Cyber ·
Small farmers and food needs by 2050
The text says that half of the world's 475 million small farmers could meet humanity's additional food needs by 2050 and help restore biodiversity.
Cyber
Security for teams connecting data, documents and agents to AI.
Articles 706
Cyber ·
USN-8826-1: LXC vulnerabilities
A security notice published on September 28, 2026 reports two LXC flaws: possible exposure of sensitive information in specific Ubuntu versions and possible denial of service.
Cyber ·
ISC Stormcast: September 28, 2026 episode
The archive records an ISC Stormcast episode published on September 28, 2026, but provides no information about the subjects covered.
Cyber ·
USN-8825-1: Requests flaw
A security notice published on September 28, 2026 reports that a flaw in Requests' generation of random paths for temporary files could allow arbitrary code execution.
Cyber ·
Phishing: signals beyond quarantine
Published on September 28, 2026, the article describes an Elastic Security and Sublime Security integration that correlates email and endpoint signals and automates responses with human approval.
Cyber ·
Kernel 7.3-rc5 released for testing
Linux kernel pre-release 7.3-rc5 became available on September 27, 2026. The maintainer described the diffstat as large, but noted no specific pattern or particularly alarming issue.
Cyber ·
Wireshark 4.6.9 fixes flaws and bugs
Wireshark version 4.6.9 fixes 19 vulnerabilities and 16 bugs, according to a notice published on September 27, 2026.
Cyber ·
CISA warns of exploited Citrix NetScaler flaws
A September 27, 2026 alert cites eight vulnerabilities in NetScaler ADC and Gateway. Two critical zero-days, CVE-2026-88771 and CVE-2026-88772, allow remote code execution and are under active exploitation.
Cyber ·
CISA adds two Citrix NetScaler flaws to KEV catalog
On September 27, 2026, CISA added two Citrix NetScaler vulnerabilities with evidence of active exploitation to its KEV catalog and urged organizations to prioritize risk-based remediation.
Cyber ·
Libextractor and privileged processes: an open question
A message published on September 26, 2026 questions whether GNU libextractor is suitable for use in setuid, setgid, or other privileged processes. The excerpt does not detail the flaw cited in the title; consult and verify the original discussion before drawing conclusions.
Cyber ·
GDB 18.1 adds commands and support
Released on September 26, 2026, version 18.1 of the GDB debugger adds subprocess environment commands, history saving, new targets, and updates to the Python API.
Cyber ·
CVE-2026-95510: GNU Inetutils flaw
A notice published on September 25, 2026 reports possible service disruption involving an uninitialized sigaction structure; the possibility of code execution remains unclear.
Cyber ·
CVE-2026-100310: GNU libextractor flaw
A notice published on September 25, 2026 reports that GNU libextractor versions before 1.16 may allow local privilege escalation through untrusted plugin search paths.
Cyber ·
CVE-2026-91206: XSS in Apache Roller 6.1.5
A September 25, 2026 advisory reports a moderate reflected XSS issue in Apache Roller 6.1.5’s optional LDAP comment authenticator.
Cyber ·
CVE-2026-91204: XSS risk in Apache Roller
A bulletin describes a moderate flaw in Apache Roller 6.1.5: comments can store javascript: links that may run scripts in visitors’ browsers.
Cyber ·
Apache Roller 6.1.5: stored XSS in comment moderation
A security bulletin published on September 25, 2026, reports a stored XSS flaw in Apache Roller 6.1.5, triggered when a moderator or administrator views the comment moderation page.
Cyber ·
Telecom extortion leads to 70-month sentence
A report published on September 25, 2026 says a U.S. soldier received a 70-month prison sentence for intrusions, theft of call and message metadata, and extortion targeting telecom companies.
Cyber ·
Apache Roller 6.1.5: Trackback-stored XSS alert
A notice published on September 25, 2026 describes stored XSS in Apache Roller 6.1.5. The risk depends on published entries accepting comments and Trackbacks; the stated severity is moderate, with a CVSS 3.1 score of 6.1.
Cyber ·
CVE-2026-82387: Stored XSS in Apache Roller
A notice published on September 25, 2026 reports stored XSS in Apache Roller 6.1.5: users permitted to upload media may store active content because the system trusts the content type supplied with the upload.
Cyber ·
CVE-2026-82386: Apache Roller OPML import flaw
A notice published on September 25, 2026 reports a vulnerability in Apache Roller 6.1.5: an administrator could exploit OPML import to read files accessible to the process and reach internal network addresses.