Study presents Spectre-v2 attacks against JIT engines
An announcement published on September 29, 2026 shares a study, paper, and proof-of-concept code on Spectre-v2 attacks against JIT engines using stale branch-prediction entries.
Read articleKnowledge you can apply
Cyber
Security for teams connecting data, documents and agents to AI.
Firefox 157.0 brings visual changes and AV1
Released on September 29, 2026, Firefox 157.0 highlights a visual redesign, hardware AV1 decoding in WebRTC calls, and various fixes.
Read articleU.S. Air Force members sentenced in cyber theft exceeding $2 million
A September 29, 2026 item reports that two U.S. Air Force members received prison sentences of more than six years in a cyber theft case involving over $2 million.
Read articleParagon plans to go public by year-end
The spyware company plans to complete the deal near the end of 2026 and trade on Nasdaq under the REDLattice name, according to content in The Record’s feed.
Read articleCPython race condition may delete files outside a temporary directory
A notice published on September 29, 2026 reports a race condition during tempfile.TemporaryDirectory cleanup that may delete files outside the temporary directory. The available text provides no technical detail beyond message headers.
Read articleApology after unauthorized access to government sites
A report dated September 29, 2026 says an AI company acknowledged shortcomings in its response to incidents involving Australian government websites.
Read articleCVE-2026-94053: LDAP flaw in Apache MINA SSHD
A notice published on September 29, 2026 describes a critical LDAP injection flaw that may bypass authentication in Apache MINA SSHD’s sshd-ldap component.
Read articleCritical LDAP authentication flaw in Apache MINA SSHD
A notice published on September 29, 2026 reports a critical LDAP password authentication flaw in Apache MINA SSHD. It affects versions before the stated fixes; the source assigns a CVSS 3.1 score of 9.1.
Read articleCVE-2026-94029 in Apache MINA SSHD: memory exhaustion risk
A notice published on September 29, 2026 reports a moderate flaw in Apache MINA SSHD's sshd-sftp component. Exploitation requires privileges and may exhaust server memory; the excerpt lists fixed versions starting at 2.20.0 and 3.0.0-M6.
Read articleCVE-2026-94002: memory risk in Apache MINA SSHD
A September 29, 2026 notice reports memory exhaustion in SFTP clients caused by unsolicited responses and lists affected versions.
Read articleCVE-2026-93996: DoS risk in Apache MINA SSHD
An advisory published on September 29, 2026 reports uncontrolled resource consumption while reading SCP command lines in the sshd-scp component. It rates the issue moderate, with a CVSS 3.1 score of 6.5.
Read articleCVE-2026-93995: Apache MINA SSHD flaw
A notice published on September 29, 2026 reports inadequate validation in sshd-git that may let a JGit archive operation write a file to the server. It rates the issue moderate, with a CVSS 3.1 score of 6.5.
Read articleApache MINA SSHD: authentication policy flaw
A notice published on September 29, 2026 reports that Apache MINA SSHD servers using multi-factor authentication may bypass a requirement for different public keys. The issue has a CVSS 3.1 score of 8.1, rated high.
Read articleCVE-2026-77185: critical Apache MINA SSHD flaw
A notice published on September 29, 2026 reports a possible authentication bypass in specific SSH server implementations using Apache MINA SSHD’s sshd-core. The flaw is rated CVSS 3.1 9.1.
Read articleDiscussion of multiple CVEs in Debian DSA 6528-1 bulletin
Published on September 29, 2026, the comment links the number of issues in the bulletin to Debian maintainers’ effort to avoid excessive changes. It suggests using the changelog to identify items relevant to a particular environment.
Read articleRust on GPUs: a prototype proposes a common target
Published on September 29, 2026, the report presents a proposal to compile conventional Rust code for GPUs without special libraries. The approach remains a prototype.
Read articlegroff 1.24.2 fixes security vulnerabilities
A bulletin published on September 29, 2026 announces groff 1.24.2 and says it fixes vulnerabilities affecting releases since 2012. The text gives no details about the flaws.
Read articleMoodle 3.9.2: discussion does not confirm a CVE or exploit
A September 29, 2026 message clarifies that the oss-security mailing list does not assign CVEs and is not a way to bypass MITRE's process. The text does not, by itself, confirm an exploitable Moodle vulnerability.
Read articleOpenSSL reports serious flaw in DTLS retransmissions
A notice dated September 29, 2026 describes a high-severity flaw in DTLS retransmission of handshake messages. The available excerpt does not provide affected versions or a fix.
Read articleDiscussion on libpng 1.6.59 distribution
On September 29, 2026, a post in the oss-sec feed asked where to find the official libpng 1.6.59 tarball, which the title describes as fixing CVE-2026-46675.
Read articleRota Nacional
Bring privacy into your workflow.
30 days, no card, with a starting quota. After that, Pix credit from R$ 10,00.