Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies to patch a high-severity Linux kernel privilege escalation bug that at…
CISA warns of hackers now exploiting critical Node2Shell flaw
On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that hackers have begun exploiting a critical Brotli vulnerability known a…
Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two vulnerabilities impacting Adobe Commerce and Magento, and Google's Brotli…
Tailscale warns of SSH flaws allowing root privilege escalation
The Tailscale security team is working to patch almost a dozen security vulnerabilities that could be exploited to steal credentials, crash servers, gain root …
CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding them…
Fedora 43 Nix 2.31.6 Fixes High- and Moderate-Severity Issues
Update to 2.31.6 which addresses: CVE-2026-110450 (High, https://github.com/NixOS/nix/security/advisories/GHSA- jwvx-xq5j-gc56) and other Moderate issues: see …
CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista…
CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server.…
CISA: SafePay ransomware hit over 600 critical infrastructure orgs
The Cybersecurity and Infrastructure Security Agency (CISA) says the SafePay ransomware gang has breached over 600 critical infrastructure organizations worldw…
CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, in…
PHP warns admins of two critical flaws, emergency patches coming tomorrow
The PHP security team is warning administrators to prepare for emergency security updates tomorrow to address two critical vulnerabilities, as information abou…
CISA to keep cyber pay incentives, but less staff will qualify
Justin Doubleday reports: The Cybersecurity and Infrastructure Security Agency is continuing to offer cyber pay incentives to retain skilled technical staff, b…
Fedora 45 libevent Critical Multiple Issues Advisory 2026-0a83f1b852
Update to 2.1.13. The following security vulnerabilites are fixed in this update: GHSA-fj29-64w6-73h6 CVE-2026-63383 https://github.com/libevent/libevent/secur…
SUSE Linux Kernel Important Live Patch 49 Advisory 2026-3766-1
A security update for SUSE Linux Kernel fixes 18 vulnerabilities addressing various issues and bugs, including memory leaks and data handling problems, enhanci…
Oracle Linux 9 MySQL Important Bug Fix Advisory ELSA-2026-56973
Oracle Linux 9 has released security updates for various RPM packages including mecab, mysql, and rapidjson, addressing multiple CVEs and improving system stab…
Fedora 44 rust-tokei Vulnerabilities Fixed Advisory 2026-74c4a6f82e
Fedora 44 updates rust-tokei to version 14.0.0, enhancing security by linking applications to the latest libgit2 library and addressing multiple security vulne…
SUSE Linux Micro 6.0 Advisory Important Kernel Issues Fixed 2026-23082-1
A security update for SUSE Linux Enterprise Micro 6.0 addresses six vulnerabilities, providing fixes for security issues related to various components of the L…
SUSE Linux Micro 6.0 Advisory 2026-23102-1 Kernel RT Important Threats
A security update for SUSE Linux Enterprise Micro 6.0 addresses six vulnerabilities in the kernel, enhancing overall system security through crucial fixes and …
openSUSE Tumbleweed librest Moderate CVE-2026-16615 Advisory 2026-11477-1
An update for the librest package on openSUSE Tumbleweed resolves CVE-2026-16615, a moderate security vulnerability, allowing affected users to install the sec…
SUSE libssh2_org Important Heap Overflow Exec Advisory 2026-3526-1
A security update for libssh2_org addresses eight vulnerabilities in SUSE products, including heap overflows and potential arbitrary code execution, improving …
SUSE pcp Critical DoS Command Injection Advisory 2026-3506-1
A critical security update for pcp addresses six vulnerabilities and includes two security fixes, applicable to various SUSE Linux products, with installation …
Oracle Linux 8 javapackages-tools Important Update Advisory ELSA-2026-41948
Oracle Linux 8 has released a security advisory with numerous updated RPM packages and source RPMs addressing vulnerabilities, including CVE-2025-67030, ensuri…
openSUSE ImageMagick Moderate Buffer Overflow Advisory 2026-11405-1
An update for ImageMagick on openSUSE Tumbleweed addresses four security vulnerabilities, enhancing package security and stability for users. Various CVEs are …
Oracle Linux 8 Fence Agents Important CVE Fix Advisory ELSA-2026-47736
Oracle Linux released security updates for multiple fence agent packages to address CVE-2026-59939, enhancing system security on Oracle Linux 8 for both x86_64…