Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces
Palo Alto Networks on Wednesday warned that threat actors are exploiting the recently patched PHP2Shell vulnerabilities against publicly-accessible management …
Japan Airlines warns of data breach as country grapples with multiple cyber incidents
Hackers stole passport numbers, frequent flyer numbers, email addresses and phone numbers for about 2,000 customers.
GitLab warns of new max severity code execution vulnerability
GitLab has released security patches for a maximum-severity Regular Expression Compiler flaw that can let remote attackers run arbitrary code on vulnerable ser…
Fedora 43 rust-rustls-webpki Update for eMudhra CA Compromise
Update the rustls-webpki crate to version 0.103.16. Update the webpki-roots and webpki-root-certs crates to version 1.0.10. This addresses security advisories …
Fedora 43 rust-webpki-root-certs Fixes eMudhra CA Trust Issue
Update the rustls-webpki crate to version 0.103.16. Update the webpki-roots and webpki-root-certs crates to version 1.0.10. This addresses security advisories …
Fedora 43 Updates rust-webpki-roots After CA Compromise
Update the rustls-webpki crate to version 0.103.16. Update the webpki-roots and webpki-root-certs crates to version 1.0.10. This addresses security advisories …
Fedora 44 Updates rust-webpki-roots After eMudhra CA Compromise
Update the rustls-webpki crate to version 0.103.16. Update the webpki-roots and webpki-root-certs crates to version 1.0.10. This addresses security advisories …
Fedora 44 Updates Rust Certificate Roots After CA Compromise
Update the rustls-webpki crate to version 0.103.16. Update the webpki-roots and webpki-root-certs crates to version 1.0.10. This addresses security advisories …
Fedora 44 Updates rustls-webpki After eMudhra CA Compromise
Update the rustls-webpki crate to version 0.103.16. Update the webpki-roots and webpki-root-certs crates to version 1.0.10. This addresses security advisories …
Mageia 10 Updates Minicom and Lrzsz in Advisory 2026-0157
Security update
SUSE ImageMagick Important DoS Issues Fix Advisory 2026-4691-1
An update that solves 28 vulnerabilities and has two security fixes can now be installed.
SUSE Kernel Important Fixes for 229 Vulnerabilities Advisory 2026-4687-1
An update that solves 229 vulnerabilities, contains one feature and has five security fixes can now be installed.
Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules
Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site's server, and fixes were shipped on October 14 in Drupal…
Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks
Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targetin…
openSUSE Leap 15.5 Important Xen Buffer Overflow Fixes Advisory 2026-4641-1
An update that solves four vulnerabilities and has one security fix can now be installed.
Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another
A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed…
SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft
A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on O…
Ubuntu Linux Kernel Advisory 8922-1 Multiple Vulnerabilities Fixed
Several security issues were fixed in the Linux kernel.
Fedora 43 Flare-im Advisory 2026-67c5e97a79 Impersonation Fix
Update to latest upstream security release. Fixes an impersonation vulnerability in libsignal-service-rs. See: https://gitlab.com/schmiddi-on- mobile/flare/-/r…
Cisco warns of critical flaws allowing Nexus switch takeover
Cisco released security advisories for five critical vulnerabilities in its NX-OS data center network operating system that could be exploited to run arbitrary…
vLLM Vulnerability Update Fixes RCE and Server-Crashing Flaws
The vLLM project published security advisories on October 6, 2026, identifying version 0.31.0 as the fix for remote code execution (RCE), service crashes, and …
Cyber experts call on CISA to create mandatory federal OT rules
The Operational Technology Cybersecurity Coalition released a white paper urging the CISA to create a new directive centered around operational technology, whi…
Fedora 45 OCaml XML Light Critical Bugs Fix Advisory 2026-403bcf6fd8
This is a mass rebuild of the OCaml ecosystem with OCaml 5.5.1, which fixes two security bugs. See https://github.com/ocaml/ocaml/releases/tag/5.5.1 for detail…
Fedora 45 OCaml-Time-Now Critical Buffer Overflow Advisory 2026-403bcf6fd8
This is a mass rebuild of the OCaml ecosystem with OCaml 5.5.1, which fixes two security bugs. See https://github.com/ocaml/ocaml/releases/tag/5.5.1 for detail…