Knowledge you can apply
Security for teams connecting data, documents and agents to AI.
Low-severity advisory on an out-of-bounds read during compact Theta sketch deserialization in Apache DataSketches C++, with a denial-of-service effect, affecting versions 3.1.0 through 5.2.0.
Read articleModerate security advisory on out-of-bounds read and write in Count-Min sketch deserialization in Apache DataSketches C++, published October 10, 2026 on the oss-sec list.
Read articleModerate-severity advisory on CPC sketch deserialization in Apache DataSketches C++, affecting versions 2.0.0-incubating through 5.2.0, published by Lee Rhodes on October 10, 2026 on the oss-sec list.
Read articleModerate-severity advisory on a heap buffer overflow when deserializing HLL sketches in LIST mode in Apache DataSketches C++, affecting versions 1.0.0-incubating through 5.2.0.
Read articleOne co-creator of the Empire Market darknet marketplace pleaded guilty to a drug-related conspiracy charge and agreed to forfeit more than US$ 100 million in Bitcoin and properties in Virginia.
Read articleAn oss-sec post dated 9 October reports publicly disclosed Cyrus SASL security problems with no maintainer response and no new release since 2022.
Read articleillumos disclosed CVE-2026-102916, concerning incorrect flag handling in the rep prefix instruction emulation of bhyve. Dan McDonald published the advisory on 9 October 2026.
Read articleThe illumos project disclosed multiple CVEs affecting door servers, including unbounded file descriptor allocation and authorization flaws. This record gathers the facts published on the oss-sec list on 9 October 2026.
Read articleJapan's National Police Agency confirmed the arrest and extradition to Germany of a Russian citizen accused of involvement with the Qilin ransomware group, as reported by The Record.
Read articlePython 3.15 adds the built-in sentinel and frozendict types, adopts UTF-8 by default and includes improvements to the experimental JIT compiler. The information comes from an automatic translation of a news item published in the LWN feed.
Read articleAt the GNU Tools Cauldron 2026, a kernel developer presented GCC changes to support forward-edge CFI in the kernel, a technique aimed at preventing or detecting diversion of control flow.
Read articleA leader of the Your Mule Cashout (YMCO) operation has pleaded guilty. According to the report, the network organized money mules in the US and Europe from 2007 to 2014 to launder cybercriminal proceeds.
Read articleiRhythm, known for wearable cardiac sensors, has begun notifying states about the impact of a data breach that occurred in the summer. According to the report headline, the incident affects hundreds of thousands of people.
Read articleThe FBI director said the agency will keep working with partners to dismantle what remains of the ShinyHunters group and its associates, wherever they operate.
Read articlesystemd maintainers reviewed the project's achievements over the past year and answered questions about its size and health, and whether it could replace Kubernetes, at the All Systems Go! 2026 conference.
Read articleThe Belarusian Cyber Partisans confirmed they remained for months inside the network of the Moscow Health Department, according to a machine-translated report from The Record feed.
Read articleLet's Encrypt announced that, from 10 February 2027, it will issue TLS certificates valid for 64 days, with the last 90-day certificate expiring on 11 May 2027. The change is the second step of a plan toward 45 days in 2028.
Read articleSecurity advisory with CVSS 8.8 for Apache Camel Karavan from version 4.0.0 before 4.22.1, which applies to the cluster every resource in kubernetes.yaml without checking resource types or rejecting sensitive pod settings.
Read articleAdvisory dated October 9, 2026: the project file API used a supplied name without restriction as a path segment when writing to Git. CVSS 8.8; versions 3.18.0 up to before 4.22.1.
Read articleAn oss-sec post dated October 9, 2026 reports that a heap overflow in OpenJPEG was fixed on the main branch but remains in releases 2.5.3 and 2.5.4, and that the project lacks regular maintenance.
Read articleRota Nacional
30 days, no card, with a starting quota. After that, Pix credit from R$ 10,00.