Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
WP Database Reset Plugin Had Some 'Easily Exploitable' Vulnerabilities
Another threat to WordPress sites has surfaced online. Researchers have discovered some serious security vulnerabilities in theÂWP Database Reset plugin.WP Dat…
Debian: DSA-4542-1: jackson-databind security update
It was discovered that jackson-databind, a Java library used to parse JSON and other data formats, did not properly validate user input before attempting deser…
Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks
Attackers behind a string of personal data leaks at Japanese organizations have abused APIs for mobile apps and targeted known software flaws, the JPCERT Coord…
Fedora 44 cockpit-machines Important Data Exposure Fix 2026-57e39fc2fa
Automatic update for cockpit-machines-357-1.fc44. Changelog for cockpit-machines * Wed Sep 23 2026 Packit - 357-1 - Harden against local attacks from accessing…
Linux File Truncation Patch Targets Data Loss Beyond the Requested Range
A Linux patch series addresses how file truncation or hole punching could discard valid data beyond the range an application asked to remove.
Fedora 45 evolution-data-server Update Bug Fixes CVE-2026-88859
Update to 3.62.0 evolution-data-server Bug Fixes: I#660 - GOA EWS: Do not require OABUrl in autodiscover I#662 - EBackend: Document how OAuth2 sources should a…
Fedora 43 perl-Data-Entropy Important Remote Access Fix CVE-2026-18536
Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. This update fixes that issue (CVE-2026-18536).
Fedora 44 perl-Data-Entropy Update CVE-2026-18536 Remote Entropy Fix
Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. This update fixes that issue (CVE-2026-18536).
Fedora 45 perl-Data-Entropy Important Remote Access Issue CVE-2026-18536
Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. This update fixes that issue (CVE-2026-18536).
openSUSE Tumbleweed Containerized Data Importer Moderate Issue 2026-11514-1
A new update for the containerized-data-importer1.66-api package in openSUSE Tumbleweed addresses twelve vulnerabilities, enhancing security for affected users.
Debian LTS Ironic Critical Sensitive Data Issues DLA-4743-1
Debian LTS Advisory DLA-4743-1 addresses multiple vulnerabilities in the Ironic package, including unredacted sensitive data in responses and command injection…
SUSE gstreamer-plugins-base Important User Data Validation Fix 2026-23059-1
SUSE has released an important security update for gstreamer-plugins-base, addressing the CVE-2024-4453 vulnerability related to improper validation of EXIF me…
Debian libraw Significant Vulnerability In Application Crash Data Integrity
Multiple vulnerabilities in the libraw library could cause application crashes, data corruption, or information disclosure, leading to upgrades in Debian 11 an…
Fedora 43 python-django5 Low Risk Data Exposure Bugs 2026-fbb9501b22
The Fedora 43 update for python-django5 to version 5.2.16 addresses three low-severity CVEs, enhancing security by fixing issues related to data exposure and p…
Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data
Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe Acrobat Chrome extension that has over 314 million users, wh…
Opera GX Flaw Let Malicious Sites Auto-Install Mods to Steal Data From Visited Pages
Researchers found a flaw in Opera GX, the gaming-focused version of the Opera browser, that let a malicious website silently install a browser add-on and use i…
AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack
Security firm Sysdig says it has found what it believes is the first ransomware attack run from start to finish by an AI agent.Its Threat Research Team calls t…
Vertex AI Vulnerability Exposes Google Cloud Data and Private Artifacts
Cybersecurity researchers have disclosed a security "blind spot" in Google Cloud's Vertex AI platform that could allow artificial intelligence (AI) agents to b…
OpenAI Patches ChatGPT Data Exfiltration Flaw and Codex GitHub Token Vulnerability
A previously unknown vulnerability in OpenAI ChatGPT allowed sensitive conversation data to be exfiltrated without user knowledge or consent, according to new …
Google Gemini Prompt Injection Flaw Exposed Private Calendar Data via Malicious Invites
Cybersecurity researchers have disclosed details of a security flaw that leverages indirect prompt injection targeting Google Gemini as a way to bypass authori…
Mageia 9: Critical Rand Function Vulnerability in perl-Data-Entropy
MGASA-2025-0279 - Updated perl-Data-Entropy packages fix security vulnerability
Fedora 43: luksmeta Critical Data Corruption Fix CVE-2025-11568
Fix handling of large metadata Fix: CVE-2025-11568
⚡ Weekly Recap: F5 Breached, Linux Rootkits, Pixnapping Attack, EtherHiding & More
It’s easy to think your defenses are solid — until you realize attackers have been inside them the whole time. The latest incidents show that long-term, silent…
Fedora 41: WordPress 6.8.3 Critical Data Leak & XSS Vulnerability Alert
WordPress 6.8.3 Release Security updates included in this release: A data exposure issue where authenticated users could access some restricted content. Indepe…