In a publication dated October 2, 2026, Trail of Bits introduced SequenceHash and SequenceMAC, constructions for combining inputs unambiguously without relying on a single hash function.
Cyber ·
A security notice published on October 2, 2026 reports fixes in the Linux kernel's NFS, IPv6 networking, and Netfilter components.
Cyber ·
Published on October 2, 2026, the notice reports vulnerabilities across numerous Linux kernel subsystems and says an update addresses the flaws.
Cyber ·
A notice published on October 2, 2026 describes vulnerabilities across Linux kernel subsystems, including a possible memory write after permissions are revoked on some Arm processors.
Cyber ·
A security notice published on October 2, 2026 reports Linux kernel flaws in NFS, IPv6 networking, and Netfilter, addressed by an update.
Looking for something else?DocumentationContact
