A vulnerability in the APT package manager lets attackers intercept communications between Linux systems and package repositories, install malicious packages, and execute code with root privileges. This flaw, tracked as CVE-2026-109518, affects Debian, Ubuntu, and their derivative distributions under certain…
CISA added a WordPress Core flaw to its Known Exploited Vulnerabilities (KEV) catalog on November 3, and federal civilian agencies have until November 6 to patch it. The bug, CVE-2026-119977, is a time-of-check to time-of-use (TOCTOU) race condition in the full-package core…
Ivanti lists 3 vulnerabilities, all exploited together in the wild, and says exploitation affected "a limited number of customers at the time of disclosure" when chained. Affected builds are 25.1.1.2 and prior, 25.1.2.2 and prior, and 22.8R2.5 and prior. For CVE-2026-104935, Ivanti states that…
Two more Critical remote code execution (RCE) flaws sit in the System component: CVE-2026-58876 and CVE-2026-58936. The second patch level adds eight Critical issues in MediaTek modem components, six Critical Linux kernel issues and one Critical issue in a Qualcomm…
Debian and Ubuntu users are being urged to patch their systems after a critical vulnerability in APT, the package manager both distributions rely on, was disclosed on November 4. The flaw, tracked as CVE-2026-109518, lets anyone able to tamper with package…
Advanced AppSec suite, built for devs. in-app runtime defense and threat detection. Real-time malware & vuln threats If you run PHP anywhere in your stack and did not upgrade, stop reading this and go upgrade to a patched version. More information…
Advanced AppSec suite, built for devs. in-app runtime defense and threat detection. Real-time malware & vuln threats Breathe. It’s been a tough week or so for security and dev teams everywhere. You’re not alone. as bad as things have gotten in…
Nexus One Platform Automate open source and AI governance Sonatype Nexus Repository Build fast with a secure artifact repository Sonatype Firewall Reduce remediation with OSS malware protection Sonatype Guide Make better dependency decisions in AI builds Sonatype Lifecycle Avoid rework…
Any company that issues credentials can join for free and have its customers' exposed secrets revoked as Truffle Security finds them; 81% of leaked secrets reported last year still worked six months later AI-enabled attackers are collecting on decades of security…
WordPress 7.1.4 fixes the CVE-2026-119977 flaw in core updates. CISA confirms active exploitation. Here is what to do right away on your site. According to the official WordPress announcement, it is a weakness in the update process that can lead to…
High-impact vulnerabilities, emergency patches, supply-chain incidents, and mitigations.
An article joins this feed when it matches these terms. Each one is also a search of its own.