Ubuntu addressed multiple vulnerabilities in OpenJDK 17 across various LTS versions, enabling potential denial of service and data security risks, necessitating package updates for user protection.
Ubuntu 26.04, 24.04, 22.04, and 20.04 LTS users must update OpenJDK 21 due to multiple vulnerabilities affecting authentication and authorization, potentially causing data exposure and denial of service.
Attackers have begun exploiting CVE-2026-60004, a critical code injection vulnerability in the Gitea Git platform, CISA confirmed on Tuesday by adding the vulnerability to its Known Exploited Vulnerabilities (KEV) catalog. The KEV entry does not contain or point to details about the attacks, but acc...
Ubuntu has released security updates for OpenJDK 11 addressing multiple vulnerabilities that allow potential remote attacks, requiring users to update their systems to ensure safety.
Ubuntu announced security updates for OpenJDK 25, addressing multiple vulnerabilities that allow potential data manipulation and denial of service. Users should update their systems accordingly.
Microsoft Patches Severe Entra ID Flaw (CVSS 10.0) Allowing Remote Code Execution Microsoft disclosed a maximum-severity flaw in its Entra ID identity service, tracked as CVE-2026-69836 with a CVSS score of 10.0, tracing back to unsafe deserialization of untrusted data that could let an attacker exe...
Ubuntu has issued a security notice for OpenJDK 8 vulnerabilities affecting multiple LTS versions, urging users to update due to risks of unauthorized data access and denial of service.
RightCrowd announced RightCrowd Pass, a credentialing solution that issues and manages mobile, physical and biometric access credentials from a single platform. Many large enterprises and universities rely on badge programs-built years ago. As organizations add mobile and biometric credentials, what...
Aikido Security has published research that recreates the Australian gym-booking incident in a synthetic environment, finding that Claude Opus 4.6, running on the OpenClaw agent harness, exploited a client-side-only booking restriction in 9 of 10 runs.
The original incident was first reported by AB...
Scammers posing as HR staff at well-known companies are running interview scheduling scams that end with a stolen corporate password, according to Zimperium. Attackers are using a technique called browser-in-the-browser, or BitB, which CTM360 documented in earlier research on recruitment phishing. T...
Selecting a model for your security operations center (SOC) and digital forensics and incident response (DFIR) tasks is important, but selecting the best one is more involved than you might think. Here's how to choose.
Most of the flaws were discovered by Google using AI, but researchers are still discovering high-value Chrome vulnerabilities.
The post Chrome 152 Patches Over 300 Vulnerabilities appeared first on SecurityWeek.
OpenAI on Tuesday said it banned a cluster of Russian ChatGPT accounts that used VPNs to bypass access restrictions and run an influence operation, which relied on its artificial intelligence (AI) tool to generate social media posts and comments that were shared on Substack, Telegram, X, Facebook an...
Oracle Linux 7 has received security updates for multiple X11 server components, addressing several CVEs, including CVE-2026-55999, with respective RPMS and source packages now available.
Oracle Linux 7 has received security updates for 389-ds-base packages addressing CVE-2026-11610 and CVE-2026-11774, improving system security and functionality.
This new open standard offers hardware-attested runtime and compliance evidence for AI agents
Oracle released updated RPMs for Oracle Linux 8 addressing a denial of service vulnerability in the python3-pyasn1 package with CVE-2026-59886. Updates are available for x86_64 and aarch64.
Oracle Linux 8 has released updates for gstreamer1-plugins-good addressing multiple CVEs, including heap buffer overflows and use-after-free vulnerabilities, enhancing system security.
A coordinated DDoS campaign has caused disruption among Norwegian government services
Oracle Linux 8 updates include Python 3.12.14 packages to address CVE-2026-11940, with various RPMs uploaded for x86_64 and aarch64 architectures.