Cybersecurity News

Source Watch

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE OpenSSL Critical Buffer Overflow Update SUSE-2026-2411-1

An update that solves four vulnerabilities and has one security fix can now be installed.

Linux OpenSSL

LinuxSecurity - Security Advisories Vulnerabilities

SUSE 2026-2412-1 Important openssl-1_1-livepatches Heap Use-After-Free

An update that solves one vulnerability and has one security fix can now be installed.

Linux OpenSSL

LinuxSecurity - Security Advisories Vulnerabilities

Ubuntu 26.04 rabbitmq-c Critical Buffer Overflow and DoS Issues 8437-1

Several security issues were fixed in rabbitmq-c.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Ubuntu Squid Important DoS Buffer Overflow Vulnerabilities USN-8435-1

Several security issues were fixed in Squid.

Linux

LinuxSecurity - Security Advisories Alerts

Ubuntu CA Certificates Important Update Advisory USN-8436-1

The CA certificates in the ca-certificates package were updated.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed python311-zeroconf Moderate Threat Fix 2026-11036-1

An update that solves one vulnerability can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed python311-aiosmtplib Moderate CVE-2026-53533 Update

An update that solves one vulnerability can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed google-osconfig-agent Moderate DoS Issue 2026-11032-1

An update that solves one vulnerability can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE OpenSSL Important Heap Use-After-Free Vulnerability 2026-2409-1

An update that solves one vulnerability and has one security fix can now be installed.

Linux OpenSSL

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE 15.6 openssl-1_1-livepatches Important DoS CVE-2026-45447

An update that solves one vulnerability and has one security fix can now be installed.

Linux OpenSSL

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE OpenSSL Significant Denial of Service Heap Overflow 2026-2405-1

An update that solves five vulnerabilities can now be installed.

Linux OpenSSL

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE 15.6 Critical OpenSSL Livepatches Buffer Overflow CVE-2025-15467

An update that solves four vulnerabilities and has one security fix can now be installed.

Linux OpenSSL

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE openssl-3 Important Buffer Overflow Patch SUSE-SU-2026-2397-1

An update that solves eight vulnerabilities can now be installed.

Linux OpenSSL

LinuxSecurity - Security Advisories Vulnerabilities

SUSE Perl-XML-LibXML Important Memory Error CVE-2026-8177

An update that solves one vulnerability can now be installed.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Ubuntu 26.04 LTS FreeRDP Critical DoS Issue USN-8432-1 CVE-2026-45700

Several security issues were fixed in FreeRDP.

Linux

LinuxSecurity - Security Advisories Alerts

Ubuntu 18.04 Ruby Security Advisory USN-8431-1 Remote Access Issues

Ruby could allow unintended access to network services.

Linux

LinuxSecurity - Security Advisories

Ubuntu 20.04 LTS rsync Significant Denial Of Service Resolutions USN-8349-3

USN-8349-1 introduced regressions in rsync.

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 43 7zip Critical Code Exec Info Disclosure Vuln 2026-f36864b408

Fixes CVE-2026-48092: Information disclosure in 32-bit builds Fixes CVE-2026-48095: Arbitrary code execution in NTFS handler Fixes CVE-2026-48101: Information …

Linux

LinuxSecurity - Security Advisories

Fedora 43 Hugo Important Information Disclosure Vuln 2026-35166

Update to 0.162.1 (rhbz#2455512)

Linux

LinuxSecurity - Security Advisories

Fedora 43 perl-Mojo-JWT Important Timing Attack Protect 2026-1da54e6cb8

This release of Mojo::JWT Improves the security of decode to prevent timing side-channel attacks in symmetric signatures

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 44 7zip Vulnerability Allows Arbitrary Code Execution Risks Found

Fixes CVE-2026-48092: Information disclosure in 32-bit builds Fixes CVE-2026-48095: Arbitrary code execution in NTFS handler Fixes CVE-2026-48101: Information …

Linux

LinuxSecurity - Security Advisories Alerts

Fedora 44 Ack Important Upgrade 3.10.0 Advisory 2026-bb708e11d7

Update to version 3.10.0

Linux

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 44 Hugo Moderate Risk of Information Exposure Buffer Vulnerability

Update to 0.162.1 (rhbz#2455512)

Linux

LinuxSecurity - Security Advisories Alerts

Fedora 44 Perl Mojo-JWT Security Fix Advisory FEDORA-2026-80333f8f56

This release of Mojo::JWT Improves the security of decode to prevent timing side-channel attacks in symmetric signatures

Linux

Back to Home

What it means for your servers

Check Point gateways hacked through PHP2Shell: the vendor confirms attacks, a backdoor and a wiper

N-central: N-able ships a critical update after exploits for its RMM platform go public

Xen Orchestra: an exploited authentication bypass gives attackers admin rights over XCP-ng virtualisation

FreeSWITCH: a single SIP message can run commands on the server, and the flaw is being exploited

OpenSSH: password authentication can be bypassed on Linux systems using musl without PAM, CERT-FR warns

WordPress: a flaw in the core upgrade process is exploited to run code on servers, CISA warns

cPGuard: a hijacked update channel pushed a root backdoor to about 2,950 Linux servers

Synology: ransomware attacks hit NAS still running DSM versions left unpatched since 2024

GitLab CVE-2026-97229: now listed as exploited by CISA, and Alpine Linux shows that upgrading is not always enough

PHP2Shell: two critical PHP flaws allow unauthenticated remote code execution on web servers

OVHcloud CLI: official binaries replaced with a secret-stealing malware on GitHub for 1 h 33

BeyondTrust Remote Support: a zero-day exploited since August lets attackers take over the appliance without an account

Nextcloud: attackers plant web shells through Collabora’s Built-in CODE Server app, update or remove it now

FBI and nine partner agencies expose the toolkit of China-linked Integrity Tech: old flaws, Exchange password spraying and SoftEther VPN backdoors

Atlassian Data Center: critical flaw lets anyone read files on Jira, Confluence and Bitbucket servers

Apache HTTP Server 2.4.69: 20 security fixes, none critical — how to update calmly

Citrix NetScaler: two critical zero-days under mass exploitation — patch, then check for compromise

Latest headlines from security outlets

openSUSE OpenSSL Critical Buffer Overflow Update SUSE-2026-2411-1

SUSE 2026-2412-1 Important openssl-1_1-livepatches Heap Use-After-Free

Ubuntu 26.04 rabbitmq-c Critical Buffer Overflow and DoS Issues 8437-1

Ubuntu Squid Important DoS Buffer Overflow Vulnerabilities USN-8435-1

Ubuntu CA Certificates Important Update Advisory USN-8436-1

openSUSE Tumbleweed python311-zeroconf Moderate Threat Fix 2026-11036-1

openSUSE Tumbleweed python311-aiosmtplib Moderate CVE-2026-53533 Update

openSUSE Tumbleweed google-osconfig-agent Moderate DoS Issue 2026-11032-1

openSUSE OpenSSL Important Heap Use-After-Free Vulnerability 2026-2409-1

openSUSE 15.6 openssl-1_1-livepatches Important DoS CVE-2026-45447

openSUSE OpenSSL Significant Denial of Service Heap Overflow 2026-2405-1

openSUSE 15.6 Critical OpenSSL Livepatches Buffer Overflow CVE-2025-15467

openSUSE openssl-3 Important Buffer Overflow Patch SUSE-SU-2026-2397-1

SUSE Perl-XML-LibXML Important Memory Error CVE-2026-8177

Ubuntu 26.04 LTS FreeRDP Critical DoS Issue USN-8432-1 CVE-2026-45700

Ubuntu 18.04 Ruby Security Advisory USN-8431-1 Remote Access Issues

Ubuntu 20.04 LTS rsync Significant Denial Of Service Resolutions USN-8349-3

Fedora 43 7zip Critical Code Exec Info Disclosure Vuln 2026-f36864b408

Fedora 43 Hugo Important Information Disclosure Vuln 2026-35166

Fedora 43 perl-Mojo-JWT Important Timing Attack Protect 2026-1da54e6cb8

Fedora 44 7zip Vulnerability Allows Arbitrary Code Execution Risks Found

Fedora 44 Ack Important Upgrade 3.10.0 Advisory 2026-bb708e11d7

Fedora 44 Hugo Moderate Risk of Information Exposure Buffer Vulnerability

Fedora 44 Perl Mojo-JWT Security Fix Advisory FEDORA-2026-80333f8f56