Security for teams connecting data, documents and agents to AI.
Articles 706
Cyber ·
An oss-sec advisory dated October 27, 2026 reports multiple vulnerabilities in the samtools package, fixed in version 1.25 and backported to 1.24.1, 1.23.3, 1.22.4 and 1.21.3. No CVE numbers have been assigned yet.
Cyber ·
Disclosure on the oss-sec list of multiple vulnerabilities in the HTSlib package, fixed in version 1.25 and backported to 1.24.1, 1.23.3, 1.22.4 and 1.21.3. As of the October 27 notice, no CVE numbers had been assigned.
Cyber ·
An oss-sec thread dated October 27, 2026 asks why three vulnerability identifiers for X.Org client libraries still appear as reserved, with no published details, in the MITRE record.
Cyber ·
A message dated 27 October 2026 on the oss-sec list reports a backported fix for the PHP2Shell OOM vulnerability in a custom PHP 5.4.23 and recommends removing or modernizing old PHP versions.
Cyber ·
An oss-sec notice dated October 27, 2026 describes a seccomp filter bypass affecting containerd, Podman, systemd and QEMU, caused by truncation of 32-bit integer arguments on 64-bit architectures.
Cyber ·
A 36-year-old Ukrainian national admitted guilt to charges tied to participation in at least two known ransomware groups, Nefilim and Hive, and received a sentence above five years. The case is reported through a machine-translated feed from The Record.
Cyber ·
The US Department of Justice indicted five foreign nationals, including a Malaysian citizen, in a case linked to a scam-center operation uncovered in Madagascar. The case illustrates the international reach of this industry.
Cyber ·
Peter Robinson describes the state of Fedora support for the Raspberry Pi 5: Fedora 45 should work, with limitations, on all Model 5B variants, while the Compute Module 5 and Pi 500+ remain in development.
Cyber ·
Summary of a Zero Day Initiative advisory on a chain of SSRF and other flaws in Oracle PeopleSoft that can lead to remote code execution. The text reports ongoing mass exploitation attributed to the ShinyHunters group.
Cyber ·
Ubuntu Security advisory on authd: a failure to validate provider identities linked to local accounts, with possible access to another user's account and files.
Cyber ·
On 27 October 2026, a message on the oss-sec list said three CVEs tied to the X.Org security advisory may now be made public, since the notification to the CNA may not yet be complete.
Cyber ·
A UK inspectorate says police data was breached several times this decade through third-party IT suppliers.
Cyber ·
Radar records a listing for an ISC Stormcast episode dated Tuesday, October 27, 2026. The source provides no body, summary or detailed findings.
Cyber ·
Apple published fixes for 304 vulnerabilities about a month after its previous update, according to a machine-translated item from the SANS ISC feed dated 27 October 2026.
Cyber ·
A message posted to the oss-sec feed on October 26 reports that a backported fix for PHP 5.6 was available the same day from a package repository, and asks whether the fix was compared with others.
Cyber ·
Low-severity advisory for the Apache Airflow SSH provider before version 7.0.1. Values of the environment parameter were inserted into an already quoted wrapper script, so shell syntax such as $(...) could run on the remote SSH host. The advisory was published on October 26, 2026.
Cyber ·
Vulnerability disclosed on 26 October 2026 in loading .po translations in Godot 4.x, versions 4.1.0 to 4.7.2. Confirmed at runtime in the official 4.7-stable export. No equivalent path was found in version 3.5.
Cyber ·
Advisory from the oss-sec feed, published on 26 October 2026, describing a use-after-free vulnerability in GPAC/MP4Box triggered by a crafted MPEG-2 TS file. Classified as CWE-416, with CVSS 3.1 score 4.3 (medium).
Cyber ·
The state of Texas filed a lawsuit against OpenAI under state deceptive trade practices laws, seeking reforms and fines and aiming to hold CEO Sam Altman personally liable for the alleged fraud.
Cyber ·
Advisory dated 26 October 2026 from the git-annex maintainer: version 10.20261026 fixes a flaw that allowed data exfiltration between repositories, with backported patches for earlier versions.
Looking for something else?DocumentationContact
