Cybersecurity News

Source Watch

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

LinuxSecurity - Security Advisories Vulnerabilities

Ubuntu 26.04 rabbitmq-c Critical Buffer Overflow and DoS Issues 8437-1

Several security issues were fixed in rabbitmq-c.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Ubuntu Squid Important DoS Buffer Overflow Vulnerabilities USN-8435-1

Several security issues were fixed in Squid.

Linux

LinuxSecurity - Security Advisories Alerts

Ubuntu CA Certificates Important Update Advisory USN-8436-1

The CA certificates in the ca-certificates package were updated.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed python311-zeroconf Moderate Threat Fix 2026-11036-1

An update that solves one vulnerability can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed python311-aiosmtplib Moderate CVE-2026-53533 Update

An update that solves one vulnerability can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed google-osconfig-agent Moderate DoS Issue 2026-11032-1

An update that solves one vulnerability can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE OpenSSL Important Heap Use-After-Free Vulnerability 2026-2409-1

An update that solves one vulnerability and has one security fix can now be installed.

Linux OpenSSL

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE 15.6 openssl-1_1-livepatches Important DoS CVE-2026-45447

An update that solves one vulnerability and has one security fix can now be installed.

Linux OpenSSL

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE OpenSSL Significant Denial of Service Heap Overflow 2026-2405-1

An update that solves five vulnerabilities can now be installed.

Linux OpenSSL

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE 15.6 Critical OpenSSL Livepatches Buffer Overflow CVE-2025-15467

An update that solves four vulnerabilities and has one security fix can now be installed.

Linux OpenSSL

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE openssl-3 Important Buffer Overflow Patch SUSE-SU-2026-2397-1

An update that solves eight vulnerabilities can now be installed.

Linux OpenSSL

LinuxSecurity - Security Advisories Vulnerabilities

SUSE Perl-XML-LibXML Important Memory Error CVE-2026-8177

An update that solves one vulnerability can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Ubuntu 26.04 LTS FreeRDP Critical DoS Issue USN-8432-1 CVE-2026-45700

Several security issues were fixed in FreeRDP.

Linux

LinuxSecurity - Security Advisories Alerts

Ubuntu 18.04 Ruby Security Advisory USN-8431-1 Remote Access Issues

Ruby could allow unintended access to network services.

Linux

LinuxSecurity - Security Advisories

Ubuntu 20.04 LTS rsync Significant Denial Of Service Resolutions USN-8349-3

USN-8349-1 introduced regressions in rsync.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 43 7zip Critical Code Exec Info Disclosure Vuln 2026-f36864b408

Fixes CVE-2026-48092: Information disclosure in 32-bit builds Fixes CVE-2026-48095: Arbitrary code execution in NTFS handler Fixes CVE-2026-48101: Information …

Linux

LinuxSecurity - Security Advisories

Fedora 43 Hugo Important Information Disclosure Vuln 2026-35166

Update to 0.162.1 (rhbz#2455512)

Linux

LinuxSecurity - Security Advisories

Fedora 43 perl-Mojo-JWT Important Timing Attack Protect 2026-1da54e6cb8

This release of Mojo::JWT Improves the security of decode to prevent timing side-channel attacks in symmetric signatures

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 44 7zip Vulnerability Allows Arbitrary Code Execution Risks Found

Fixes CVE-2026-48092: Information disclosure in 32-bit builds Fixes CVE-2026-48095: Arbitrary code execution in NTFS handler Fixes CVE-2026-48101: Information …

Linux

LinuxSecurity - Security Advisories Alerts

Fedora 44 Ack Important Upgrade 3.10.0 Advisory 2026-bb708e11d7

Update to version 3.10.0

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 44 Hugo Moderate Risk of Information Exposure Buffer Vulnerability

Update to 0.162.1 (rhbz#2455512)

Linux

LinuxSecurity - Security Advisories Alerts

Fedora 44 Perl Mojo-JWT Security Fix Advisory FEDORA-2026-80333f8f56

This release of Mojo::JWT Improves the security of decode to prevent timing side-channel attacks in symmetric signatures

Linux

LinuxSecurity - Security Advisories Vulnerabilities

SUSE 2026-2394-1 libcaca Significant Integer Overflow Risk CVE-2026-42046

An update that solves one vulnerability can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

SUSE OpenSSH Major Security Patch June 2026 SUSE-SU-2026-2395-1

An update that solves three vulnerabilities and has one security fix can now be installed.

Linux OpenSSH

Back to Home

What it means for your servers

Check Point gateways hacked through PHP2Shell: the vendor confirms attacks, a backdoor and a wiper

N-central: N-able ships a critical update after exploits for its RMM platform go public

Xen Orchestra: an exploited authentication bypass gives attackers admin rights over XCP-ng virtualisation

FreeSWITCH: a single SIP message can run commands on the server, and the flaw is being exploited

OpenSSH: password authentication can be bypassed on Linux systems using musl without PAM, CERT-FR warns

WordPress: a flaw in the core upgrade process is exploited to run code on servers, CISA warns

cPGuard: a hijacked update channel pushed a root backdoor to about 2,950 Linux servers

Synology: ransomware attacks hit NAS still running DSM versions left unpatched since 2024

GitLab CVE-2026-97229: now listed as exploited by CISA, and Alpine Linux shows that upgrading is not always enough

PHP2Shell: two critical PHP flaws allow unauthenticated remote code execution on web servers

OVHcloud CLI: official binaries replaced with a secret-stealing malware on GitHub for 1 h 33

BeyondTrust Remote Support: a zero-day exploited since August lets attackers take over the appliance without an account

Nextcloud: attackers plant web shells through Collabora’s Built-in CODE Server app, update or remove it now

FBI and nine partner agencies expose the toolkit of China-linked Integrity Tech: old flaws, Exchange password spraying and SoftEther VPN backdoors

Atlassian Data Center: critical flaw lets anyone read files on Jira, Confluence and Bitbucket servers

Apache HTTP Server 2.4.69: 20 security fixes, none critical — how to update calmly

Citrix NetScaler: two critical zero-days under mass exploitation — patch, then check for compromise

Latest headlines from security outlets

Ubuntu 26.04 rabbitmq-c Critical Buffer Overflow and DoS Issues 8437-1

Ubuntu Squid Important DoS Buffer Overflow Vulnerabilities USN-8435-1

Ubuntu CA Certificates Important Update Advisory USN-8436-1

openSUSE Tumbleweed python311-zeroconf Moderate Threat Fix 2026-11036-1

openSUSE Tumbleweed python311-aiosmtplib Moderate CVE-2026-53533 Update

openSUSE Tumbleweed google-osconfig-agent Moderate DoS Issue 2026-11032-1

openSUSE OpenSSL Important Heap Use-After-Free Vulnerability 2026-2409-1

openSUSE 15.6 openssl-1_1-livepatches Important DoS CVE-2026-45447

openSUSE OpenSSL Significant Denial of Service Heap Overflow 2026-2405-1

openSUSE 15.6 Critical OpenSSL Livepatches Buffer Overflow CVE-2025-15467

openSUSE openssl-3 Important Buffer Overflow Patch SUSE-SU-2026-2397-1

SUSE Perl-XML-LibXML Important Memory Error CVE-2026-8177

Ubuntu 26.04 LTS FreeRDP Critical DoS Issue USN-8432-1 CVE-2026-45700

Ubuntu 18.04 Ruby Security Advisory USN-8431-1 Remote Access Issues

Ubuntu 20.04 LTS rsync Significant Denial Of Service Resolutions USN-8349-3

Fedora 43 7zip Critical Code Exec Info Disclosure Vuln 2026-f36864b408

Fedora 43 Hugo Important Information Disclosure Vuln 2026-35166

Fedora 43 perl-Mojo-JWT Important Timing Attack Protect 2026-1da54e6cb8

Fedora 44 7zip Vulnerability Allows Arbitrary Code Execution Risks Found

Fedora 44 Ack Important Upgrade 3.10.0 Advisory 2026-bb708e11d7

Fedora 44 Hugo Moderate Risk of Information Exposure Buffer Vulnerability

Fedora 44 Perl Mojo-JWT Security Fix Advisory FEDORA-2026-80333f8f56

SUSE 2026-2394-1 libcaca Significant Integer Overflow Risk CVE-2026-42046

SUSE OpenSSH Major Security Patch June 2026 SUSE-SU-2026-2395-1