AI vulnerability triage without exposing your inventory
Automation can help organize advisories. Decisions need evidence, and context should not contain secrets or customer data.
Read articleKnowledge you can apply
Cyber
Security for teams connecting data, documents and agents to AI.
Python TLS: inspect the path that switches server contexts
The SSLContext advisory requires checking the actual configuration. API privacy processing does not replace runtime remediation.
Read article
Hostname validation: review TLS before trusting an integration
Verify the connection's recipient and the advisory conditions. Encryption alone is insufficient when destination validation fails.
Read article
Authentication and AI: protect reports without confusing controls
An authentication flaw requires fixing the affected component. Prompt processing protects a different boundary: investigation data.
Read article
Images and documents: isolate processing before using AI
A file can attack its processor before becoming text. Updates and isolation complement inference privacy.
Read articleUSN-8855-1: flaw in GStreamer Bad Plugins
A security notice published on September 30, 2026 reports incorrect validation of multichannel audio blocks and possible impacts when processing a crafted WAV file.
Read articleUSN-8856-1: Kdenlive and MLT vulnerability
A Ubuntu security notice published on September 30, 2026 describes how malicious project files could exploit Kdenlive parameters and run arbitrary commands through MLT properties.
Read articleUSN-8845-1: GVfs security vulnerabilities
A September 30, 2026 bulletin reports GVfs issues that could allow code execution, denial of service, or local privilege escalation.
Read articleKDE Plasma: new features and plans ahead
A summary of a presentation at Akademy 2026 on changes to KDE Plasma over the past year and plans for remote desktop support and removing X11 support.
Read articleCVE-2026-80490 affects Algorithm::AhoCorasick::XS versions through 0.04
A notice published on September 30, 2026 identifies a flaw in Algorithm::AhoCorasick::XS for Perl: through version 0.04, the code reads a string's length before converting it. The source is an automated translation of content from the oss-sec feed.
Read articleComplete Kernel Recipes videos published
The complete set of videos from the recently concluded Kernel Recipes conference has been published, accompanied by caricatures of attendees and speakers by Frank Tizzoni.
Read articleReports from Python Language Summit 2026
A series covers topics discussed on July 14 in Kraków, including garbage collection and Python without the GIL.
Read articleChromium development practices at Google and Igalia
At FOSSY 2026, Sharon Yang compared her work on Chromium at the two companies, discussing differences in how they operate and the effects on the codebase.
Read articleUSN-8817-3: Linux kernel vulnerabilities for AWS
A security notice published on September 30, 2026 reports flaws in the Linux kernel and Arm processors. The update fixes issues that could allow memory protections to be bypassed or systems to be compromised.
Read articleUSN-8816-3: Linux kernel update for Oracle
A bulletin published on September 30, 2026 reports an update fixing multiple Linux kernel vulnerabilities and lists the affected subsystems.
Read articleUSN-8818-5: Linux kernel flaws on NVIDIA Tegra
A security notice published on September 30, 2026 reports Linux kernel and Arm processor flaws, including risks of bypassing memory protections or escalating privileges.
Read articleUkrainian warning cites DarkSword in iOS and Android attacks
Published on September 30, 2026, the warning attributed to Ukraine’s SSSCIP says the DarkSword malware, described as a fast-attack type targeting iPhones, is part of a wave of attacks against iOS and Android devices.
Read articleLinux Foundation opens nominations for technical board election
The electronic election for the Linux Foundation Technical Advisory Board will fill five seats after the next Linux Plumbers Conference. Candidate nominations are open until October 7, 2026.
Read articleWednesday security updates
On September 30, 2026, Linux distributions announced updates for numerous packages. The bulletin lists affected projects but gives no vulnerability details or severity ratings.
Read articleUSN-8854-1: OpenStack Keystone vulnerabilities
A security notice published on September 30, 2026 describes three OpenStack Keystone vulnerabilities involving delegated tokens and role assignment queries.
Read articleRota Nacional
Bring privacy into your workflow.
30 days, no card, with a starting quota. After that, Pix credit from R$ 10,00.