Cyber and security
- SecurityArticle
Android next-gen enclave for on-device AI: what changes with proactive assistants
The Google Security post describes the shift from standalone apps to proactive personal assistants and announces a next-generation enclave architecture for local AI on Android. Companies need to control the sensitive data processed on the device.
- SecurityArticle
Gentoo stops maintaining the Chromium package: what changes for Linux teams
The maintainers of Gentoo's Chromium package gave up maintaining it due to build complexity and frequent updates, according to the LWN article.
- SecurityArticle
Let's Encrypt moves to 64-day certificates by default from 10 February 2027
Let's Encrypt announced that from 10 February 2027, all certificates issued or renewed will default to 64-day validity. The staging environment switches on 14 October 2026 for testing.
- SecurityArticle
Python: why random should not generate passwords or tokens, and how to use secrets
The LWN article explains that Python's random module is unsuitable for passwords and tokens, which should be generated with the secrets module, added in Python 3.6 in 2016, and warns that random is still misused.
- SecurityArticle
Suspected ransomware takes down network and email at Osaka university, forcing class cancellations
Osaka Metropolitan University cancelled classes after a suspected ransomware attack left its internal network, email and several administrative and academic systems unavailable. The case highlights the value of containment, verified backups and prepared incident response.
- SecurityArticle
Ubuntu USN-8896-1: code execution and denial-of-service flaws in GStreamer Ugly Plugins
Ubuntu Security published advisory USN-8896-1 on flaws in the GStreamer Ugly Plugins when handling malformed RealMedia and ASF files, with risks of code execution, denial of service or data exposure.
- SecurityArticle
Scanning observed after fix for Atlassian arbitrary file read flaw (CVE-2026-21589)
The SANS ISC recorded scanning tied to CVE-2026-21589, fixed by Atlassian on 5 October. The flaw lets attackers read files in the web application directory, including sensitive configuration files.
- SecurityArticle
AI agents and automated attacks: what the Cisco Talos article asks of defense teams
The Cisco Talos article describes swarms of AI agents able to plan and run intrusion campaigns in hours, and recommends preparing incident response, mapping attack paths and reinforcing internal controls and detection.
- SecurityArticle
Charon: a stable API for extracting Rust compiler information
The LWN article presents the Charon project, which offers a stable API for accessing the Rust compiler's internal information and making that information easier for other tools to use.
- SecurityArticle
LAVD scheduler: from games to servers with BPF
A Kernel Recipes 2026 talk shows how the LAVD scheduler, built for games, now serves other workloads within extensible BPF-based CPU schedulers.
- SecurityArticle
US offers $10 million reward for alleged Chinese hacker linked to Hafnium campaign
US authorities offer a $10 million reward for information on Zhang Yu, described as a prominent figure in the Hafnium campaign, in which intruders compromised thousands of computers and stole large volumes of documents.
- SecurityArticle
Fixed flaws in Microsoft, Adobe, Apple and Foxit products: what to monitor and patch
Cisco Talos has disclosed flaws already fixed in Windows, Photoshop, macOS and Foxit Reader, including remote code execution in Foxit Reader and privilege escalation in Windows and Photoshop.
- SecurityArticle
Lawmakers push $11 million mental health program for Cyber Command
Lawmakers who oversee military cyber policy want a $11 million mental health support program for Cyber Command included in defense spending legislation, according to The Record's report.
- SecurityArticle
ShinyHunters extorted Boeing spin-off before suspect's arrest in Amman
The KrebsOnSecurity report links an extortion attempt against Jeppesen ForeFlight, a recently separated Boeing unit, to the ShinyHunters group, and describes the detention of a suspect alleged to lead it, who is reportedly cooperating with the FBI.
- SecurityArticle
Espionage phishing targets AI companies and Asian governments
On October 1, 2026, The Record reported on two reports describing China-linked intrusion operations, including a phishing campaign impersonating Western experts.
- SecurityArticle
Ubuntu warns of authorization flaws in Aodh and Watcher
On October 5, 2026, Ubuntu Security published an advisory about flaws in OpenStack Aodh and Watcher that could expose alarm metadata and allow unauthorized triggers.
Unauthorized agent access: controls and incident response
In an article published on September 29, 2026, The Record reports that agents accessed Australian government websites without authorization and that the company acknowledged shortcomings in its incident response.
- SecurityArticle
Apache Thrift 0.25.0 fixes 61 vulnerabilities
The oss-sec advisory says Apache Thrift 0.25.0 fixes 61 vulnerabilities in earlier versions and recommends upgrading.
- SecurityArticle
CVE-2026-97146: YuniKorn admission control bypass
An OSS-Sec advisory published on October 7, 2026 describes a way to bypass annotation checks in Apache YuniKorn 1.9.0 and earlier. The reported severity is medium, with a CVSS 4.0 score of 4.8.
- SecurityArticle
Linux kernel update calls for server review
An Ubuntu security advisory published on October 2, 2026, fixes numerous vulnerabilities in the Linux kernel for GKE, across networking, storage, drivers, and file systems.
Connected cars: control data sharing
A September 30, 2026 article by The Record reports that automakers routinely share personal data from connected cars with third parties, including companies in the advertising ecosystem.
- SecurityArticle
Pegasus case dismissed for lack of California jurisdiction
On October 2, 2026, The Record reported that a California judge dismissed a lawsuit by Salvadoran journalists at El Faro who were targeted by Pegasus spyware, ruling that the state lacked jurisdiction.
CISA warns of critical pre-authentication flaw in MikroTik RouterOS
A CISA advisory published on September 29, 2026 describes a flaw in the RouterOS web service that could enable remote code execution as root or denial of service. MikroTik recommends upgrading to version 7.23 or later.
- SecurityArticle
CISA warns of critical Armatura One vulnerabilities
A CISA advisory published on October 1, 2026, identifies Armatura One flaws that could expose credentials, enable database access, and allow code execution with maximum privileges. The vendor recommends contacting support to obtain and apply the update.
- SecurityArticle
CISA warns of authorization flaws in Meari IoT platform
A CISA advisory published October 1, 2026, reports two flaws in Meari’s OpenAPI service that allow unauthorized device changes and sensitive data exposure. All versions are affected, with no fix planned.
CISA warns of Viidure Dashcam exposure
A CISA advisory published on September 29, 2026 reports publicly accessible cloud storage and permanent credentials embedded in the Viidure Dashcam Android app.
CISA adds Cisco SD-WAN Manager flaw to KEV catalog
On September 30, 2026, CISA added CVE-2026-76504, a hexadecimal encoding flaw in Cisco Catalyst SD-WAN Manager, to its Known Exploited Vulnerabilities catalog based on evidence of active exploitation.
- SecurityArticle
CISA adds NetScaler flaw to KEV catalog
On October 4, 2026, CISA added CVE-2026-88779, a Citrix NetScaler flaw, to its KEV catalog following evidence of active exploitation.
- SecurityArticle
CISA adds Zammad flaws to the KEV catalog
On October 2, 2026, CISA added two Zammad vulnerabilities to the KEV catalog after identifying evidence of active exploitation.
Cisco Talos announces monthly threat hunting for executive accounts
In an article published on September 29, 2026, Cisco Talos announced a monthly threat-hunting and intelligence-analysis service for systems associated with up to 10 key people in an organization.
Cisco Talos reports Antino backdoor targeting Asia
Cisco Talos attributes espionage campaigns using the Antino backdoor to UAT-11587, targeting institutions in eight Asian countries.
- SecurityArticle
Unauthorized automated collection calls for controls
A The Record article reports that an Asymmetric Security investigation identified software that attempted to collect data from dozens of websites without authorization. The case highlights the need to control and monitor automated access to external sources.
- SecurityArticle
Operational tags help prioritize SIEM detection rules
In an article published on October 5, 2026, Elastic Security Labs describes monthly tags for assessing noise, performance, threat, and recommendation across preconfigured SIEM rules.
Make attacks harder to carry out
In an article published on October 1, 2026, Cisco Talos researchers recommend deception, behavioral detections, and controls that limit attackers’ options.
Undefined behavior in C and memory safety
A LWN article covers Martin Uecker's presentation on undefined behavior in C and the possibility of making the language memory-safe.
- SecurityArticle
Early Patches Help Cloud Providers Prepare Mitigations
On October 5, 2026, a reply posted to oss-sec argued that giving cloud providers patches before public advisories helps schedule mitigations and identify gaps in patches.
- SecurityArticle
CVE-2026-104380: routing flaw in Punk for Perl
Advisory published on the oss-sec mailing list on October 5, 2026: Punk for Perl versions 0.48 through releases before 0.55 may route Extended CONNECT to GET routes without validating Origin.
CVE-2026-88816: Update Perl DBI
An advisory published on September 28, 2026, reports that Perl DBI versions earlier than 1.654 incorrectly handle numeric values in FetchHashKeyName.
- SecurityArticle
Apache YuniKorn: admission check bypass
An advisory published on October 7, 2026, reports that Apache YuniKorn 1.9.0 and earlier do not check user labels and annotations for workload UPDATE operations, allowing admission controls to be bypassed. The reported severity is low (CVSS 4.0: 2.0).
- SecurityArticle
Defenses that undermine adversary advantages
In an article published on October 1, 2026, Cisco Talos highlights deception techniques, behavioral detection, and controls on legitimate tools to make attackers’ operations harder.
Let's assess your project
I reply with scope and a proposal.