Knowledge you can apply
Security for teams connecting data, documents and agents to AI.
US authorities offer $10 million for information about a suspect described as a prominent figure in the Hafnium campaign, in which hackers broke into thousands of computers and stole large volumes of documents.
Read articleUbuntu Security advisory on incorrect handling of malformed RealMedia and ASF files in GStreamer Ugly Plugins, with risks of code execution, denial of service and information exposure.
Read articleCisco Talos disclosed vulnerabilities already fixed by vendors in Foxit Reader, Windows, Photoshop and macOS, including remote code execution and privilege escalation risks.
Read articleUbuntu Security advisory dated 7 October 2026 lists eight CVEs in the Go Networking package, with possible denial of service, XSS and access control bypass.
Read articleLawmakers who oversee military cyber policy want a $11 million mental health program for Cyber Command, based at Fort Meade, Maryland, added to defense spending legislation.
Read articleAn investigation identified a breach of FARE, a state program used by Arizona courts to collect fines and debts tied to traffic and criminal offenses. The case was reported in October 2026.
Read articleSecurity advisory dated October 7, 2026 on project substitution in OpenStack's Zaqar message queue service through the WebSocket channel. The CVE is still pending and the affected-version list in the feed is incomplete.
Read articleA moderate flaw in Apache Geode Web Management can write sensitive information into log files. Versions from 2.0.0 up to before 2.0.3 are affected, and the fix is in 2.0.3.
Read articleAdvisory published on 7 October 2026 about the Apache Jackrabbit WebDAV/DavEx client, rated medium severity (CVSS 4.0: 6.9). Externally controlled input can select classes or code in the affected 2.20, 2.22 and 2.23 lines.
Read articleMachine-translated report on the Charon project, which aims to offer a stable API for accessing internal Rust compiler information and making it easier for other tools to use.
Read articleAdvisory dated October 7, 2026 describes a critical flaw (CVSS 4.0: 9.3) in the Apache Jackrabbit WebDAV server that allows reusing cached authenticated sessions without prior authentication, with a risk of access across users.
Read articleA federal judge in Oklahoma excluded Flock camera evidence in a drug trafficking case, influenced by a recent Supreme Court decision on geofencing and digital evidence.
Read articleOn October 5, Atlassian published fixes for several products against an arbitrary file access flaw. SANS ISC reports related scanning, with risk of reading configuration files.
Read articleOn October 7, 2026, the Operational Technology Cybersecurity Coalition asked CISA for a new federal directive focused on OT, the technology used to monitor and control critical infrastructure.
Read articleA KrebsOnSecurity report links an extortion attempt against a spun-off Boeing business unit to the ShinyHunters group, the arrest of a suspect in Jordan, and exploitation of CVE-2026-35273 in PeopleSoft.
Read articleSummary of a Kernel Recipes 2026 talk on the LAVD scheduler, first built for games and now used for other kinds of workloads on Linux.
Read articleRaspberry Pi OS based on Debian 13 (trixie) has been released for x86-64 PCs with a 64-bit Desktop edition, according to an announcement by Simon Long relayed in the LWN feed.
Read articleUbuntu Security notice describes a Sudo flaw where sudoers rules using NOTBEFORE or NOTAFTER with timestamps lacking a trailing timezone indicator could let a local attacker run commands outside the allowed window.
Read articleLinux distributions published security updates for numerous packages, including kernel, OpenSSH, Sudo, Firefox, Chromium, Docker and network components, according to the translated summary of the LWN feed.
Read articleAn Ubuntu Security feed notice lists five flaws in Poppler, a PDF rendering library: integer overflows and a null pointer dereference that can cause denial of service and, in some cases, arbitrary code execution.
Read articleRota Nacional
30 days, no card, with a starting quota. After that, Pix credit from R$ 10,00.