Published on September 28, 2026, the report says a former U.S. Army soldier was sentenced to more than five years in prison after admitting to breaking into several telecommunications companies and leaking confidential records.
A notice published on September 28, 2026 reports FreeRDP flaws that could expose information, cause service disruption, or allow code execution. Apply the Ubuntu update.
In a September 28, 2026 publication, the UK NCSC urged organizations to promptly mitigate vulnerabilities affecting Citrix NetScaler ADC and Gateway. The notice said two were being actively exploited.
A message published on September 28, 2026 discusses a Debian report about truncation of file-path arguments with 100 or more characters. The available excerpt questions whether the effect is silent and notes that it may depend on whether the file exists.
A September 28, 2026 notice reports a moderate-severity Apache Karaf vulnerability: unquoted javaOpts values may allow command injection when starting child instances.
A notice published on September 28, 2026 reports LDAP filter injection in Apache Karaf JAAS LDAP modules. Versions before 4.4.12 are affected; the notice rates severity as moderate.
A September 28, 2026, oss-sec feed post describes a medium-severity Kubernetes issue: a malicious tar in a container can cause kubectl cp to write files to arbitrary paths on Windows, within the local user's permissions.
A note published on September 28, 2026 describes a nanowire LED architecture intended to improve efficiency by avoiding a limitation of current technology. The text says it does not heat up because it emits all the light it produces.
A security notice published on September 28, 2026 reports two LXC flaws: possible exposure of sensitive information in specific Ubuntu versions and possible denial of service.
A security notice published on September 28, 2026 reports that a flaw in Requests' generation of random paths for temporary files could allow arbitrary code execution.
Published on September 28, 2026, the article describes an Elastic Security and Sublime Security integration that correlates email and endpoint signals and automates responses with human approval.
Linux kernel pre-release 7.3-rc5 became available on September 27, 2026. The maintainer described the diffstat as large, but noted no specific pattern or particularly alarming issue.
A September 27, 2026 alert cites eight vulnerabilities in NetScaler ADC and Gateway. Two critical zero-days, CVE-2026-88771 and CVE-2026-88772, allow remote code execution and are under active exploitation.
On September 27, 2026, CISA added two Citrix NetScaler vulnerabilities with evidence of active exploitation to its KEV catalog and urged organizations to prioritize risk-based remediation.
A message published on September 26, 2026 questions whether GNU libextractor is suitable for use in setuid, setgid, or other privileged processes. The excerpt does not detail the flaw cited in the title; consult and verify the original discussion before drawing conclusions.
Released on September 26, 2026, version 18.1 of the GDB debugger adds subprocess environment commands, history saving, new targets, and updates to the Python API.