Cyber ·
XSS in ansi2html versions before 1.9.4
A report published on September 24, 2026 describes how crafted build-log lines could be converted to HTML and enable XSS for viewers using ansi2html before version 1.9.4.
Cyber
Security for teams connecting data, documents and agents to AI.
Articles 706
Cyber ·
CVE-2026-97230: Alert on Perl module 1.00
Published on September 24, 2026, the alert says version 1.00 of IO::Socket::SSL::SelfCertificate contains malware that runs Python code fetched from an obfuscated URL. The news item is an automatic translation of an oss-sec feed notice.
Cyber ·
CVE-2026-85491 notice: metadata correction
A message published on September 24, 2026 corrected the VCS repository listing in the Catalyst::Seal notice: the earlier repository reference came from incorrect module metadata.
Cyber ·
CVE-2026-85491: authorization flaw in Catalyst::Seal
A notice published on September 24, 2026 says versions of Catalyst-Seal earlier than 0.03 may let one request affect another request’s authorization or routing.
Cyber ·
CVE-2026-97636: Airflow Vault team-scope bypass
A notice published on September 24, 2026 reports a moderate-severity flaw in the Apache Airflow HashiCorp provider: a user-controlled variable key may bypass team scope and expose another team’s secret.
Cyber ·
Employees who use their own product can spot improvements
In a piece published in the 00f.net feed on September 24, 2026, the author argues that employees who choose to use their company's product for personal projects can notice problems, suggest improvements, and explain its value from experience.
Cyber ·
DOJ accuses digital forensics firm of concealing Russia link
A news report published on September 24, 2026, says two executives were arrested on allegations that they lied about the Russian manufacture of data-extraction technology sold to several US agencies.
Cyber ·
U.S. bill proposes voluntary cybersecurity rules for telecommunications
Published on September 24, 2026, the report says two U.S. senators introduced a proposal for voluntary rules for the telecommunications sector after attacks attributed to Salt Typhoon.
Cyber ·
USN-8820-1: update fixes curl vulnerabilities
A security notice published on September 24, 2026, reports curl flaws that may affect validation, cookies, credentials, availability, and code execution in specific Ubuntu versions.
Cyber ·
USN-8821-1: OpenStack Swift flaw
A security notice published on September 24, 2026 reports that truncated aws-chunked PUT request bodies may cause OpenStack Swift's s3api middleware to consume excessive resources and trigger denial of service.
Cyber ·
Rydox operator pleads guilty after extradition
A September 24, 2026 news report describes the Rydox illicit-market operator’s guilty plea and summarizes allegations involving the sale of stolen data and illegal access.
Cyber ·
F-Droid 2.0 refreshes the Android experience
Released on September 24, 2026, F-Droid 2.0 overhauls the official app with improved search, more useful categories, and simpler app discovery and installation.
Cyber ·
Trust and the tempting consultancy offer
A September 24, 2026 bulletin warns that fake consultancy offers can probe professionals and seek non-public information or abuse of trusted access.
Cyber ·
Research warns of Linux file notification attacks
Published on September 24, 2026, this report summarizes research into file notifications that may expose user activity on Android, Linux, macOS, and Windows. On Linux, it describes directory monitoring and a clickjacking attack affecting KDE.
Cyber ·
OSSA-2026-042: Zaqar authentication bypass alert
A notice published on September 24, 2026 describes CVE-2026-97404: an empty URL-Signature header in OpenStack Zaqar can bypass authentication. The available text is incomplete.
Cyber ·
OpenStack Swift advisory reports cross-container exposure
Advisory OSSA-2026-041, published on September 24, 2026, concerns CVE-2026-97149 and possible information disclosure between containers via Swift tempurl. The supplied description is incomplete.
Cyber ·
CVE-2026-96512: TZ affects sudo time rules
An alert published on September 24, 2026 reports that the TZ variable can still alter NOTBEFORE/NOTAFTER checks in sudoers rules. The available excerpt does not state the full impact.
Cyber ·
DolphinScheduler: cross-project authorization flaw
A notice published on September 24, 2026 reports an authorization flaw in Apache DolphinScheduler task-group APIs. Versions earlier than 3.4.3 are affected; upgrading is recommended.
Cyber ·
USN-8819-1: Linux kernel fixes
A security notice published on September 24, 2026 reports flaws in the Linux kernel's NFS server, IPv6 networking, and Netfilter, addressed by an update.
Cyber ·
USN-8818-1: update fixes Linux kernel vulnerabilities
A security bulletin published on September 24, 2026 reports fixes for vulnerabilities across multiple Linux kernel subsystems, including an Arm processor flaw that could allow memory protections to be bypassed or privileges to be raised.