Security for teams connecting data, documents and agents to AI.
Articles 706
Cyber ·
A notice published on September 30, 2026 identifies a flaw in Algorithm::AhoCorasick::XS for Perl: through version 0.04, the code reads a string's length before converting it. The source is an automated translation of content from the oss-sec feed.
Cyber ·
The complete set of videos from the recently concluded Kernel Recipes conference has been published, accompanied by caricatures of attendees and speakers by Frank Tizzoni.
Cyber ·
A series covers topics discussed on July 14 in Kraków, including garbage collection and Python without the GIL.
Cyber ·
At FOSSY 2026, Sharon Yang compared her work on Chromium at the two companies, discussing differences in how they operate and the effects on the codebase.
Cyber ·
A security notice published on September 30, 2026 reports flaws in the Linux kernel and Arm processors. The update fixes issues that could allow memory protections to be bypassed or systems to be compromised.
Cyber ·
A bulletin published on September 30, 2026 reports an update fixing multiple Linux kernel vulnerabilities and lists the affected subsystems.
Cyber ·
A security notice published on September 30, 2026 reports Linux kernel and Arm processor flaws, including risks of bypassing memory protections or escalating privileges.
Cyber ·
Published on September 30, 2026, the warning attributed to Ukraine’s SSSCIP says the DarkSword malware, described as a fast-attack type targeting iPhones, is part of a wave of attacks against iOS and Android devices.
Cyber ·
The electronic election for the Linux Foundation Technical Advisory Board will fill five seats after the next Linux Plumbers Conference. Candidate nominations are open until October 7, 2026.
Cyber ·
On September 30, 2026, Linux distributions announced updates for numerous packages. The bulletin lists affected projects but gives no vulnerability details or severity ratings.
Cyber ·
A security notice published on September 30, 2026 describes three OpenStack Keystone vulnerabilities involving delegated tokens and role assignment queries.
Cyber ·
A security notice published on September 30, 2026 reports incorrect index validation in requests to the SBI PMU extension, which could allow denial of service.
Cyber ·
On September 30, 2026, CISA added CVE-2026-76504 to its Known Exploited Vulnerabilities catalog, citing evidence of active exploitation.
Cyber ·
A news item dated September 30, 2026, reports that the Star Blizzard group expanded its phishing operations and adopted a new technique to make malware infections easier.
Cyber ·
A September 30, 2026 bulletin reports an integer overflow in WSS4J DER parsing that could enable unauthenticated denial of service. Check the affected versions and verify details in the original advisory.
Cyber ·
A notice published on September 30, 2026 describes how differing Base64 representations of a Nonce can bypass UsernameToken replay protection in Apache WSS4J. The stated severity is moderate.
Cyber ·
An alert published on September 30, 2026 reports that Apache WSS4J streaming mode may leave an internal signed-content flag enabled after an STR-Transform reference. The stated severity is moderate.
Cyber ·
A notice published on September 30, 2026, reports that confusion among EncryptedHeader child elements may cause Apache WSS4J to treat attacker-controlled content as a decrypted header.
Cyber ·
A notice published on September 30, 2026 reports that a flaw in Apache WSS4J’s DOM processor may let unauthenticated remote attackers forge authenticated SOAP messages. The alert rates the severity as important and lists affected versions.
Cyber ·
A notice published on September 30, 2026 reports that certain XPath expressions may fail to match elements during StAX validation of WS-SecurityPolicy. The stated severity is low; check the affected versions and verify details in the original notice.
Looking for something else?DocumentationContact
