Cyber and security
Filter by type: All143
- 17 days ago seclists.org
Apache Directory LDAP API flaw can consume CPU for hours
An advisory published on October 2, 2026, on the oss-sec list describes denial of service from bcrypt checks with a high cost factor in versions 2.1.0 through versions before 2.1.9.
- 17 days ago seclists.org
Apache Directory LDAP API flaw can consume CPU indefinitely
An advisory published on the oss-sec mailing list on October 2, 2026 warns that malformed telephone numbers can keep one CPU core busy indefinitely in Apache Directory LDAP API versions earlier than 2.1.9.
- 17 days ago seclists.org
mod_dav_fs flaw may corrupt WebDAV data
The advisory published by oss-sec on October 1, 2026 describes a moderate flaw in Apache HTTP Server through version 2.4.68, exploitable by authenticated WebDAV clients with write access.
- 17 days ago seclists.org
mod_userdir flaw may expose information in specific configurations
An advisory published on oss-sec on October 1, 2026 describes a low-severity flaw in Apache HTTP Server versions 2.4.0 through 2.4.68 under a specific UserDir configuration.
- 17 days ago ubuntu.com
Linux kernel flaws for Azure call for update reviews
Security advisory USN-8851-3 reports fixes in the NFS server, IPv6 networking and Netfilter for the Linux kernel for Azure, addressing three CVEs.
- 17 days ago ubuntu.com
GStreamer Good Plugins flaws put systems at risk
Ubuntu Security's USN-8863-1 advisory, published on October 1, 2026, describes flaws in processing FLAC streams, AVI files, and subtitle data that may expose information or cause denial of service.
- 17 days ago seclists.org
libexpat 2.9.0 fixes two vulnerabilities
A post on the oss-security list says libexpat 2.9.0 fixes two vulnerabilities, including an integer overflow on 32-bit platforms.
LTP: September stable release brings 382 patches
The Linux Test Project published its September 2026 stable release, with 382 patches from 41 authors since the May release. Companies can assess the update and integrate it into Linux system testing.
- 17 days ago therecord.media
U.S. bills propose limits on automated license plate readers
In an article published on October 2, 2026, The Record reports bipartisan U.S. proposals to limit automated license plate readers and highlights a broader bill prepared by Democratic lawmakers.
- 17 days ago blog.google
Android Advanced Protection: mobile security for companies
On October 1, 2026, Google published a post about six ways Android Advanced Protection aims to defend against sophisticated threats and protect data.
- 17 days ago isc.sans.edu
TTY logs help correlate attackers’ commands
In an article published by SANS ISC on October 5, 2026, an experiment sends command logs to the DShield SIEM daily after attackers or bots gain access to a sensor.
- 17 days ago research.checkpoint.com
October 5 report highlights data, cloud and AI risks
Check Point Research’s report, published on October 5, 2026, covers data breaches, ransomware, exploited vulnerabilities and AI-agent activity. The cases point to practical steps for protecting data, backups and cloud environments.
Rust 1.99.0 stabilizes APIs and expands C support
Released on October 1, 2026, Rust 1.99.0 adds support for variadic extern “C” functions, functions to query raw-pointer size and alignment, and several stabilized APIs.
Rust aims to expand smart-pointer flexibility
At RustConf 2026, Tyler Mandry discussed the long-running effort to make user-defined smart pointers as flexible as native references in Rust.
Automated patch review: lessons from Sashiko
LWN's article presents Sashiko, a system that uses a language model to review kernel patches automatically and help address a shortage of reviewers.
- 17 days ago blog.trailofbits.com
Trail of Bits presents secure hashing for multiple inputs
In a post dated October 2, 2026, Trail of Bits presents SequenceHash and SequenceMAC, constructions for combining inputs unambiguously with different cryptographic hash functions.
Scaling kernel vulnerability report triage
At Kernel Recipes 2026, Greg Kroah-Hartman discussed the increase in vulnerability reports enabled by LLMs and the kernel security team’s response.
- 17 days ago ubuntu.com
Ubuntu fixes Linux kernel vulnerabilities
Ubuntu's USN-8864-1 advisory, published October 2, 2026, reports fixes for vulnerabilities in NFS, IPv6 networking and Netfilter that could allow system compromise.
- 17 days ago ubuntu.com
USN-8862-1: flaw in XPM image processing
Ubuntu's USN-8862-1 security advisory, published on October 1, 2026, reports that XPM images with zero dimensions can cause libXpm to consume excessive resources and lead to denial of service by a local attacker.
- 17 days ago ubuntu.com
Ubuntu fixes Raspberry Pi Linux kernel vulnerabilities
Ubuntu Security advisory USN-8871-1, published on October 5, 2026, covers Linux kernel vulnerabilities for Raspberry Pi, including a risk on Arm processors and issues across several subsystems.
- 17 days ago ubuntu.com
Ubuntu fixes libsoup flaws with exposure and denial-of-service risks
Ubuntu Security notice USN-8890-1, published on October 6, 2026, describes libsoup flaws that could enable denial of service, information disclosure, security-control bypass, and code execution. Fixes are available for several Ubuntu versions.
- 17 days ago ubuntu.com
Ubuntu warns of token exposure in WSL
An Ubuntu Security advisory published on October 6, 2026 reports that the Ubuntu Pro for WSL attachment token could appear in command-line arguments during subscription activation.
- 17 days ago therecord.media
AI agents test the limits of web platforms
On October 5, 2026, Wikimedia reported attempts by AI agents to edit pages and compromise a note-taking tool, as well as resource consumption on web platforms.
Let's assess your project
I reply with scope and a proposal.