Cyber and security
Filter by type: Article143
How the Rust project organizes, tracks and reviews its goals
Tomáš Šedovič, program manager at the Rust Foundation, presented at Kangrejos 2026 the goals process of the Rust project, aimed at Rust for Linux developers. A practical view of governance for long-running technical initiatives.
Dispute in the Linux kernel over swap cache slots and persistent swap file space
Two competing proposals address the direct link between swap cache slots and space in persistent swap files, with no consensus yet for merging into the mainline kernel.
- 17 days ago isc.sans.edu
AI agent forensics: where conversation history lives in OpenCode and Hermes
The SANS ISC post examines how to search for OpenCode and Hermes conversation history as evidence in investigations of AI use, within the FOR577 course update.
- 17 days ago seclists.org
Go 1.27.2 and 1.26.9 fix 15 security issues
The Go project released versions 1.27.2 and 1.26.9 with 15 security fixes. Here is what this requires from teams running Go services.
- 17 days ago blog.talosintelligence.com
Text extracted from malware samples can manipulate AI-assisted analysis
Cisco Talos highlights malware techniques that try to manipulate AI-assisted analysis and recommends treating text extracted from samples as evidence, not instructions. Companies using models for triage need to separate data from commands.
- 17 days ago ubuntu.com
Ubuntu notice USN-8900-1: flaws in Go Networking across HTTP/2, HTML parsing and IDNA
The Ubuntu Security notice lists eight CVEs in the Go Networking package, with risks of denial of service, XSS and access control bypass across HTTP/2, HTML parsing and IDNA.
- 17 days ago therecord.media
South Korean banks: suspected AI agents behind intrusions that exposed data of 68,000 people
South Korean authorities are investigating breaches at at least seven financial institutions, with personal data of about 68,000 people reportedly exposed and a suspected Chinese cybersecurity tool used.
- 17 days ago seclists.org
Django: four CVEs in the security advisory of 6 October 2026
The Django project published a security advisory listing four CVEs, with an official announcement and CVE records. Companies running Django applications should check affected versions and apply the indicated fixes.
- 17 days ago blog.google
Android next-gen enclave for on-device AI: what changes with proactive assistants
The Google Security post describes the shift from standalone apps to proactive personal assistants and announces a next-generation enclave architecture for local AI on Android. Companies need to control the sensitive data processed on the device.
Gentoo stops maintaining the Chromium package: what changes for Linux teams
The maintainers of Gentoo's Chromium package gave up maintaining it due to build complexity and frequent updates, according to the LWN article.
- 17 days ago letsencrypt.org
Let's Encrypt moves to 64-day certificates by default from 10 February 2027
Let's Encrypt announced that from 10 February 2027, all certificates issued or renewed will default to 64-day validity. The staging environment switches on 14 October 2026 for testing.
Python: why random should not generate passwords or tokens, and how to use secrets
The LWN article explains that Python's random module is unsuitable for passwords and tokens, which should be generated with the secrets module, added in Python 3.6 in 2016, and warns that random is still misused.
- 17 days ago therecord.media
Suspected ransomware takes down network and email at Osaka university, forcing class cancellations
Osaka Metropolitan University cancelled classes after a suspected ransomware attack left its internal network, email and several administrative and academic systems unavailable. The case highlights the value of containment, verified backups and prepared incident response.
- 17 days ago ubuntu.com
Ubuntu USN-8896-1: code execution and denial-of-service flaws in GStreamer Ugly Plugins
Ubuntu Security published advisory USN-8896-1 on flaws in the GStreamer Ugly Plugins when handling malformed RealMedia and ASF files, with risks of code execution, denial of service or data exposure.
- 17 days ago isc.sans.edu
Scanning observed after fix for Atlassian arbitrary file read flaw (CVE-2026-21589)
The SANS ISC recorded scanning tied to CVE-2026-21589, fixed by Atlassian on 5 October. The flaw lets attackers read files in the web application directory, including sensitive configuration files.
- 17 days ago blog.talosintelligence.com
AI agents and automated attacks: what the Cisco Talos article asks of defense teams
The Cisco Talos article describes swarms of AI agents able to plan and run intrusion campaigns in hours, and recommends preparing incident response, mapping attack paths and reinforcing internal controls and detection.
Charon: a stable API for extracting Rust compiler information
The LWN article presents the Charon project, which offers a stable API for accessing the Rust compiler's internal information and making that information easier for other tools to use.
LAVD scheduler: from games to servers with BPF
A Kernel Recipes 2026 talk shows how the LAVD scheduler, built for games, now serves other workloads within extensible BPF-based CPU schedulers.
- 17 days ago therecord.media
US offers $10 million reward for alleged Chinese hacker linked to Hafnium campaign
US authorities offer a $10 million reward for information on Zhang Yu, described as a prominent figure in the Hafnium campaign, in which intruders compromised thousands of computers and stole large volumes of documents.
- 17 days ago blog.talosintelligence.com
Fixed flaws in Microsoft, Adobe, Apple and Foxit products: what to monitor and patch
Cisco Talos has disclosed flaws already fixed in Windows, Photoshop, macOS and Foxit Reader, including remote code execution in Foxit Reader and privilege escalation in Windows and Photoshop.
- 17 days ago therecord.media
Lawmakers push $11 million mental health program for Cyber Command
Lawmakers who oversee military cyber policy want a $11 million mental health support program for Cyber Command included in defense spending legislation, according to The Record's report.
- 17 days ago krebsonsecurity.com
ShinyHunters extorted Boeing spin-off before suspect's arrest in Amman
The KrebsOnSecurity report links an extortion attempt against Jeppesen ForeFlight, a recently separated Boeing unit, to the ShinyHunters group, and describes the detention of a suspect alleged to lead it, who is reportedly cooperating with the FBI.
- 17 days ago therecord.media
Espionage phishing targets AI companies and Asian governments
On October 1, 2026, The Record reported on two reports describing China-linked intrusion operations, including a phishing campaign impersonating Western experts.
- 17 days ago ubuntu.com
Ubuntu warns of authorization flaws in Aodh and Watcher
On October 5, 2026, Ubuntu Security published an advisory about flaws in OpenStack Aodh and Watcher that could expose alarm metadata and allow unauthorized triggers.
- 17 days ago seclists.org
Apache Thrift 0.25.0 fixes 61 vulnerabilities
The oss-sec advisory says Apache Thrift 0.25.0 fixes 61 vulnerabilities in earlier versions and recommends upgrading.
- 17 days ago seclists.org
CVE-2026-97146: YuniKorn admission control bypass
An OSS-Sec advisory published on October 7, 2026 describes a way to bypass annotation checks in Apache YuniKorn 1.9.0 and earlier. The reported severity is medium, with a CVSS 4.0 score of 4.8.
- 17 days ago ubuntu.com
Linux kernel update calls for server review
An Ubuntu security advisory published on October 2, 2026, fixes numerous vulnerabilities in the Linux kernel for GKE, across networking, storage, drivers, and file systems.
- 17 days ago therecord.media
Pegasus case dismissed for lack of California jurisdiction
On October 2, 2026, The Record reported that a California judge dismissed a lawsuit by Salvadoran journalists at El Faro who were targeted by Pegasus spyware, ruling that the state lacked jurisdiction.
CISA warns of critical Armatura One vulnerabilities
A CISA advisory published on October 1, 2026, identifies Armatura One flaws that could expose credentials, enable database access, and allow code execution with maximum privileges. The vendor recommends contacting support to obtain and apply the update.
CISA warns of authorization flaws in Meari IoT platform
A CISA advisory published October 1, 2026, reports two flaws in Meari’s OpenAPI service that allow unauthorized device changes and sensitive data exposure. All versions are affected, with no fix planned.
CISA adds NetScaler flaw to KEV catalog
On October 4, 2026, CISA added CVE-2026-88779, a Citrix NetScaler flaw, to its KEV catalog following evidence of active exploitation.
CISA adds Zammad flaws to the KEV catalog
On October 2, 2026, CISA added two Zammad vulnerabilities to the KEV catalog after identifying evidence of active exploitation.
- 17 days ago therecord.media
Unauthorized automated collection calls for controls
A The Record article reports that an Asymmetric Security investigation identified software that attempted to collect data from dozens of websites without authorization. The case highlights the need to control and monitor automated access to external sources.
- 17 days ago elastic.co
Operational tags help prioritize SIEM detection rules
In an article published on October 5, 2026, Elastic Security Labs describes monthly tags for assessing noise, performance, threat, and recommendation across preconfigured SIEM rules.
- 17 days ago seclists.org
Early Patches Help Cloud Providers Prepare Mitigations
On October 5, 2026, a reply posted to oss-sec argued that giving cloud providers patches before public advisories helps schedule mitigations and identify gaps in patches.
- 17 days ago seclists.org
CVE-2026-104380: routing flaw in Punk for Perl
Advisory published on the oss-sec mailing list on October 5, 2026: Punk for Perl versions 0.48 through releases before 0.55 may route Extended CONNECT to GET routes without validating Origin.
- 17 days ago seclists.org
Apache YuniKorn: admission check bypass
An advisory published on October 7, 2026, reports that Apache YuniKorn 1.9.0 and earlier do not check user labels and annotations for workload UPDATE operations, allowing admission controls to be bypassed. The reported severity is low (CVSS 4.0: 2.0).
- 17 days ago blog.talosintelligence.com
Defenses that undermine adversary advantages
In an article published on October 1, 2026, Cisco Talos highlights deception techniques, behavioral detection, and controls on legitimate tools to make attackers’ operations harder.
- 17 days ago seclists.org
Vulnerability disclosure for cloud providers
In a post dated October 4, 2026, oss-sec proposes a disclosure list for cloud and VPS hosting providers that do not participate in Linux distribution lists.
- 17 days ago therecord.media
New NetScaler alert calls for an exposure review
The Record reports that the United States and Australia warned of a newly observed issue in customer-managed NetScaler deployments, distinct from the vulnerabilities disclosed the previous week.
Let's assess your project
I reply with scope and a proposal.