Agencies warn of Citrix NetScaler flaws
Authorities in the Netherlands, the United States and the United Kingdom confirmed vulnerabilities in NetScaler Gateway; Citrix confirmed eight flaws.
Read articleKnowledge you can apply
Cyber
Security for teams connecting data, documents and agents to AI.
Apache Karaf: missing ACL rule may enable command execution
A notice published on September 28, 2026 reports that Apache Karaf versions before 4.4.12 may let authenticated sessions run jdbc:* commands without the expected authorization, with a possible path to remote code execution.
Read articleCVE-2026-91012: Apache Karaf flaw may elevate privileges
A notice published on September 28, 2026 reports a path traversal flaw in Apache Karaf configuration services before version 4.4.12, with possible privilege escalation.
Read articleGNU C Library warns of out-of-bounds read on Power8
A notice published on September 28, 2026 describes a possible one-byte out-of-bounds read in Power8-optimized strncasecmp in GNU C Library 2.24 and later.
Read articleUndefined behavior in C and memory safety
A Kernel Recipes presentation discusses undefined behavior in C and whether the language could become memory-safe.
Read articleUSN-8839-1: Atril vulnerabilities
A security notice published on September 28, 2026 reports Atril flaws, including possible code execution when opening crafted PDFs. Two other flaws affect Ubuntu 16.04 LTS only.
Read articleNetherlands arrest linked to ShinyHunters investigation
A report published on September 28, 2026 says Dutch authorities arrested a 24-year-old man suspected of assisting ShinyHunters in data theft and extortion. It also describes prior convictions and attacks attributed to remaining group members after the arrest.
Read articleLinux security updates across multiple distributions
A September 28, 2026 bulletin, translated from content in the LWN feed, lists security updates for packages from AlmaLinux, Debian, Fedora, Mageia, Oracle, SUSE, and Ubuntu.
Read articleUSN-8838-1: catdoc flaws may allow code execution
A security notice published on September 28, 2026 reports three integer overflow or underflow flaws in catdoc. Malformed files could cause the program to fail or execute arbitrary code.
Read articleFlatpak 1.18.4 fixes security vulnerabilities
A notice published on September 28, 2026 says Flatpak 1.18.4 fixes several vulnerabilities and considers all earlier versions vulnerable.
Read articleUSN-8837-1: pdfminer PDF-processing vulnerabilities
A security notice published on September 28, 2026 says specially crafted PDFs may exploit pdfminer flaws and possibly allow arbitrary code execution.
Read articleUSN-8835-1: Emacs SVG handling vulnerability
A security notice published on September 28, 2026 reports that specially crafted SVG images may cause memory corruption in Emacs, potentially leading to a crash, denial of service, or disclosure of information.
Read articleUSN-8832-1: Booth authentication flaw
A security notice published on September 28, 2026 reports that incorrect validation of message authentication codes in Booth could let a remote attacker bypass authentication.
Read articleUSN-8830-1: three vulnerabilities in phpseclib
A security notice published on September 28, 2026 lists three phpseclib flaws: two may expose information and one may cause denial of service.
Read articleThreat intelligence bulletin for September 28, 2026
The bulletin covers cybersecurity incidents, AI-related threats and actively exploited vulnerabilities. The available excerpt also describes intrusions and thefts, but ends before completing its section on fixes.
Read articleUSN-8829-1: Plasma Workspace flaw
A security notice published on September 28, 2026 reports an authentication flaw in the Plasma Workspace session manager that could let a local attacker execute code as another user.
Read articleUSN-8828-1: dracut vulnerabilities
A security notice published on September 28, 2026 describes four dracut vulnerabilities, including local information exposure and possible root code execution through manipulated DHCP data.
Read articleCyberattack on Polish medical vendor exposes patient data
A report published on September 28, 2026, says hackers stole personal data from a Polish healthcare software vendor, in another recent attack on the country’s medical sector.
Read articleUSN-8827-1: Erlang security vulnerabilities
An Ubuntu security notice published on September 28, 2026 reports Erlang flaws that may enable denial of service, code execution, TLS interception, request smuggling, and authentication bypass.
Read articleCVE-2026-85499: BanyanDB proxy flaw
A notice published on September 28, 2026 describes a low-severity authorization flaw in Apache SkyWalking BanyanDB 0.11.0. In a non-default configuration, a read-only Canopy user can send non-read requests through the monitoring proxy.
Read articleRota Nacional
Bring privacy into your workflow.
30 days, no card, with a starting quota. After that, Pix credit from R$ 10,00.