Security for teams connecting data, documents and agents to AI.
Articles 706
Cyber ·
Published on September 29, 2026, the report describes a 68-line YAML workflow that checks Linux endpoints every six hours and avoids duplicate actions when applying managed configurations. The team says it validated the complete workflow on Elastic Stack 9.5.1.
Cyber ·
A September 28, 2026 bulletin reports security fixes for iOS 26, macOS 26, and macOS 15, plus a functional update without security fixes for version 27.
Cyber ·
An Ubuntu Security notice published on September 28, 2026, fixes an incomplete earlier correction and lists curl vulnerabilities that may affect connections, authentication, cookies, and credentials.
Cyber ·
A report published on September 28, 2026 says ShinyHunters is using workarounds to exploit a vulnerability in Oracle PeopleSoft; it gives no technical details or mitigation guidance.
Cyber ·
Released on September 28, 2026, Git 2.56 includes 748 commits since 2.55, a safer conflict-resolution workflow, and the git history drop subcommand.
Cyber ·
A notice published on September 28, 2026 reports that XS::Parse::Infix may treat a number as an array reference. The issue is associated with XS-Parse-Keyword versions 0.40 to 0.49; the notice provided is truncated.
Cyber ·
A notice published on September 28, 2026 reports that DBI for Perl versions earlier than 1.654 mishandle numeric values in FetchHashKeyName.
Cyber ·
On September 28, 2026, a New Mexico jury concluded that Facebook violated the law nearly 44 million times by misleading consumers about its data privacy practices.
Cyber ·
A notice published on September 28, 2026, reports that DBI for Perl versions before 1.654 incorrectly treats numeric values as strings in sql_type_cast_svpv.
Cyber ·
A security notice published on September 28, 2026 reports that Apache Karaf versions before 4.4.12 allow authorization controls to be bypassed in JMX MBean lifecycle operations.
Cyber ·
A September 28, 2026 advisory reports privilege escalation to administrator in Apache Karaf versions before 4.4.12, due to a missing ACL rule for config:install.
Cyber ·
Authorities in the Netherlands, the United States and the United Kingdom confirmed vulnerabilities in NetScaler Gateway; Citrix confirmed eight flaws.
Cyber ·
A notice published on September 28, 2026 reports that Apache Karaf versions before 4.4.12 may let authenticated sessions run jdbc:* commands without the expected authorization, with a possible path to remote code execution.
Cyber ·
A notice published on September 28, 2026 reports a path traversal flaw in Apache Karaf configuration services before version 4.4.12, with possible privilege escalation.
Cyber ·
A notice published on September 28, 2026 describes a possible one-byte out-of-bounds read in Power8-optimized strncasecmp in GNU C Library 2.24 and later.
Cyber ·
A Kernel Recipes presentation discusses undefined behavior in C and whether the language could become memory-safe.
Cyber ·
A security notice published on September 28, 2026 reports Atril flaws, including possible code execution when opening crafted PDFs. Two other flaws affect Ubuntu 16.04 LTS only.
Cyber ·
A report published on September 28, 2026 says Dutch authorities arrested a 24-year-old man suspected of assisting ShinyHunters in data theft and extortion. It also describes prior convictions and attacks attributed to remaining group members after the arrest.
Cyber ·
A September 28, 2026 bulletin, translated from content in the LWN feed, lists security updates for packages from AlmaLinux, Debian, Fedora, Mageia, Oracle, SUSE, and Ubuntu.
Cyber ·
A security notice published on September 28, 2026 reports three integer overflow or underflow flaws in catdoc. Malformed files could cause the program to fail or execute arbitrary code.
Looking for something else?DocumentationContact
