Cybersecurity News

Source Watch

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

LinuxSecurity - Security Advisories Vulnerabilities

SUSE Linux Micro 6.0 Kernel Important Security Fix Advisory 2026-22108-1

An update that solves 98 vulnerabilities and has 11 fixes can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

SUSE Linux Micro 6.2 Kernel Important Threat Fix Advisory 2026-22112-1

An update that solves 60 vulnerabilities and has four fixes can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

SUSE opensc Low Stack Overflow Issues Vuln 2026-22114-1

An update that solves four vulnerabilities can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

SUSE Kernel Major Update Addresses Critical Security Concern 2026-22117-1

An update that solves 60 vulnerabilities and has four fixes can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

SUSE Python-Dotenv Moderate Local File Overwrite Vulnerability 2026-22118-1

An update that solves one vulnerability can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

SUSE Linux 16.0 libXpm Moderate Out-of-Bounds Issue 2026-22121-1

An update that solves one vulnerability can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

SUSE Editorconfig-core-c Moderate Buffer Overflow Vuln 2026-22125-1

An update that solves one vulnerability can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

SUSE 16.0 Opensc Low Stack Overflow Out of Bounds Vuln 2026-22126-1

An update that solves four vulnerabilities can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

SUSE Linux Enterprise 16.0 Kernel Important Security Update 2026-22127-1

An update that solves 60 vulnerabilities and has four fixes can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

SUSE google-guest-agent Important Threats and Fixes 2026-22128-1

An update that solves six vulnerabilities and has five fixes can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Ubuntu OpenImageIO Significant Denial Of Service Security Flaws USN-8438-1

Several security issues were fixed in OpenImageIO.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Ubuntu 20.04 18.04 QEMU Medium DoS Vulnerability Backslide USN-8412-2

USN-8412-1 introduced a regression in QEMU

Linux

LinuxSecurity - Security Advisories

Ubuntu OpenStack Keystone Critical Roles Bypass Vulnern USN-8433-1

Several security issues were fixed in OpenStack Keystone.

Linux

LinuxSecurity - Security Advisories

Debian gsasl Critical Memory Exposure Resolution DSA-6348-1

It was discovered that missing input sanitising in the NTLM client of the GNU SASL library could result in memory disclosure For the stable distribution (trixi…

Linux

LinuxSecurity - Security Advisories Vulnerabilities

SUSE OpenSSL-1_1 Important Buffer Overflow DoS Vuln 2026-2403-1

An update that solves five vulnerabilities can now be installed.

Linux OpenSSL

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE 2026-2404-1 openssl-1_1 Important Buffer Overflow CVE-2026-45447

An update that solves five vulnerabilities can now be installed.

Linux OpenSSL

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Important openssl-1_1 Security Update Advisory 2026-2404-1

An update that solves five vulnerabilities can now be installed.

Linux OpenSSL

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE 15.5 OpenSSL Important Security Update 2026-2405-1

An update that solves five vulnerabilities can now be installed.

Linux OpenSSL

LinuxSecurity - Security Advisories Vulnerabilities

SUSE qemu Important Heap Overflow Denial of Service Vuln 2026-2406-1

An update that solves three vulnerabilities can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

SUSE perl-HTTP-Daemon Important OS Command Injection Fix 2026-2408-1

An update that solves one vulnerability can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE OpenSSL Important Heap Overflow Fix 2026-2409-1

An update that solves one vulnerability and has one security fix can now be installed.

Linux OpenSSL

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE 2026-2410-1 OpenSSL Important Heap Overflow Vuln

An update that solves one vulnerability and has one security fix can now be installed.

Linux OpenSSL

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE OpenSSL Critical Buffer Overflow Update SUSE-2026-2411-1

An update that solves four vulnerabilities and has one security fix can now be installed.

Linux OpenSSL

LinuxSecurity - Security Advisories Vulnerabilities

SUSE 2026-2412-1 Important openssl-1_1-livepatches Heap Use-After-Free

An update that solves one vulnerability and has one security fix can now be installed.

Linux OpenSSL

Back to Home

What it means for your servers

Check Point gateways hacked through PHP2Shell: the vendor confirms attacks, a backdoor and a wiper

N-central: N-able ships a critical update after exploits for its RMM platform go public

Xen Orchestra: an exploited authentication bypass gives attackers admin rights over XCP-ng virtualisation

FreeSWITCH: a single SIP message can run commands on the server, and the flaw is being exploited

OpenSSH: password authentication can be bypassed on Linux systems using musl without PAM, CERT-FR warns

WordPress: a flaw in the core upgrade process is exploited to run code on servers, CISA warns

cPGuard: a hijacked update channel pushed a root backdoor to about 2,950 Linux servers

Synology: ransomware attacks hit NAS still running DSM versions left unpatched since 2024

GitLab CVE-2026-97229: now listed as exploited by CISA, and Alpine Linux shows that upgrading is not always enough

PHP2Shell: two critical PHP flaws allow unauthenticated remote code execution on web servers

OVHcloud CLI: official binaries replaced with a secret-stealing malware on GitHub for 1 h 33

BeyondTrust Remote Support: a zero-day exploited since August lets attackers take over the appliance without an account

Nextcloud: attackers plant web shells through Collabora’s Built-in CODE Server app, update or remove it now

FBI and nine partner agencies expose the toolkit of China-linked Integrity Tech: old flaws, Exchange password spraying and SoftEther VPN backdoors

Atlassian Data Center: critical flaw lets anyone read files on Jira, Confluence and Bitbucket servers

Apache HTTP Server 2.4.69: 20 security fixes, none critical — how to update calmly

Citrix NetScaler: two critical zero-days under mass exploitation — patch, then check for compromise

Latest headlines from security outlets

SUSE Linux Micro 6.0 Kernel Important Security Fix Advisory 2026-22108-1

SUSE Linux Micro 6.2 Kernel Important Threat Fix Advisory 2026-22112-1

SUSE opensc Low Stack Overflow Issues Vuln 2026-22114-1

SUSE Kernel Major Update Addresses Critical Security Concern 2026-22117-1

SUSE Python-Dotenv Moderate Local File Overwrite Vulnerability 2026-22118-1

SUSE Linux 16.0 libXpm Moderate Out-of-Bounds Issue 2026-22121-1

SUSE Editorconfig-core-c Moderate Buffer Overflow Vuln 2026-22125-1

SUSE 16.0 Opensc Low Stack Overflow Out of Bounds Vuln 2026-22126-1

SUSE Linux Enterprise 16.0 Kernel Important Security Update 2026-22127-1

SUSE google-guest-agent Important Threats and Fixes 2026-22128-1

Ubuntu OpenImageIO Significant Denial Of Service Security Flaws USN-8438-1

Ubuntu 20.04 18.04 QEMU Medium DoS Vulnerability Backslide USN-8412-2

Ubuntu OpenStack Keystone Critical Roles Bypass Vulnern USN-8433-1

Debian gsasl Critical Memory Exposure Resolution DSA-6348-1

SUSE OpenSSL-1_1 Important Buffer Overflow DoS Vuln 2026-2403-1

openSUSE 2026-2404-1 openssl-1_1 Important Buffer Overflow CVE-2026-45447

openSUSE Important openssl-1_1 Security Update Advisory 2026-2404-1

openSUSE 15.5 OpenSSL Important Security Update 2026-2405-1

SUSE qemu Important Heap Overflow Denial of Service Vuln 2026-2406-1

SUSE perl-HTTP-Daemon Important OS Command Injection Fix 2026-2408-1

openSUSE OpenSSL Important Heap Overflow Fix 2026-2409-1

openSUSE 2026-2410-1 OpenSSL Important Heap Overflow Vuln

openSUSE OpenSSL Critical Buffer Overflow Update SUSE-2026-2411-1

SUSE 2026-2412-1 Important openssl-1_1-livepatches Heap Use-After-Free