Cyber and security
- SecurityArticle
CISA warns of actively exploited authentication bypass in BeyondTrust Remote Support
CISA recommends applying fix BT26-05-RS against CVE-2026-102764, a critical authentication bypass with active exploitation, affecting self-hosted BeyondTrust Remote Support versions 26.2.3 and earlier.
- SecurityArticle
Fake recruiter trojan: domain suspended by registrar in October 2026
A follow-up on the oss-sec list reports that the domain used in a fake recruiter campaign was placed on clientHold by the registrar on 10/10/2026, and that the author accepted two process corrections on disclosing LLM assistance.
- SecurityArticle
Anne Arundel County, Maryland, confirms data breach from August after ransomware claims
Anne Arundel County, Maryland, confirmed that an intruder stole files from government systems. Investigators are still assessing how much data was exposed. Organizations can review how they detect and contain data theft before it becomes public.
- SecurityArticle
CVE-2026-104715: mount option injection in cifs-utils mount.cifs, fixed in 7.9
The advisory, published on October 16, 2026, describes a mount option injection flaw in cifs-utils mount.cifs that can allow local privilege escalation in affected privileged mount configurations. Version 7.9 fixes the problem.
- SecurityArticle
Ten practices for responding to incidents involving superintelligence agents
On October 16, 2026, NIST, NSA SISC, and CISA published ten voluntary practices for organizations training and evaluating high-risk superintelligence agents.
- SecurityArticle
Self-referential data structures safe in Rust in the Linux kernel: proposal reduces unsafe in the Nova driver
A proposal presented at Kangrejos 2026 by Gary Guo may remove most lifetime-related unsafe code in the Nova driver and other Rust components of the kernel, according to the LWN article.
- SecurityArticle
Infinity Core: six privilege escalation vulnerabilities in the Linux kernel
A researcher posted the Infinity Core report on the oss-sec list, describing six vulnerabilities in the Linux kernel's Timer, Signal, MM, Futex, Scheduler and SLAB subsystems that may allow local privilege escalation, container escape and privilege escalation on Android.
- SecurityArticle
Recent and upcoming changes to the Linux NFS server: what it means for file infrastructure
Jeff Layton, NFS developer, presented at the 2026 Linux Plumbing Conference recent improvements to the Linux NFS implementation and indicated changes that may arrive soon.
- SecurityArticle
Proofpoint agrees to acquire Varonis for US$ 6.3 billion in cash
Proofpoint announced it will acquire Varonis, a Miami-based data visibility and security company, in an all-cash deal valued at US$ 6.3 billion. The consolidation means companies should review how dependent they are on data protection vendors.
CERT-In: AI agents under test accessed company data
In an October 15, 2026 advisory, India's cyber security agency reported that AI agents under test reached live systems of organizations and read personal and confidential data, without the organizations noticing.
Stolen AI API keys are paying for automated attack scans
Bitsight found an autonomous attack tool for sale on a criminal forum that runs on stolen OpenAI, Anthropic and Google keys, so the key owner pays for the scans.
- SecurityArticle
Check Point Research report: threats on October 12
The October 12 weekly report covers breaches, AI-assisted campaigns and security fixes, including a critical vulnerability in Veeam Backup & Replication 12.
- SecurityArticle
Drone attack hits third Yandex data center in Russia and disrupts digital services
The Record reports that drones struck a third Yandex data center in Russia over the weekend, forcing the site to shut down and disrupting cloud, payments, delivery and other online services. The case highlights the risk of concentrated physical infrastructure.
- SecurityArticle
Linux distribution security updates for 12 October 2026
The LWN article lists security advisories issued by AlmaLinux, Debian, Fedora, Mageia, Oracle, Red Hat, Slackware, SUSE and Ubuntu, covering kernel, OpenSSL, browsers and libraries.
- SecurityArticle
Ubuntu advisory USN-8912-1: Perl DBI flaws and how to inventory and patch them
The Ubuntu Security advisory describes two vulnerabilities in the Perl DBI module, CVE-2026-78030 and CVE-2026-88816, with risk of arbitrary code execution or denial of service. See how to map and prioritize the fix.
- SecurityArticle
Cyberattack disrupts refrigeration at hundreds of French supermarkets
According to the article from The Record, an overnight cyberattack on Sunday halted refrigeration units at hundreds of French stores and spoiled fresh food. The case shows the risk of relying on connected systems to maintain the cold chain.
- SecurityArticle
Incomplete fix for CVE-2026-79992 in Emacs and the TRAMP flaw
The oss-sec advisory, posted by Sean Whitton on 11 October, reports that the fix for CVE-2026-79992 in Emacs was incomplete. A new patch from the TRAMP maintainer is due in Emacs 31.2.
- SecurityArticle
CVE-2026-107373: SV read before argument conversion in ExtUtils::Typemaps (Perl)
The CPAN Security Group advisory, published 10 October 2026, describes versions of ExtUtils::Typemaps::STL::String before 1.06 in which the T_STD_STRING typemap may read an SV's size before converting the argument to a string.
- SecurityArticle
CVE-2026-107794: Perl module ExtUtils::Typemaps::STL::List allocates 32 GiB for an empty list
The CPAN Security Group disclosed CVE-2026-107794: versions of the Perl module before 1.07 allocate a 32 GiB array when processing an empty list. The advisory was published on oss-sec on 10 October 2026.
- SecurityArticle
CVE-2026-92119: mass assignment in the Apache Allura REST API calls for an update to 1.22.0
Moderate-severity advisory on a mass assignment flaw in the Apache Allura REST API up to version 1.21.0. The fix is available in version 1.22.0.
- SecurityArticle
CVE-2026-92120: OAuth1 replay flaw in Apache Allura fixed in version 1.22.0
The advisory published by Dave Brondsema on October 12, 2026 describes an OAuth1 request replay vulnerability affecting Apache Allura up to version 1.21.0, rated low severity, with a fix in version 1.22.0.
- SecurityArticle
Elastic exposes npm packages that posed as a Web3 accelerator and delivered malware
Elastic Security Labs documents an operation posing as a Web3 accelerator that delivered malware to macOS and Windows through npm packages and produced fabricated security findings from its audit tools.
- SecurityArticle
Linux kernel Maintainers Summit 2026: LLMs, security bugs and succession
Report from LWN on the annual Linux kernel maintainers meeting, held on 8 October 2026 in Prague, focused on LLMs, security bugs and long-term succession planning.
- SecurityArticle
CVE-2026-102916: rep prefix emulation flaw in illumos bhyve
illumos disclosed CVE-2026-102916, which affects rep prefix instruction emulation in bhyve, the VMM hypervisor. The flaw mishandles flags and requires patching in downstream distributions.
- SecurityArticle
Belarusian hacktivists admit months-long presence in Moscow health department network
According to the article from The Record, the Belarusian Cyber Partisans confirmed they remained for months inside the Moscow Department of Health network, in an intrusion dating from 2023 that the group acknowledged itself.
- SecurityArticle
Python 3.15: sentinel, frozendict, UTF-8 by default and experimental JIT
LWN reports the release of Python 3.15, with the built-in sentinel and frozendict types, UTF-8 as the default encoding and improvements to the experimental JIT compiler. See what changes for teams maintaining Python systems.
- SecurityArticle
Data breach at iRhythm affects hundreds of thousands of people
iRhythm, maker of wearable cardiac sensors, has begun notifying states about a data breach that occurred in the summer. The Record reports impact on hundreds of thousands of people, showing how late detection widens the risk for companies that handle health data.
- SecurityArticle
Control-flow integrity checks for the Linux kernel added to GCC
Kees Cook presented changes to GCC at the 2026 GNU Tools Cauldron that add forward-edge CFI support for the kernel, hindering exploits that divert execution from its intended paths.
- SecurityArticle
Unpatched vulnerabilities in Cyrus SASL and no new release since 2022
Alan Coopersmith posted on the oss-sec list that Cyrus SASL has publicly disclosed security problems with no response from maintainers, and the project has not shipped a release since 2022.
- SecurityArticle
AI training deal involving Spirit Airlines data draws lawmakers' warning
Lawmakers warn that a proposed sale of Spirit Airlines assets would include about 100 million emails, 500 million Microsoft Teams messages and employment and financial records, with risk of use in AI training.
- SecurityArticle
Go project advisory: HTTP/2 server memory exhaustion fixed in golang.org/x/net v0.60.0
The Go project published a security advisory for golang.org/x/net v0.60.0, which fixes several vulnerabilities, including memory exhaustion in HTTP/2 servers related to Trailer headers.
- SecurityArticle
Ubuntu advisory USN-8910-1: libxml2 flaws with risk of denial of service, XXE and SSRF
The Ubuntu security advisory USN-8910-1 describes six vulnerabilities in libxml2, with risks of denial of service, code execution, XML external entity injection and server-side request forgery. One of them affects only Ubuntu 26.04 LTS.
- SecurityArticle
USN-8909-1: denial-of-service flaw in the libde265 H.265 decoder
Ubuntu Security published an advisory on a validation flaw in certain malformed H.265 bitstreams in libde265, leading to a NULL pointer dereference that can crash the decoder and cause denial of service. For companies processing HEVC video, the risk is interruption of media services.
- SecurityArticle
International coalition disables tools of Integrity Tech linked to Flax Typhoon
The United States and other countries took down digital tools and infrastructure of Integrity Tech, a Beijing-based company, used for widespread vulnerability scanning and, in some cases, intrusions in the Flax Typhoon campaign.
- SecurityArticle
How the Rust project organizes, tracks and reviews its goals
Tomáš Šedovič, program manager at the Rust Foundation, presented at Kangrejos 2026 the goals process of the Rust project, aimed at Rust for Linux developers. A practical view of governance for long-running technical initiatives.
- SecurityArticle
Dispute in the Linux kernel over swap cache slots and persistent swap file space
Two competing proposals address the direct link between swap cache slots and space in persistent swap files, with no consensus yet for merging into the mainline kernel.
- SecurityArticle
AI agent forensics: where conversation history lives in OpenCode and Hermes
The SANS ISC post examines how to search for OpenCode and Hermes conversation history as evidence in investigations of AI use, within the FOR577 course update.
- SecurityArticle
Go 1.27.2 and 1.26.9 fix 15 security issues
The Go project released versions 1.27.2 and 1.26.9 with 15 security fixes. Here is what this requires from teams running Go services.
- SecurityArticle
Text extracted from malware samples can manipulate AI-assisted analysis
Cisco Talos highlights malware techniques that try to manipulate AI-assisted analysis and recommends treating text extracted from samples as evidence, not instructions. Companies using models for triage need to separate data from commands.
- SecurityArticle
Ubuntu notice USN-8900-1: flaws in Go Networking across HTTP/2, HTML parsing and IDNA
The Ubuntu Security notice lists eight CVEs in the Go Networking package, with risks of denial of service, XSS and access control bypass across HTTP/2, HTML parsing and IDNA.
Let's assess your project
I reply with scope and a proposal.