News · via Debian Security
DSA-6571-1 xen - security update
https://security-tracker.debian.org/tracker/DSA-6571-1
Linux
Coverage tagged "Linux".
News · via Canadian Centre for Cyber Security
Google security advisory (AV26-1060)
Serial number: AV26-1060 Date: October 16, 2026 As of October 15, 2026, Google is affected by vulnerabilities in the following product: Chrome Versions prior to 155.0.8059.84/.85 (Windows/Mac) and…
News · via oss-security
Infinity Core: Linux Kernel Core LPEs
Posted by Hyunwoo Kim on Oct 16 Hi, The embargo agreed with the linux-distros () vs openwall org maintainers has expired, so I am posting this report. This is a report on "Infinity Core", a…
News · via Chrome Releases
Chrome Dev for Desktop Update
The Dev channel has been updated to 158.0.8106.0 for Windows, Mac and Linux. A partial list of changes is available in the Git log. Interested in switching release channels?
News · via Rapid7
Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)
OverviewOn October 12, 2026, GitLab released 19.4.2, 19.3.5, and 19.2.8 to fix CVE-2026-97229, an integer overflow in its CI/CD regular-expression handling. The issue was reported through HackerOne…
News · via Rapid7
Rapid7 Intelligence Wins the 2026 Péter Szőr Award for Outstanding Research
Some awards you're happy to receive, while others make you stop for a moment. Receiving the 2026 Péter Szőr Award this week at Virus Bulletin in Seville for our research, BPFdoor in Telecom Networks…
News · via Help Net Security
Fake Arch Linux AUR packages exploit typos to run malware with root privileges
Arch Linux users who mistyped yay or paru while installing the package helpers from the Arch User Repository (AUR) may have given a stranger root access to their machine. AUR is a popular community…
News · via Chrome Releases
Chrome Beta for Desktop Update
The Chrome team is excited to announce the promotion of Chrome 157 to the Beta channel for Windows, Mac and Linux. Chrome 157.0.8103.6 contains our usual under-the-hood performance and stability…
News · via Help Net Security
Fastfetch 2.70.0 changes how Disk free space is reported
Fastfetch is a system information tool written mainly in C that runs on Linux, macOS, Windows 8.1 and later, Android and several BSDs. The fastfetch project removed QuickJS scripting and changed what…
News · via Recorded Future
TAG-217 Targets South Korean Financial Services with ARTEX
The threat actor linked to recent AI-assisted attacks on South Korean financial institutions was testing infrastructure and assembling attack tools as early as August 2026, weeks before the banking…
News · via Chrome Releases
Chrome for Android Update
Hi, everyone! We've just released Chrome 155 (155.0.8059.84) for Android. It'll become available on Google Play over the next few days.
News · via Palo Alto Networks Unit 42
AI-Powered Espionage Campaign Targets Government Linux Infrastructure
Our analysis an AI-powered espionage campaign targeting government Linux infrastructure with custom malware, web shells, and advanced credential theft.
News · via Debian Security
DSA-6566-1 expat - security update
https://security-tracker.debian.org/tracker/DSA-6566-1
News · via Debian Security
DSA-6565-1 spip - security update
https://security-tracker.debian.org/tracker/DSA-6565-1
News · via Debian Security
DSA-6567-1 cifs-utils - security update
https://security-tracker.debian.org/tracker/DSA-6567-1
News · via Debian Security
DSA-6568-1 linux - security update
https://security-tracker.debian.org/tracker/DSA-6568-1
News · via Debian Security
DSA-6569-1 apache2 - security update
https://security-tracker.debian.org/tracker/DSA-6569-1
News · via Chrome Releases
Stable Channel Update for Desktop
The Stable channel has been updated to 155.0.8059.84/.85 for Windows and Mac and 155.0.8059.84 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is…
News · via oss-security
linux kernel: PwnEscape: Guest-to-Host KVM Escape (CVE-2026-99999)
Posted by Jan Schaumann on Oct 15 The existence of this vulnerability was disclosed a few days ago on Twitter, and some of the details have now been published here: https://pwn.ai/blog/pwnescape This…
News · via The Hacker News
Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory
A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel's live cloud…