---
okf_version: "0.1"
---

# Cyber — Rota Nacional

* [CVE-2026-92120: OAuth1 replay attack in Apache Allura](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-92120-repeticao-de-solicitacoes-7afc66.md) - Low-severity advisory on an OAuth1 request replay flaw in Apache Allura up to version 1.21.0, fixed in version 1.22.0.
* [CVE-2026-92119: mass assignment in the Apache Allura REST API](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-92119-atribuicao-em-massa-50eea0.md) - Public advisory dated October 12, 2026 about a mass assignment flaw in the Apache Allura REST API, affecting versions up to 1.21.0. Version 1.22.0 fixes the issue. Severity rated as moderate.
* [CVE-2026-92116: missing OAuth1 callback validation in Apache Allura](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-92116-falha-na-validacao-80ac55.md) - An OAuth1 callback validation flaw affects Apache Allura up to version 1.21.0. Version 1.22.0 fixes the issue, according to an advisory published on October 12, 2026 on the oss-sec list, with severity rated important.
* [Maintainers Summit 2026: LLMs, security bugs and succession in the kernel](https://ai.exponencialadm.net/okf/en/cyber/maintainers-summit-de-2026-llms-bugs-551af5.md) - The annual invitation-only kernel maintainers meeting, held on 8 October 2026 in Prague, discussed the impact of large language models, security bugs and long-term succession planning.
* [Threat intelligence report of October 12: breaches, AI-driven attacks and a critical Veeam flaw](https://ai.exponencialadm.net/okf/en/cyber/relatorio-de-ameacas-de-12-de-be23a9.md) - Summary of a weekly threat intelligence report covering breaches in Denmark, ASOS and Ukraine, AI-assisted campaigns and the Veeam flaw CVE-2025-64393, with claims presented as reported.
* [LineageOS 24.0 is released on Android 17, ahead of schedule](https://ai.exponencialadm.net/okf/en/cyber/lineageos-24-0-e-lancado-sobre-5f14ed.md) - The LineageOS project announced version 24.0, based on Android 17 and released earlier than expected. According to the text, the project turns 10 years old on December 24, 2026.
* [Monday security updates across Linux distributions](https://ai.exponencialadm.net/okf/en/cyber/atualizacoes-de-seguranca-de-segunda-feira-9cb3e2.md) - Linux distributions issued security updates for kernel, OpenSSL, browsers and dozens of libraries and packages, according to a 12 October 2026 summary from the LWN feed.
* [Unpatched cross-namespace secret exfiltration in k8s-config-connector; CVE requested](https://ai.exponencialadm.net/okf/en/cyber/falha-nao-corrigida-de-exfiltracao-de-250e42.md) - A researcher reports, via the oss-sec list, cross-namespace secret exfiltration in k8s-config-connector, still present on master as of 11/10/2026. A CVE ID has been requested from MITRE's CNA-LR.
* [Unpatched credential leak in Kubernetes cloud-provider-gcp; CVE requested](https://ai.exponencialadm.net/okf/en/cyber/vazamento-de-credenciais-nao-corrigido-no-0e0a7e.md) - A researcher reports on the oss-sec list a credential leak in kubernetes/cloud-provider-gcp that remains present in the master branch. The 90-day disclosure deadline passed without a substantive reply, and a CVE identifier has been requested.
* [Drone strikes hit a third Yandex data center in Russia and disrupt digital services](https://ai.exponencialadm.net/okf/en/cyber/drones-atingem-terceiro-data-center-da-48a7f2.md) - According to a report from The Record, a third Yandex data center in Russia was hit by drones over a weekend, forcing its shutdown and disrupting cloud, payment and delivery services.
* [Linux kernel 7.3-rc7: ext4 data=journal mode to be removed in 2028](https://ai.exponencialadm.net/okf/en/cyber/kernel-linux-7-3-rc7-modo-a2b3c8.md) - The 7.3-rc7 kernel pre-release is available for testing. The ext4 data=journal mode has been deprecated and will be removed in early 2028, according to the LWN feed.
* [USN-8912-1: flaws in the Perl DBI module may allow code execution or denial of service](https://ai.exponencialadm.net/okf/en/cyber/usn-8912-1-falhas-no-modulo-af6526.md) - Ubuntu Security notice, dated October 12, 2026, on two vulnerabilities in the Perl DBI module, CVE-2026-78030 and CVE-2026-88816, with risk of arbitrary code execution or denial of service.
* [SANS ISC Stormcast for October 12, 2026: episode listed without a summary in the feed](https://ai.exponencialadm.net/okf/en/cyber/sans-isc-stormcast-de-12-de-a7cf7c.md) - Radar records the SANS ISC Stormcast episode for Monday, October 12, 2026. The feed gives only the title and link, with no description, topics or technical findings.
* [Malicious npm packages posed as a Web3 accelerator offering AI credits](https://ai.exponencialadm.net/okf/en/cyber/pacotes-npm-maliciosos-se-passavam-por-d3e693.md) - Elastic Security Labs reported an operation using fake npm packages, websites and free AI credit offers to target crypto startups and founders, distributing malware for macOS and Windows.
* [Cyberattack disrupts refrigeration in hundreds of French supermarkets](https://ai.exponencialadm.net/okf/en/cyber/ciberataque-interrompe-refrigeracao-em-centenas-de-9c81d0.md) - According to a report from The Record's feed, machine translated, an overnight cyberattack on Sunday stopped refrigerators in hundreds of supermarkets in France and spoiled fresh food.
* [Incomplete fix for CVE-2026-79992 in Emacs](https://ai.exponencialadm.net/okf/en/cyber/correcao-incompleta-para-a-cve-2026-3c0d3d.md) - Researchers found that the fix for CVE-2026-79992 in Emacs was incomplete. A patch from the TRAMP maintainer will be included in Emacs 31.2, which has no announced release date.
* [Stable Linux kernels 7.2.10 and 6.18.56 released](https://ai.exponencialadm.net/okf/en/cyber/lancados-os-kernels-estaveis-7-2-d5e558.md) - Stable kernel versions 7.2.10 and 6.18.56 were released, each with several hundred fixes, according to the LWN feed dated 11 October 2026.
* [CVE-2026-107794: ExtUtils::Typemaps::STL::List allocates 32 GiB array for empty list](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-107794-extutils-typemaps-stl-dfbdd9.md) - Security advisory from the CPAN Security Group on versions of ExtUtils::Typemaps::STL::List for Perl prior to 1.07, which allocate a 32 GiB array when processing an empty list. The advisory was published on October 10, 2026.
* [CVE-2026-107373: T_STD_STRING typemap may read SV size before converting the argument](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-107373-typemap-t-std-fa0217.md) - CPAN Security Group advisory on ExtUtils::Typemaps: versions before 1.06 may read the size of an SV before converting the argument to a string. Published on October 10, 2026 in the oss-sec feed.
* [CVE-2026-103636: out-of-bounds read in Apache DataSketches VarOpt union deserialization](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-103636-leitura-fora-dos-8e2e94.md) - A low-severity flaw in datasketches-cpp up to version 5.2.0 can cause an out-of-bounds read and denial of service when deserializing a truncated VarOpt union.
* [CVE-2026-103635: out-of-bounds read in compact Theta sketch deserialization in datasketches-cpp](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-103635-leitura-fora-dos-f1a9f6.md) - Low-severity advisory on an out-of-bounds read during compact Theta sketch deserialization in Apache DataSketches C++, with a denial-of-service effect, affecting versions 3.1.0 through 5.2.0.
* [CVE-2026-103634: out-of-bounds read and write in Count-Min sketch deserialization](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-103634-leitura-e-gravacao-150dce.md) - Moderate security advisory on out-of-bounds read and write in Count-Min sketch deserialization in Apache DataSketches C++, published October 10, 2026 on the oss-sec list.
* [CVE-2026-103513: out-of-bounds read and write in CPC sketch deserialization (datasketches-cpp)](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-103513-leitura-e-gravacao-af8051.md) - Moderate-severity advisory on CPC sketch deserialization in Apache DataSketches C++, affecting versions 2.0.0-incubating through 5.2.0, published by Lee Rhodes on October 10, 2026 on the oss-sec list.
* [CVE-2026-103501: heap buffer overflow in HLL CouponList deserialization in Apache DataSketches](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-103501-estouro-de-buffer-f96ade.md) - Moderate-severity advisory on a heap buffer overflow when deserializing HLL sketches in LIST mode in Apache DataSketches C++, affecting versions 1.0.0-incubating through 5.2.0.
* [Empire Market co-creator sentenced to 40 years and agrees to surrender over US$ 100 million](https://ai.exponencialadm.net/okf/en/cyber/cocriador-do-empire-market-recebe-pena-308b16.md) - One co-creator of the Empire Market darknet marketplace pleaded guilty to a drug-related conspiracy charge and agreed to forfeit more than US$ 100 million in Bitcoin and properties in Virginia.
* [Unanswered public security issues in Cyrus SASL](https://ai.exponencialadm.net/okf/en/cyber/vulnerabilidades-publicas-sem-correcao-no-cyrus-d1774f.md) - An oss-sec post dated 9 October reports publicly disclosed Cyrus SASL security problems with no maintainer response and no new release since 2022.
* [CVE-2026-102916: rep prefix emulation flaw in bhyve, disclosed by illumos](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-102916-falha-na-emulacao-2a06b0.md) - illumos disclosed CVE-2026-102916, concerning incorrect flag handling in the rep prefix instruction emulation of bhyve. Dan McDonald published the advisory on 9 October 2026.
* [Multiple CVEs for illumos and distributions: door server processes](https://ai.exponencialadm.net/okf/en/cyber/multiplas-cves-para-illumos-e-distribuicoes-86fac9.md) - The illumos project disclosed multiple CVEs affecting door servers, including unbounded file descriptor allocation and authorization flaws. This record gathers the facts published on the oss-sec list on 9 October 2026.
* [Japan confirms arrest of Russian Qilin operator and extradition to Germany](https://ai.exponencialadm.net/okf/en/cyber/japao-confirma-prisao-de-operador-russo-6271b1.md) - Japan's National Police Agency confirmed the arrest and extradition to Germany of a Russian citizen accused of involvement with the Qilin ransomware group, as reported by The Record.
* [Python 3.15 released: sentinel, frozendict, UTF-8 by default and JIT improvements](https://ai.exponencialadm.net/okf/en/cyber/python-3-15-lancado-sentinel-frozendict-9dd3e2.md) - Python 3.15 adds the built-in sentinel and frozendict types, adopts UTF-8 by default and includes improvements to the experimental JIT compiler. The information comes from an automatic translation of a news item published in the LWN feed.
* [Kernel control-flow integrity checks arrive in the GCC compiler](https://ai.exponencialadm.net/okf/en/cyber/verificacao-de-integridade-do-fluxo-de-37b1de.md) - At the GNU Tools Cauldron 2026, a kernel developer presented GCC changes to support forward-edge CFI in the kernel, a technique aimed at preventing or detecting diversion of control flow.
* [Leader of money mule operation that laundered cybercriminal proceeds pleads guilty](https://ai.exponencialadm.net/okf/en/cyber/lider-de-operacao-de-mulas-financeiras-20a1b4.md) - A leader of the Your Mule Cashout (YMCO) operation has pleaded guilty. According to the report, the network organized money mules in the US and Europe from 2007 to 2014 to launder cybercriminal proceeds.
* [Data breach at iRhythm, maker of wearable cardiac sensors, affects hundreds of thousands](https://ai.exponencialadm.net/okf/en/cyber/vazamento-na-irhythm-fabricante-de-sensores-4f638d.md) - iRhythm, known for wearable cardiac sensors, has begun notifying states about the impact of a data breach that occurred in the summer. According to the report headline, the incident affects hundreds of thousands of people.
* [FBI cites new arrest linked to ShinyHunters group after data leak](https://ai.exponencialadm.net/okf/en/cyber/fbi-cita-nova-prisao-ligada-ao-3bb5ef.md) - The FBI director said the agency will keep working with partners to dismantle what remains of the ShinyHunters group and its associates, wherever they operate.
* [State of systemd in 2026: achievements, size and the Kubernetes question](https://ai.exponencialadm.net/okf/en/cyber/estado-do-systemd-em-2026-realizacoes-a35e3d.md) - systemd maintainers reviewed the project's achievements over the past year and answered questions about its size and health, and whether it could replace Kubernetes, at the All Systems Go! 2026 conference.
* [Belarusian hacktivists admit 2023 intrusion into Moscow health department network](https://ai.exponencialadm.net/okf/en/cyber/hacktivistas-bielorrussos-admitem-invasao-de-2023-5c3396.md) - The Belarusian Cyber Partisans confirmed they remained for months inside the network of the Moscow Health Department, according to a machine-translated report from The Record feed.
* [Let's Encrypt shortens TLS certificate validity to 64 days in 2027](https://ai.exponencialadm.net/okf/en/cyber/let-s-encrypt-reduz-a-validade-e1d9a9.md) - Let's Encrypt announced that, from 10 February 2027, it will issue TLS certificates valid for 64 days, with the last 90-day certificate expiring on 11 May 2027. The change is the second step of a plan toward 45 days in 2028.
* [CVE-2026-103413: Apache Camel Karavan applies unvalidated Kubernetes resources](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-103413-apache-camel-karavan-fb0979.md) - Security advisory with CVSS 8.8 for Apache Camel Karavan from version 4.0.0 before 4.22.1, which applies to the cluster every resource in kubernetes.yaml without checking resource types or rejecting sensitive pod settings.
* [CVE-2026-103412: path traversal in Apache Camel Karavan via project file name](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-103412-path-traversal-no-918b32.md) - Advisory dated October 9, 2026: the project file API used a supplied name without restriction as a path segment when writing to Git. CVSS 8.8; versions 3.18.0 up to before 4.22.1.
* [OpenJPEG: heap overflow fixed on main branch but still present in releases 2.5.3 and 2.5.4](https://ai.exponencialadm.net/okf/en/cyber/openjpeg-estouro-de-heap-corrigido-na-58380d.md) - An oss-sec post dated October 9, 2026 reports that a heap overflow in OpenJPEG was fixed on the main branch but remains in releases 2.5.3 and 2.5.4, and that the project lacks regular maintenance.
* [Friday security updates across Linux distributions](https://ai.exponencialadm.net/okf/en/cyber/atualizacoes-de-seguranca-de-sexta-feira-c74172.md) - Distributions including AlmaLinux, Debian, Fedora, Oracle, Red Hat, SUSE and Ubuntu published security updates for several packages, according to a machine-translated summary of the LWN feed.
* [CVE-2026-108039: Apache CXF limits XML elements and characters in StaxUtils](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-108039-apache-cxf-limita-e3434c.md) - Low-severity advisory on missing limits in Apache CXF StaxUtils, which can consume memory and CPU when parsing very large XML documents. Versions 3.6, 4.0 and 4.2 are listed as affected.
* [CVE-2026-107938: Apache CXF Netty HTTP client does not verify TLS certificate host name](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-107938-cliente-netty-do-b24a8d.md) - Apache CXF advisory on the Netty-based HTTP client, which does not check that the host name matches the server TLS certificate, with affected versions and fixed release lines.
* [CVE-2026-107937: Apache CXF attachment header limits can be bypassed, causing denial of service](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-107937-apache-cxf-pode-302345.md) - Low-severity advisory on Apache CXF: the multipart/MTOM attachment header parser did not fully enforce configured limits, which can lead to memory exhaustion. Fixed versions: 4.2.4, 4.1.9 and 3.6.13.
* [CVE-2026-100227: XML Signature wrapping flaw in the Apache CXF JAX-RS module](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-100227-falha-de-xml-63b394.md) - Moderate-severity advisory on Apache CXF XML signature interceptors that did not guarantee the XML delivered to the application was covered by the verified signature. Fixed versions are listed.
* [CVE-2026-97791: Apache CXF STSTokenValidator may accept untrusted SAML assertions](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-97791-ststokenvalidator-do-apache-71a90a.md) - Security advisory on Apache CXF STSTokenValidator, which shares the SAML signature validation result across requests. Versions from 4.2.0 before 4.2.4, from 4.0.0 before 4.1.9, and before 3.6.13 are listed as affected.
* [CVE-2026-97468: Apache CXF allows authentication bypass via weak cache keys for STS tokens](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-97468-apache-cxf-permite-5c1607.md) - Security advisory on Apache CXF: validated STS tokens were cached using a 32-bit non-cryptographic hash, which may allow an attacker to craft a colliding token. Fixed versions are listed.
* [CVE-2026-86463: denial of service in the Apache CXF FIQL query parser](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-86463-negacao-de-servico-629f1b.md) - A low-severity flaw in the Apache CXF FIQL query parser, disclosed on 9 October 2026, can cause denial of service in specific version ranges.
* [Lawmakers warn that AI training deal could expose Spirit Airlines data](https://ai.exponencialadm.net/okf/en/cyber/parlamentares-alertam-que-acordo-de-treinamento-3ff6fa.md) - In October 2026, US lawmakers warned that a proposed sale of Spirit Airlines assets, linked to an AI training deal, could expose emails, messages and personal, employment and financial records.
* [USN-8910-1: libxml2 vulnerabilities with denial of service, code execution, XXE and SSRF](https://ai.exponencialadm.net/okf/en/cyber/usn-8910-1-vulnerabilidades-no-libxml2-d14fe0.md) - Ubuntu Security advisory on six libxml2 flaws that may lead to denial of service, code execution, XXE injection and SSRF. One of them affects only Ubuntu 26.04 LTS.
* [Security fixes in golang.org/x/net v0.60.0](https://ai.exponencialadm.net/okf/en/cyber/vulnerabilidades-corrigidas-em-golang-org-x-1d4cfa.md) - The Go project marked v0.60.0 of golang.org/x/net to fix vulnerabilities, including memory exhaustion in an HTTP/2 server caused by Trailer headers. The advisory was forwarded through the oss-sec feed on October 8, 2026.
* [Go 1.27.2 and Go 1.26.9 ship 15 security fixes](https://ai.exponencialadm.net/okf/en/cyber/go-1-27-2-e-go-cf337d.md) - On 8 October 2026 the Go project released versions 1.27.2 and 1.26.9, minor point updates that include 15 security fixes according to the project's announcement.
* [International coalition takes down tools linked to Integrity Tech and Flax Typhoon](https://ai.exponencialadm.net/okf/en/cyber/coalizao-internacional-desativa-ferramentas-da-integrity-239320.md) - The United States and other nations took down digital tools and infrastructure of Integrity Tech, a Beijing-based company, used for widespread vulnerability scanning and, in some cases, intrusions, as part of the Flax Typhoon campaign.
* [Cisco Talos: malware that tries to manipulate AI-assisted analysis](https://ai.exponencialadm.net/okf/en/cyber/cisco-talos-malware-que-tenta-manipular-8755e6.md) - Cisco Talos describes malware techniques that attempt to manipulate AI-assisted analysis and recommends treating text extracted from samples as evidence, not as instructions. The content is dated 8 October 2026.
* [Advisory USN-8909-1: denial of service in libde265 from malformed H.265 bitstreams](https://ai.exponencialadm.net/okf/en/cyber/aviso-usn-8909-1-falha-de-946fb8.md) - The Ubuntu Security feed published advisory USN-8909-1 on libde265, an H.265 decoding library. Crafted bitstreams can cause a NULL pointer dereference and make the program crash.
* [Rust Foundation describes the Rust project goals process for Rust for Linux developers](https://ai.exponencialadm.net/okf/en/cyber/rust-foundation-descreve-o-processo-de-c53e54.md) - Tomáš Šedovič, a program manager at the Rust Foundation, presented at Kangrejos 2026 how the Rust project organizes, tracks and changes its goals, with Rust for Linux developers in mind.
* [US charges ransomware recovery firm CEO with secretly paying hackers](https://ai.exponencialadm.net/okf/en/cyber/eua-acusam-ceo-de-empresa-de-134bcf.md) - The US Department of Justice charged the owner of a ransomware recovery company with wire fraud, alleging he secretly hid ransom payments while overcharging attack victims.
* [ASOS says attackers accessed an employee account and sent a fraudulent push notification](https://ai.exponencialadm.net/okf/en/cyber/asos-invasores-acessaram-conta-de-funcionario-e7848a.md) - ASOS said attackers accessed an employee's account and sent a fraudulent push notification. The investigation, conducted with outside experts, identified access to names, contact details and some non-personal account information.
* [Reconstructing AI agent activity: two new scripts for forensic analysis](https://ai.exponencialadm.net/okf/en/cyber/reconstruindo-a-atividade-de-agentes-de-e883b8.md) - A researcher describes searching for conversation history in OpenCode and Hermes to support forensic investigations of AI use. Published on 8 October 2026 through the SANS ISC feed.
* [Crypto thief in SIM swap fraud sentenced to two and a half years in London](https://ai.exponencialadm.net/okf/en/cyber/ladrao-de-criptomoedas-com-fraude-de-ce1abc.md) - A 25-year-old man who helped steal almost US$ 260,000 in cryptocurrency through a SIM swap fraud was sentenced to two and a half years in prison by a London court, according to the feed of The Record.
* [Linux kernel dispute over swap slots and persistent swap files](https://ai.exponencialadm.net/okf/en/cyber/disputa-no-kernel-linux-sobre-slots-675a68.md) - Two competing proposals address the link between swap cache slots and space in persistent swap files in the Linux kernel, with no agreement yet for mainline integration.
* [USN-8907-1: IP address SubjectAltName check flaw in libgit2](https://ai.exponencialadm.net/okf/en/cyber/usn-8907-1-falha-na-verificacao-f3b3e7.md) - Ubuntu Security advisory describes a flaw in libgit2 TLS certificate validation that could allow a man-in-the-middle attack and exposure of confidential information, according to the text dated October 8, 2026.
* [USN-8902-1: signed integer overflow vulnerability in libarchive when processing encrypted ZIP entries](https://ai.exponencialadm.net/okf/en/cyber/usn-8902-1-vulnerabilidade-de-estouro-42edcd.md) - Ubuntu Security notice on a signed integer overflow in the libarchive ZIP writer when processing encrypted entries, with risk of crash or arbitrary code execution.
* [Thursday security updates for Linux distributions and software packages](https://ai.exponencialadm.net/okf/en/cyber/atualizacoes-de-seguranca-de-quinta-feira-26f471.md) - Summary of security updates published by AlmaLinux, Debian, Fedora, Mageia, Oracle, Slackware, SUSE and Ubuntu for packages such as kernel, glibc, firefox, bind, sudo and vim, based on a machine-translated news feed.
* [USN-8906-1: Linux kernel vulnerabilities fixed (IBM)](https://ai.exponencialadm.net/okf/en/cyber/usn-8906-1-vulnerabilidades-corrigidas-no-9c3d19.md) - Ubuntu Security notice USN-8906-1 describes an update that fixes numerous Linux kernel flaws, including a TLB invalidation issue on some Arm processors (CVE-2025-10263).
* [Advisory USN-8905-1: fixes for multiple Linux kernel flaws (GCP)](https://ai.exponencialadm.net/okf/en/cyber/aviso-usn-8905-1-falhas-corrigidas-99d73f.md) - Ubuntu Security published advisory USN-8905-1, an update fixing several security issues in the Linux kernel across architecture, drivers, filesystems and networking. The advisory lists many CVE identifiers.
* [USN-8904-1: Linux kernel fixes for Azure](https://ai.exponencialadm.net/okf/en/cyber/usn-8904-1-falhas-corrigidas-no-3f9ff6.md) - Ubuntu notice USN-8904-1 describes a Linux kernel update for Azure that fixes several security issues across subsystems, drivers, file systems and network components. The received text is truncated, so the full list of identifiers should be checked in the original source.
* [USN-8903-1: Linux kernel vulnerabilities fixed by Ubuntu](https://ai.exponencialadm.net/okf/en/cyber/usn-8903-1-vulnerabilidades-no-kernel-88b853.md) - An Ubuntu Security notice describes an update fixing several Linux kernel flaws across drivers, file systems, networking, memory and KVM. The received text is truncated, so the full number of CVE identifiers cannot be counted here.
* [CVE-2026-59265 in Apache OpenOffice: open question about LibreOffice impact](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-59265-no-apache-openoffice-6e8e94.md) - A message on the oss-sec list, published October 7, 2026, asks whether the CVE-2026-59265 flaw in Apache OpenOffice, which may allow system control through a malicious document, also affects LibreOffice.
* [CVE-2026-71896: Apache DolphinScheduler exposes user account information](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-71896-apache-dolphinscheduler-expoe-48a427.md) - Security advisory on an authorization flaw in Apache DolphinScheduler before version 3.4.3, rated critical, that lets authenticated users obtain other users' account data.
* [CVE-2026-71895: Apache DolphinScheduler exposes kubeconfig to non-administrator users](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-71895-apache-dolphinscheduler-expoe-111457.md) - Important-severity advisory: authenticated users without administrator roles can access kubeconfig data containing Kubernetes credentials. Affected versions run from 3.1.0 up to before 3.4.3.
* [CVE-2026-71183: Apache DolphinScheduler authorization flaw exposes data sources and passwords](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-71183-falha-de-autorizacao-a79447.md) - Advisory published on October 7, 2026 on the oss-sec feed: authenticated users can obtain data source connection details without authorization in versions before 3.4.3 of Apache DolphinScheduler.
* [ISC Stormcast for October 8, 2026: episode announced in the feed](https://ai.exponencialadm.net/okf/en/cyber/isc-stormcast-de-8-de-outubro-fe98d1.md) - Feed item announcing the ISC Stormcast episode for Thursday, October 8, 2026, with the episode address. The body gives no description or summary of topics.
* [CVE-2026-66087: authorization bypass in task instance stop and savepoint endpoints in Apache DolphinScheduler](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-66087-bypass-de-autorizacao-00fcb6.md) - Moderate-severity advisory for Apache DolphinScheduler: authenticated users can stop task instances and create savepoints in projects they are not authorized to access. Versions before 3.4.3 are affected.
* [CVE-2026-66084: authorization bypass in Apache DolphinScheduler (with-upstream endpoint)](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-66084-bypass-de-autorizacao-9e6aa0.md) - Published on the oss-sec feed by Wenjun Ruan on 7 October, the moderate-severity flaw lets authenticated users modify task definitions in projects they are not authorized to access. Versions before 3.4.3 are affected.
* [CVE-2026-66082: Apache DolphinScheduler allows cross-project authorization bypass in the API](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-66082-apache-dolphinscheduler-permite-4c74b5.md) - Moderate-severity advisory: authenticated users of Apache DolphinScheduler before 3.4.3 can operate schedules, workflow definitions and task instances in other projects.
* [LWN.net weekly edition of October 8, 2026: kernel, Rust, Python and security](https://ai.exponencialadm.net/okf/en/cyber/edicao-semanal-do-lwn-net-de-05da75.md) - Public summary of the LWN.net weekly edition of October 8, 2026, covering kernel flaws, the Gentoo Chromium package, Rust smart pointers, the LAVD scheduler and security updates.
* [Tor 0.4.9.14 released with high-severity security fixes](https://ai.exponencialadm.net/okf/en/cyber/tor-0-4-9-14-lancado-b6bb69.md) - Tor version 0.4.9.14, published on 7 October 2026, includes important high-severity bug fixes across relay, client, onion service and authority components, and maintainers strongly recommend prompt updating.
* [OSSN-0109: metric association bypass across projects in Gnocchi](https://ai.exponencialadm.net/okf/en/cyber/ossn-0109-bypass-de-associacao-de-8efd50.md) - Advisory OSSN-0109, published on October 7, 2026 in the oss-sec feed by maintainer Goutham Pacha Ravi: authenticated users can associate metrics with other users' resources by supplying resource_id to the Gnocchi metric creation endpoint.
* [Errata 1 of OSSA-2026-043: flaw in OpenStack Zaqar allows queue access across projects](https://ai.exponencialadm.net/okf/en/cyber/errata-1-do-ossa-2026-043-097e03.md) - Errata 1 of advisory OSSA-2026-043 assigns CVE-2026-107363 to a flaw in the Zaqar WebSocket, the OpenStack queue service, that allows access to queues of other projects through project substitution. The advisory lists versions from 1.0.0 as affected.
* [US offers $10 million reward for Chinese suspect linked to the Hafnium campaign](https://ai.exponencialadm.net/okf/en/cyber/eua-oferecem-recompensa-de-us-10-ba528c.md) - US authorities offer $10 million for information about a suspect described as a prominent figure in the Hafnium campaign, in which hackers broke into thousands of computers and stole large volumes of documents.
* [USN-8896-1: code execution and denial of service flaws in GStreamer Ugly Plugins](https://ai.exponencialadm.net/okf/en/cyber/usn-8896-1-falhas-de-execucao-32104a.md) - Ubuntu Security advisory on incorrect handling of malformed RealMedia and ASF files in GStreamer Ugly Plugins, with risks of code execution, denial of service and information exposure.
* [Fixed flaws in Microsoft, Adobe, Apple and Foxit disclosed by Cisco Talos](https://ai.exponencialadm.net/okf/en/cyber/falhas-ja-corrigidas-em-microsoft-adobe-313ba3.md) - Cisco Talos disclosed vulnerabilities already fixed by vendors in Foxit Reader, Windows, Photoshop and macOS, including remote code execution and privilege escalation risks.
* [USN-8900-1: flaws in the Go Networking package across HTTP/2, HTML and IDNA](https://ai.exponencialadm.net/okf/en/cyber/usn-8900-1-falhas-no-pacote-0ce912.md) - Ubuntu Security advisory dated 7 October 2026 lists eight CVEs in the Go Networking package, with possible denial of service, XSS and access control bypass.
* [Lawmakers push $11 million mental health support for Cyber Command](https://ai.exponencialadm.net/okf/en/cyber/legisladores-pedem-us-11-milhoes-para-e95796.md) - Lawmakers who oversee military cyber policy want a $11 million mental health program for Cyber Command, based at Fort Meade, Maryland, added to defense spending legislation.
* [Arizona courts report hackers stole data on more than 1.3 million people](https://ai.exponencialadm.net/okf/en/cyber/tribunais-do-arizona-relatam-roubo-de-52109c.md) - An investigation identified a breach of FARE, a state program used by Arizona courts to collect fines and debts tied to traffic and criminal offenses. The case was reported in October 2026.
* [OSSA-2026-043: OpenStack Zaqar allows access to other projects' queues via WebSocket](https://ai.exponencialadm.net/okf/en/cyber/ossa-2026-043-zaqar-do-openstack-e62806.md) - Security advisory dated October 7, 2026 on project substitution in OpenStack's Zaqar message queue service through the WebSocket channel. The CVE is still pending and the affected-version list in the feed is incomplete.
* [CVE-2026-103371: Apache Geode writes sensitive information to log; upgrade to 2.0.3](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-103371-apache-geode-grava-4d7fab.md) - A moderate flaw in Apache Geode Web Management can write sensitive information into log files. Versions from 2.0.0 up to before 2.0.3 are affected, and the fix is in 2.0.3.
* [CVE-2026-92415: medium-severity flaw in the Apache Jackrabbit WebDAV/DavEx client](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-92415-falha-de-severidade-246df7.md) - Advisory published on 7 October 2026 about the Apache Jackrabbit WebDAV/DavEx client, rated medium severity (CVSS 4.0: 6.9). Externally controlled input can select classes or code in the affected 2.20, 2.22 and 2.23 lines.
* [Charon: a stable API for analyzing Rust programs](https://ai.exponencialadm.net/okf/en/cyber/charon-api-estavel-para-analisar-programas-f0b03c.md) - Machine-translated report on the Charon project, which aims to offer a stable API for accessing internal Rust compiler information and making it easier for other tools to use.
* [CVE-2026-92414: critical Apache Jackrabbit flaw allows reuse of cached sessions](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-92414-falha-critica-no-ccdaaf.md) - Advisory dated October 7, 2026 describes a critical flaw (CVSS 4.0: 9.3) in the Apache Jackrabbit WebDAV server that allows reusing cached authenticated sessions without prior authentication, with a risk of access across users.
* [Oklahoma judge excludes Flock camera evidence after Supreme Court geofencing ruling](https://ai.exponencialadm.net/okf/en/cyber/juiz-de-oklahoma-descarta-provas-de-767edd.md) - A federal judge in Oklahoma excluded Flock camera evidence in a drug trafficking case, influenced by a recent Supreme Court decision on geofencing and digital evidence.
* [SANS ISC reports scanning linked to the Atlassian arbitrary file access flaw CVE-2026-21589](https://ai.exponencialadm.net/okf/en/cyber/sans-isc-observa-varreduras-ligadas-a-a6aebc.md) - On October 5, Atlassian published fixes for several products against an arbitrary file access flaw. SANS ISC reports related scanning, with risk of reading configuration files.
* [Coalition asks CISA for mandatory federal rules on operational technology (OT) security](https://ai.exponencialadm.net/okf/en/cyber/coalizao-pede-a-cisa-diretriz-federal-154032.md) - On October 7, 2026, the Operational Technology Cybersecurity Coalition asked CISA for a new federal directive focused on OT, the technology used to monitor and control critical infrastructure.
* [ShinyHunters extorted Boeing spin-off unit before arrests](https://ai.exponencialadm.net/okf/en/cyber/shinyhunters-extorquiu-unidade-desmembrada-da-boeing-a70171.md) - A KrebsOnSecurity report links an extortion attempt against a spun-off Boeing business unit to the ShinyHunters group, the arrest of a suspect in Jordan, and exploitation of CVE-2026-35273 in PeopleSoft.
* [LAVD scheduler: evolution from games to Linux servers](https://ai.exponencialadm.net/okf/en/cyber/escalonador-lavd-evolucao-de-jogos-para-3ca036.md) - Summary of a Kernel Recipes 2026 talk on the LAVD scheduler, first built for games and now used for other kinds of workloads on Linux.
* [Raspberry Pi Desktop arrives for x86-64 based on Debian 13](https://ai.exponencialadm.net/okf/en/cyber/raspberry-pi-desktop-chega-a-arquitetura-4352f8.md) - Raspberry Pi OS based on Debian 13 (trixie) has been released for x86-64 PCs with a 64-bit Desktop edition, according to an announcement by Simon Long relayed in the LWN feed.
* [USN-8895-1: Sudo flaw lets local users bypass time restrictions through the TZ variable](https://ai.exponencialadm.net/okf/en/cyber/usn-8895-1-falha-no-sudo-bf01e3.md) - Ubuntu Security notice describes a Sudo flaw where sudoers rules using NOTBEFORE or NOTAFTER with timestamps lacking a trailing timezone indicator could let a local attacker run commands outside the allowed window.
* [Wednesday security updates for Linux distributions](https://ai.exponencialadm.net/okf/en/cyber/atualizacoes-de-seguranca-de-quarta-feira-631ff5.md) - Linux distributions published security updates for numerous packages, including kernel, OpenSSH, Sudo, Firefox, Chromium, Docker and network components, according to the translated summary of the LWN feed.
* [USN-8894-1: five CVEs in Poppler risking denial of service and code execution](https://ai.exponencialadm.net/okf/en/cyber/usn-8894-1-cinco-cves-no-bec5a1.md) - An Ubuntu Security feed notice lists five flaws in Poppler, a PDF rendering library: integer overflows and a null pointer dereference that can cause denial of service and, in some cases, arbitrary code execution.
* [USN-8893-1: buffer overflow flaws in libwebsockets](https://ai.exponencialadm.net/okf/en/cyber/usn-8893-1-falhas-de-escrita-6980f6.md) - Ubuntu Security notice on two libwebsockets flaws, one in HTTP/2 (HPACK) header processing and one in CBOR processing. Both can cause writes past the end of an allocated buffer and, in principle, arbitrary code execution.
* [AI agents already automate attacks, according to a Cisco Talos article](https://ai.exponencialadm.net/okf/en/cyber/agentes-de-ia-ja-automatizam-ataques-154de0.md) - A Cisco Talos article states that AI agents already automate cyberattacks against public infrastructure and recommends preparing incident response, mapping attack paths and reinforcing internal controls and detection.
* [Advisory LSN-0122-1: Linux kernel security fixes (Ubuntu Security)](https://ai.exponencialadm.net/okf/en/cyber/aviso-lsn-0122-1-correcoes-de-d46128.md) - Advisory dated 7 October 2026 listing Linux kernel fixes for use-after-free flaws, memory corruption, race conditions and issues in drivers and filesystems.
* [Android unveils next-generation enclave for on-device AI](https://ai.exponencialadm.net/okf/en/cyber/android-apresenta-enclave-de-proxima-geracao-bfae50.md) - According to the Google Security feed summary, Android is moving toward a next-generation enclave for local AI aimed at proactive personal assistants. The available excerpt is truncated and does not detail the architecture.
* [Plasma antenna transmits and receives radio waves, researchers report](https://ai.exponencialadm.net/okf/en/cyber/antena-de-plasma-transmite-e-recebe-021a67.md) - Researchers present an antenna that uses plasma, the fourth state of matter, to establish wireless connections. The authors compare the device to a lightsaber. The text gives no cybersecurity details or protection recommendations.
* [Cement supercapacitor for on-site energy in smart buildings](https://ai.exponencialadm.net/okf/en/cyber/supercapacitor-de-cimento-para-energia-local-8f0bf5.md) - Proposal described in the text: use a cement supercapacitor to generate, store and use energy on the same site as a home or office. The supplied content contains no cybersecurity information.
* [Pwn2Own Ireland 2026: day two results](https://ai.exponencialadm.net/okf/en/cyber/pwn2own-ireland-2026-resultados-do-segundo-18b543.md) - Zero Day Initiative's report on day two of Pwn2Own Ireland 2026, with 24 scheduled attempts and about US$780,000 in prizes available.
* [CVE-2026-97146: Apache YuniKorn allows bypassing admission control through a forged system label](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-97146-apache-yunikorn-permite-3f9337.md) - Security advisory on Apache YuniKorn 1.9.0 and earlier: a secondary label set on a pod disables checks on user annotation content. Fixed in version 1.10.0. Medium severity (CVSS 4.0: 4.8).
* [CVE-2026-92393: Apache YuniKorn lets attackers bypass admission control through workload UPDATE](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-92393-apache-yunikorn-permite-04b28b.md) - Advisory published on October 7, 2026 by Wilfred Spiegelenburg on the oss-sec list. In YuniKorn 1.9.0 and earlier, the workload UPDATE operation does not enforce checks on user labels and annotations. CVSS 4.0 score: 2.0 (low). Affected versions: those before 1.10.0.
* [CVE-2026-78243: Apache YuniKorn can crash while processing the LDAP memberOf attribute](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-78243-apache-yunikorn-pode-d114d3.md) - Security advisory dated 7 October 2026: with the LDAP group resolver configured, YuniKorn 1.8.0 through versions before 1.10.0 can crash from an out-of-bounds read. CVSS 4.0 score 2.1, low severity.
* [X.Org advisory: multiple flaws in the X server and Xwayland fixed in October 2026](https://ai.exponencialadm.net/okf/en/cyber/alerta-do-x-org-falhas-no-092864.md) - The X.Org project published security fixes for several flaws in the X server and Xwayland, in versions xorg-server-21.1.25 and xwayland-24.1.14, according to an advisory dated 7 October 2026.
* [CVE-2026-97720: Apache Impala accepts JWT tokens without validating their signature on the executor](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-97720-apache-impala-aceita-6c82f1.md) - Low-severity advisory: the Apache Impala executor web server does not validate JWT/OAuth token signatures, which can allow access to resources when that mode is enabled. Versions 4.1.0 through 4.5.2 are affected.
* [CVE-2026-93684: Stored XSS in Apache Impala query plans](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-93684-xss-armazenado-em-4d8919.md) - A user with SELECT permission can insert JavaScript into a table alias, which runs in the browser of whoever opens the query plan in the web interface. Affects versions 2.7.0 to 4.5.2; the fix is in 4.5.3.
* [CVE-2026-90466: path traversal in Apache Impala 4.5.2 when loading JARs](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-90466-path-traversal-no-4fc841.md) - Advisory rated important: a crafted relative path can bypass trusted_jar_paths in Impala 4.5.2 and load an attacker-controlled JAR. The fix is in version 4.5.3.
* [CVE-2026-105244: log4net silently removes non-ASCII content in the RemoteSyslogAppender](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-105244-log4net-remove-silenciosamente-05b5b1.md) - Moderate-severity advisory for Apache log4net: the RemoteSyslogAppender strips characters outside visible ASCII and space from log records in versions before 3.5.0.
* [CVE-2026-105240: NUL character truncates OutputDebugStringAppender logs in Apache log4net](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-105240-caractere-nul-trunca-c72c22.md) - Moderate advisory for Apache log4net: a NUL character in logged content ends the OutputDebugStringAppender debug output in versions before 3.5.0.
* [CVE-2026-105243: log4net silently drops large records in EventLogAppender](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-105243-log4net-descarta-registros-b02d3a.md) - Apache log4net advisory on EventLogAppender: long messages are truncated to a size above what the Windows Event Log accepts and are then dropped without warning. Moderate severity, CVSS 3.1 score 5.3.
* [CVE-2026-105242: log4net flaw can drop events in the aspnet-request converter](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-105242-falha-em-log4net-e0b2d5.md) - Moderate-severity vulnerability (CVSS 3.1: 5.3) in Apache log4net: reading request parameters can trigger an ASP.NET validation failure and prevent the event from being logged in the aspnet-request converter. Versions before 3.5.0 are affected.
* [CVE-2026-105241: log4net drops a batch in SmtpPickupDirAppender on unencodable content](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-105241-log4net-descarta-lote-1180ee.md) - Moderate vulnerability in the Apache log4net SmtpPickupDirAppender: content the e-mail file writer cannot encode, such as an unpaired UTF-16 surrogate, can cause the whole batch to be dropped. Versions before 3.5.0 are affected.
* [CVE-2026-105239: NUL character truncates EventLogAppender records in Apache log4net](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-105239-caractere-nul-trunca-071e91.md) - Advisory from the oss-sec feed dated October 6, 2026, on the EventLogAppender in Apache log4net. A NUL character in logged content ends the Windows Event Log record. Moderate severity, CVSS 3.1 score of 5.3.
* [CVE-2026-105111: Stored XSS in Apache Commons BCEL via unescaped class strings](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-105111-xss-armazenado-no-579972.md) - Low-severity advisory on Apache Commons BCEL's Class2HTML, which generates pages with unescaped class strings and allows stored XSS in versions before 6.13.0. Published by Gary D. Gregory on October 6, with CVSS 3.1 and 4.0 scores disclosed.
* [CVE-2026-94114: unbounded recursion in Apache Commons BCEL when parsing classes](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-94114-recursao-ilimitada-no-a61d7d.md) - Security advisory on nested Code and Record attributes that can cause unbounded recursion in the ClassParser of Apache Commons BCEL before 6.13.0. Severity rated important, with CVSS 3.1 at 5.9 and CVSS 4.0 at 8.2.
* [ISC Stormcast for October 7, 2026: episode publication notice](https://ai.exponencialadm.net/okf/en/cyber/isc-stormcast-de-7-de-outubro-1c82a3.md) - The feed announces the publication of the ISC Stormcast episode for Wednesday, October 7, 2026. The item gives the title, date and a link to the episode page, but does not describe the content.
* [Let's Encrypt will issue 64-day certificates by default from February 10, 2027](https://ai.exponencialadm.net/okf/en/cyber/let-s-encrypt-tera-certificados-de-e17fa1.md) - Let's Encrypt will issue and renew certificates valid for 64 days starting February 10, 2027, and recommends testing automated renewal on its staging environment from October 14, 2026.
* [USN-8892-1: Ubuntu Pro for WSL token exposed in command line arguments](https://ai.exponencialadm.net/okf/en/cyber/usn-8892-1-token-do-ubuntu-82e512.md) - Ubuntu security notice: the Ubuntu Pro for WSL attach token appeared in command line arguments when enabling a subscription, potentially exposing confidential information and access to Ubuntu Pro repositories.
* [Ubuntu notice USN-8891-1: librsvg flaw with duplicate XML declarations](https://ai.exponencialadm.net/okf/en/cyber/aviso-ubuntu-usn-8891-1-falha-dc8b5f.md) - Ubuntu security notice on librsvg: duplicate XML entity declarations in SVG may lead to denial of service or arbitrary code execution, according to the notice text.
* [Radar: advisory USN-8890-1 on libsoup vulnerabilities](https://ai.exponencialadm.net/okf/en/cyber/radar-aviso-usn-8890-1-sobre-03f746.md) - Ubuntu Security advisory with fixes for libsoup flaws that can cause denial of service, information exposure and bypass of controls, published on October 6, 2026.
* [USN-8884-1: security flaws in the U-Boot bootloader (Ubuntu)](https://ai.exponencialadm.net/okf/en/cyber/usn-8884-1-falhas-de-seguranca-355b2b.md) - Ubuntu Security advisory on four CVEs in U-Boot, involving ZFS metadata, ext4 filesystems and fragmented IP traffic, with possible impact of arbitrary code execution or denial of service.
* [Alleged ATM malware creator appears in Nebraska court](https://ai.exponencialadm.net/okf/en/cyber/suposto-criador-de-malware-para-caixas-7757bd.md) - Radar report from The Record feed: an alleged creator of ATM malware appears in a Nebraska court after arrest. The source says he was added in March to the FBI's Ten Most Wanted Fugitives list, becoming the first cybercriminal ever placed on it.
* [USN-8889-1: fixes across OEM Linux kernel subsystems and an AMD RMP check flaw](https://ai.exponencialadm.net/okf/en/cyber/usn-8889-1-correcoes-em-subsistemas-1c317d.md) - Ubuntu Security feed notice covering multiple flaws in OEM Linux kernel subsystems, including an RMP check issue on some AMD processors that may affect the integrity of SEV-SNP guest memory.
* [USN-8888-1: Linux kernel vulnerabilities for Azure](https://ai.exponencialadm.net/okf/en/cyber/usn-8888-1-vulnerabilidades-no-kernel-9feb3c.md) - Ubuntu Security advisory, machine-translated, fixing several Linux kernel flaws in Azure variants, including CVE-2023-20585 on RMP checks in AMD processors with SEV-SNP.
* [Notice USN-8885-1: validation flaws and buffer overflow in FluidSynth](https://ai.exponencialadm.net/okf/en/cyber/aviso-usn-8885-1-falhas-de-134a50.md) - Notice USN-8885-1, from the Ubuntu Security feed, describes two FluidSynth flaws that could allow a remote attacker to cause denial of service or run arbitrary code.
* [USN-8887-1: Linux kernel update fixes flaws, including an SEV-SNP guest memory issue](https://ai.exponencialadm.net/okf/en/cyber/usn-8887-1-atualizacao-do-kernel-813759.md) - Ubuntu Security notice on a Linux kernel update with numerous fixes, including a memory integrity issue for SEV-SNP guests (CVE-2023-20585). The list reports many CVEs across several subsystems.
* [USN-8886-1: Linux kernel security update for NVIDIA Tegra and several subsystems](https://ai.exponencialadm.net/okf/en/cyber/usn-8886-1-atualizacao-de-seguranca-e3f92e.md) - Ubuntu Security notice describes fixes across many Linux kernel subsystems, including NVIDIA Tegra drivers, file systems and networking, with a long list of cited CVEs.
* [South Korean authorities suspect AI agents were used in bank intrusions](https://ai.exponencialadm.net/okf/en/cyber/autoridades-sul-coreanas-suspeitam-que-agentes-71cced.md) - According to reports carried by The Record's feed, personal data of at least 68,000 people may have been exposed in breaches of seven South Korean financial institutions, which authorities suspect were carried out with AI agents.
* [Python: random is unsafe for passwords and tokens; use secrets](https://ai.exponencialadm.net/okf/en/cyber/python-random-nao-serve-para-senhas-e9bd0b.md) - An item from the LWN feed reminds readers that the random module is not suitable for passwords and tokens, and that the secrets module, added in Python 3.6 in 2016, is the intended choice.
* [Osaka Metropolitan University cancels classes after suspected ransomware attack](https://ai.exponencialadm.net/okf/en/cyber/universidade-metropolitana-de-osaka-cancela-aulas-52a3fd.md) - Osaka Metropolitan University said a disruption, treated as a suspected ransomware attack, left its internal network, email and several administrative and academic systems unavailable, and it cancelled classes.
* [USN-8883-1: flaw in Go x/net/idna may allow hostname-based access control bypass](https://ai.exponencialadm.net/okf/en/cyber/usn-8883-1-falha-no-pacote-dfb47b.md) - Ubuntu Security advisory on the Go x/net/idna package. Incorrectly handled Punycode labels may allow bypassing hostname-based access controls and escalating privileges.
* [Django: four CVEs disclosed in a security advisory on October 6](https://ai.exponencialadm.net/okf/en/cyber/django-quatro-cves-de-seguranca-divulgados-eed9e7.md) - A Django security advisory, relayed on the oss-sec feed on October 6, 2026 by Sarah Boyce, lists CVE-2026-77050, CVE-2026-84429, CVE-2026-87890 and CVE-2026-87975, with links to the official announcement and the CVE records.
* [Gentoo drops maintenance of its Chromium package](https://ai.exponencialadm.net/okf/en/cyber/gentoo-deixa-de-manter-o-pacote-6bdb4a.md) - Maintainers of the Gentoo Chromium package have given up on maintaining it, citing build complexity and frequent updates. The report is a machine translation of a news item from the LWN feed.
* [CVE-2026-104380: Punk for Perl routes Extended CONNECT to any GET route without checking Origin](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-104380-punk-para-perl-2a61d1.md) - Security advisory from the CPAN Security Group on Punk for Perl, versions 0.48 up to before 0.55. The module may forward Extended CONNECT requests to GET routes without validating the Origin header.
* [FreeIPMI 1.6.20 released: announcement of new IPMI tool version](https://ai.exponencialadm.net/okf/en/cyber/freeipmi-1-6-20-lancado-anuncio-b25642.md) - Cybersecurity Radar: the release of FreeIPMI 1.6.20, an open-source IPMI management tool, was announced. The excerpt available does not state changes or fixes.
* [Wikimedia reports AI agent attempts to edit pages and compromise a note-taking tool](https://ai.exponencialadm.net/okf/en/cyber/wikimedia-relata-tentativas-de-agentes-de-10c1f8.md) - Wikimedia reported attempts by AI agents to edit pages and compromise a note-taking tool, along with resource consumption on web platforms that already run with limited capacity. The report, dated 5 October 2026, was reproduced from The Record's feed through machine translation.
* [Alleged ShinyHunters member detained in Jordan reportedly cooperating with the FBI](https://ai.exponencialadm.net/okf/en/cyber/suposto-integrante-do-shinyhunters-detido-na-327ef9.md) - Press reports say an alleged ShinyHunters member was detained in Jordan and is cooperating with the FBI, while the agency responds to a breach that exposed employee data.
* [libexpat 2.9.0 fixes two vulnerabilities, including a 32-bit integer overflow](https://ai.exponencialadm.net/okf/en/cyber/libexpat-2-9-0-corrige-duas-ccbc8d.md) - Advisory on the oss-security list dated October 5, 2026: libexpat 2.9.0 fixes CVE-2026-102633 (integer overflow in expat_realloc on 32-bit platforms) and CVE-2026-77214 (validation of the len parameter in XML_ParseBuffer).
* [Oss-sec discussion on early access to fixes for cloud providers](https://ai.exponencialadm.net/okf/en/cyber/discussao-no-oss-sec-sobre-acesso-581709.md) - On October 5, 2026, Jeremy Stanley replied on the oss-sec mailing list that early access to fixes helps cloud providers plan mitigations and find flaws before public advisories are published.
* [oss-sec debate on advance vulnerability notices to cloud providers](https://ai.exponencialadm.net/okf/en/cyber/debate-no-oss-sec-sobre-notificacoes-f69736.md) - A 5 October 2026 oss-sec mailing list post says cloud providers receive advance vulnerability notices inconsistently and proposes centralized criteria for who qualifies.
* [Pwn2Own Ireland 2026: full competition schedule](https://ai.exponencialadm.net/okf/en/cyber/pwn2own-ireland-2026-programacao-completa-das-4d1478.md) - The organizers published the three-day schedule for Pwn2Own Ireland 2026 in Cork, with more than 60 entries and targets including phones, smart home devices, printers and AI infrastructure.
* [CVE-2026-104714: race condition in Apache Struts exposes date and time values across concurrent requests](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-104714-condicao-de-corrida-1a30fb.md) - Moderate-severity advisory on a race condition in the shared message formatter of Apache Struts, published on 5 October 2026 in the oss-sec mailing list feed.
* [CVE-2026-104713: Apache Struts reads request body without limit in REST plugin](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-104713-apache-struts-le-daac99.md) - Important-severity advisory on the Apache Struts REST plugin, which reads request bodies without a size limit and can cause excessive server memory use from a single request.
* [CVE-2026-104712: Apache Struts can produce a disproportionate response with BigDecimal parameters](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-104712-apache-struts-pode-0d4adb.md) - A moderate-severity advisory, published on October 5, 2026 on the oss-sec feed, describing resource amplification in Apache Struts when BigDecimal parameters are rendered by the tag library.
* [CVE-2026-104711: OGNL injection in the legacy REST action mapper of Apache Struts](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-104711-injecao-ognl-no-31031b.md) - Moderate-severity advisory on an OGNL expression language injection flaw in the legacy RESTful action mapper of Apache Struts, shared on the oss-sec list on 5 October 2026, with affected version ranges listed.
* [US and Australia warn of new Citrix NetScaler vulnerability](https://ai.exponencialadm.net/okf/en/cyber/eua-e-australia-alertam-sobre-nova-6a994d.md) - US and Australia warned of a newly observed problem in customer-managed NetScaler deployments, distinct from vulnerabilities disclosed the previous week. Citrix said it is monitoring the issue and that it is not linked to those earlier reports.
* [CVE-2026-19954: Net::Whois::Raw for Perl queries the wrong domain for Unicode domain names](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-19954-net-whois-raw-0047ef.md) - CPAN Security Group advisory, published October 5, 2026 on the oss-sec list, covering Net::Whois::Raw versions before 2.99044, where the pwhois tool may query the wrong domain when the name contains Unicode characters.
* [CVE-2017-20285: YAML for Perl before 1.30 can trigger DESTROY on arbitrary classes](https://ai.exponencialadm.net/okf/en/cyber/cve-2017-20285-yaml-para-perl-eab4a7.md) - Advisory from the CPAN Security Group, published on October 5, on YAML for Perl versions before 1.30: a loaded document can trigger the DESTROY method of arbitrary classes.
* [CVE-2019-25777: YAML for Perl before 1.27_001 may allow arbitrary code execution](https://ai.exponencialadm.net/okf/en/cyber/cve-2019-25777-yaml-para-perl-19644d.md) - CPAN Security Group advisory on the YAML module for Perl: perl/glob documents loaded in versions before 1.27_001 can overwrite package variables and lead to arbitrary code execution.
* [Ukrainian retailer ATB confirms cyberattack after data leak threat](https://ai.exponencialadm.net/okf/en/cyber/rede-ucraniana-atb-confirma-ataque-cibernetico-98ad42.md) - ATB, Ukraine's largest supermarket chain, confirmed a cyberattack after hackers posted an extortion demand on its website, according to The Record's feed.
* [CUPS 2.4.20 will bring security fixes and a new disclosure policy](https://ai.exponencialadm.net/okf/en/cyber/cups-2-4-20-trara-correcoes-0dff30.md) - CUPS maintainers announced a vulnerability disclosure policy and said version 2.4.20 will include several security fixes, according to an oss-sec mailing list post dated October 5, 2026.
* [OpenJPEG 2.4.0 to 2.5.4 and git master: heap buffer overflow during encoding](https://ai.exponencialadm.net/okf/en/cyber/openjpeg-2-4-0-a-2-be276f.md) - Advisory on a heap buffer overflow in the OpenJPEG encoder, versions 2.4.0 to 2.5.4 and git master, triggered by encoding parameters rather than a crafted input file.
* [Ransomware hits the medical school of the University of Illinois Chicago](https://ai.exponencialadm.net/okf/en/cyber/ransomware-atinge-faculdade-de-medicina-da-ee9934.md) - A ransomware attack affected the College of Medicine at the University of Illinois Chicago (UIC) and resulted in the theft of some information stored on its servers, according to the news feed The Record.
* [RustConf 2026 recordings and photos published by the Rust Foundation](https://ai.exponencialadm.net/okf/en/cyber/gravacoes-e-fotos-da-rustconf-2026-c40032.md) - The Rust Foundation published recordings and photos from RustConf 2026, held in Montreal, Canada. According to the source, which is an automatic translation of a LWN feed item, LWN covered four talks from the event.
* [Sashiko: automatic Linux kernel patch review with a language model](https://ai.exponencialadm.net/okf/en/cyber/sashiko-revisao-automatica-de-patches-do-6e3518.md) - The Sashiko maintainer presented at Kernel Recipes 2026 how the system uses a language model to generate automatic kernel patch reviews and which improvements are in progress.
* [USN-8870-1: authorization flaws in OpenStack Aodh and Watcher](https://ai.exponencialadm.net/okf/en/cyber/usn-8870-1-falhas-de-autorizacao-c51d77.md) - Ubuntu Security notice on authorization flaws in OpenStack Aodh and Watcher, which may expose alarm metadata or trigger unauthorized action plans.
* [USN-8871-1: Linux kernel flaws for Raspberry Pi, including an Arm processor issue](https://ai.exponencialadm.net/okf/en/cyber/usn-8871-1-falhas-no-kernel-c67988.md) - Ubuntu Security notice USN-8871-1, dated 5 October 2026, fixes several Linux kernel flaws for Raspberry Pi. One, affecting some Arm processors, could let a local attacker bypass memory protections or elevate privileges.
* [USN-8851-3: Linux kernel fixes for Azure (NFS, IPv6 and Netfilter)](https://ai.exponencialadm.net/okf/en/cyber/usn-8851-3-correcoes-no-kernel-7182f1.md) - An Ubuntu Security notice fixes vulnerabilities in the Linux kernel for Azure in the NFS, IPv6 and Netfilter subsystems, identified as CVE-2025-38724, CVE-2026-53131 and CVE-2026-53221.
* [October 5: threat intelligence report summary from Check Point Research](https://ai.exponencialadm.net/okf/en/cyber/5-de-outubro-relatorio-de-inteligencia-7fe7d2.md) - Summary of a report on extortion and leaks, including the Arizona state courts attack, the Times Car and Fakturownia breaches, ransomware at an air navigation firm, AI agents doing reconnaissance, and malicious Custom GPTs in ClickFix campaigns.
* [Belarusian hacktivists reportedly spent two years inside a Russian healthcare network](https://ai.exponencialadm.net/okf/en/cyber/hacktivistas-bielorrussos-teriam-espionado-rede-de-80c368.md) - Russian cybersecurity researchers attributed a two-year silent espionage campaign against a Russian healthcare network to the Belarusian Cyber Partisans, according to a report carried in The Record's feed.
* [Picard 3.0: MusicBrainz tag editor adds Qt6 and a new plugin system](https://ai.exponencialadm.net/okf/en/cyber/picard-3-0-editor-de-tags-fa0981.md) - Release of version 3.0 of the MusicBrainz Picard tag editor, with a Qt6 update, a new plugin system, interface improvements, cover art processing and ISRC submission.
* [USN-8868-1: LibreOffice vulnerabilities per Ubuntu Security](https://ai.exponencialadm.net/okf/en/cyber/usn-8868-1-vulnerabilidades-no-libreoffice-b792ee.md) - Ubuntu Security notice on LibreOffice flaws when processing WMF and PICT images, PDFs, CFF and Graphite fonts and package URLs, with risks of denial of service, code execution or information exposure.
* [Monday security updates across Linux distributions and packages](https://ai.exponencialadm.net/okf/en/cyber/atualizacoes-de-seguranca-de-segunda-feira-3765b4.md) - On 5 October 2026, AlmaLinux, Debian, Fedora, Red Hat, SUSE and Ubuntu published security updates for several packages, according to an automatically translated summary of the LWN feed.
* [USN-8867-1: unsigned x-amz-* headers in Ceph RGW](https://ai.exponencialadm.net/okf/en/cyber/usn-8867-1-cabecalhos-x-amz-82d1e1.md) - Ubuntu Security feed notice on the Ceph Object Gateway: the SigV4 handler could accept x-amz-* headers outside the signed set, with a risk of privilege escalation through a pre-signed URL.
* [USN-8865-1: flaws in OpenSSL embedded in EDK II](https://ai.exponencialadm.net/okf/en/cyber/usn-8865-1-falhas-de-openssl-f57950.md) - Ubuntu Security advisory on four CVEs in EDK II, which uses an embedded OpenSSL library. The flaws can cause denial of service, excessive memory use or acceptance of forged messages.
* [Optical screen converts infrared light into visible image, according to new technology](https://ai.exponencialadm.net/okf/en/cyber/tela-optica-converte-luz-infravermelha-em-dd8812.md) - A technology described in a public source converts infrared light directly into a visible image, at a lower cost than current infrared cameras, according to the original text.
* [17.5-micrometer film reportedly blocks electromagnetic waves and hides heat](https://ai.exponencialadm.net/okf/en/cyber/filme-de-17-5-micrometros-bloqueia-59c8eb.md) - Radar briefing on a multifunctional film, 17.5 micrometers thick, which the text says reaches 99.9999999% shielding effectiveness against electromagnetic waves and hides heat. Published on October 5, 2026.
* [Seawater CO₂ turned into stone for permanent carbon removal](https://ai.exponencialadm.net/okf/en/cyber/co-do-mar-convertido-em-pedra-5f976c.md) - Radar: a carbon removal approach converts carbon dioxide dissolved in seawater into stone, according to the text, for permanent storage and to prevent its return to the atmosphere.
* [Linux kernel 7.3-rc6 released for testing, with possible schedule impact](https://ai.exponencialadm.net/okf/en/cyber/kernel-linux-7-3-rc6-disponivel-79459a.md) - Linux kernel 7.3-rc6 is available for testing. Linus Torvalds warned that travel to maintainer meetings may affect rc7 statistics and the next merge window.
* [Discussion on the oss-sec list about criteria for early access to vulnerability information](https://ai.exponencialadm.net/okf/en/cyber/discussao-na-oss-sec-sobre-criterios-58e0e3.md) - In October 2026, a discussion on the oss-sec list proposed defining which contributions would qualify someone for an early-access group for information, including cloud providers.
* [Oss-sec mailing list discussion on patch timing for cloud providers](https://ai.exponencialadm.net/okf/en/cyber/debate-na-lista-oss-sec-sobre-dabf13.md) - On 4 October 2026, a participant on the oss-sec mailing list argued that cloud providers need robust ways to update their whole environment quickly, because public fixes can speed up exploit creation by third parties.
* [Radar: ISC Stormcast episode of 5 October 2026 published by SANS ISC](https://ai.exponencialadm.net/okf/en/cyber/radar-episodio-isc-stormcast-de-5-c3725d.md) - SANS ISC published the ISC Stormcast episode dated 5 October 2026. The source gives only the title and date; the episode body was not provided.
* [TTY logs from DShield sensors sent daily to a SIEM](https://ai.exponencialadm.net/okf/en/cyber/registros-tty-de-sensores-dshield-enviados-9308a5.md) - An experiment reported by the SANS ISC diary sends TTY logs of commands run by attackers or bots that successfully log into a sensor to the DShield SIEM every day.
* [Discussion on oss-sec about a centralized pre-disclosure list for cloud providers](https://ai.exponencialadm.net/okf/en/cyber/discussao-na-lista-oss-sec-sobre-49955d.md) - A participant on the oss-sec list describes the pre-disclosure processes of virtualization projects and questions whether a centralized list makes sense for cloud computing providers, unless shared components are used by many providers.
* [Discussion on oss-sec about size criteria for disclosures to cloud hosting providers](https://ai.exponencialadm.net/okf/en/cyber/discussao-no-oss-sec-sobre-criterios-1ab828.md) - On the oss-sec list, participants debate which size of hosting provider should be eligible for a vulnerability disclosure initiative, with no defined criterion yet.
* [Elastic SIEM tags detection rules by noise, performance and threat coverage](https://ai.exponencialadm.net/okf/en/cyber/elastic-siem-classifica-regras-de-deteccao-3a62a5.md) - Radar: Elastic describes how it recalculates monthly noise, performance, threat and profile tags for its preconfigured detection rules, based on fleet telemetry.
* [Proposal for a disclosure list for cloud and VPS providers on oss-sec](https://ai.exponencialadm.net/okf/en/cyber/proposta-de-lista-de-divulgacao-para-f25c78.md) - On October 4, 2026, a message on the oss-sec list proposed evaluating a vulnerability disclosure list for cloud and virtual private server hosting providers that do not offer their own Linux distribution and may therefore not qualify for the distros list.
* [Apache Thrift 0.25.0 fixes 61 CVEs in a jointly announced advisory](https://ai.exponencialadm.net/okf/en/cyber/apache-thrift-0-25-0-corrige-3a3d38.md) - Notice from the oss-sec feed: Apache Thrift 0.25.0, released on 30 September 2026, fixes 61 vulnerabilities affecting earlier versions. The project recommends upgrading to 0.25.0.
* [CISA adds CVE-2026-88779 in Citrix NetScaler to the KEV catalog](https://ai.exponencialadm.net/okf/en/cyber/cisa-inclui-a-cve-2026-88779-eb8d56.md) - CISA added CVE-2026-88779, an improper restriction of operations within the bounds of a memory buffer flaw in Citrix NetScaler, to the KEV catalog based on evidence of active exploitation. BOD 26-04 directs federal civilian agencies to prioritize fixing high-risk KEV vulnerabilities.
* [Notes on User-Agent strings seen in honeypot logs](https://ai.exponencialadm.net/okf/en/cyber/curiosidades-sobre-strings-de-user-agent-307e8e.md) - Note from the SANS ISC feed, published on 4 October 2026, about new User-Agent strings the author noticed in honeypot logs during review.
* [YARA-X 1.21.0: new release brings five improvements and four bug fixes](https://ai.exponencialadm.net/okf/en/cyber/yara-x-1-21-0-nova-d90938.md) - YARA-X, a rule-based tool for malware identification, released version 1.21.0 with five improvements and four bug fixes, according to the SANS ISC feed notice dated October 3, 2026.
* [Court dismisses journalists' Pegasus spyware case](https://ai.exponencialadm.net/okf/en/cyber/justica-rejeita-acao-de-jornalistas-sobre-39a3d9.md) - On October 2, 2026, a California judge dismissed a case brought by Salvadoran journalists from El Faro who were targeted by Pegasus spyware, finding that California lacked jurisdiction.
* [CVE-2026-103885: flaw in Apache LDAP API](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-103885-falha-na-api-fd81be.md) - A security notice published on October 2, 2026 reports that malformed phone numbers can cause indefinite CPU consumption in the Apache Directory LDAP API. Versions from 2.1.0 up to, but not including, 2.1.9 are affected.
* [Apache Directory LDAP API flaw can cause denial of service](https://ai.exponencialadm.net/okf/en/cyber/falha-no-apache-directory-ldap-api-465f05.md) - An advisory published on October 2, 2026, rates a resource-consumption flaw in the Apache Directory LDAP API as important. Verifying bcrypt passwords with a high cost factor can keep CPU busy for hours.
* [Alert: Apache LDAP StartTLS may expose cleartext data](https://ai.exponencialadm.net/okf/en/cyber/alerta-risco-de-texto-claro-no-913a86.md) - An advisory published on October 2, 2026 says Apache Directory LDAP API versions 2.1.0 through releases earlier than 2.1.9 may receive cleartext data when StartTLS begins after a search.
* [U.S. bills target automatic plate readers](https://ai.exponencialadm.net/okf/en/cyber/eua-projetos-miram-leitores-de-placas-766e30.md) - Published on October 2, 2026, the report says U.S. lawmakers from both parties proposed limits on automatic license plate readers. The initiatives it mentions have different scopes.
* [Alert: critical flaw in Apache Directory LDAP API](https://ai.exponencialadm.net/okf/en/cyber/alerta-falha-critica-na-api-ldap-d0a590.md) - Published on October 2, 2026, the advisory describes unsafe deserialization in Apache Directory LDAP API 2.1.0 through releases before 2.1.9. A malicious or compromised LDAP server could supply a serialized Java class and potentially enable remote code execution.
* [Critical Apache Directory LDAP API flaw can cause stack overflow](https://ai.exponencialadm.net/okf/en/cyber/falha-critica-no-apache-directory-ldap-665e2b.md) - A security notice published on October 2, 2026 reports that deeply nested LDAP search filters can cause a stack overflow before authentication. Versions 1.2.0 through releases earlier than 1.2.9 are affected.
* [Critical flaw affects BER decoding in Apache Directory LDAP API](https://ai.exponencialadm.net/okf/en/cyber/falha-critica-afeta-decodificacao-ber-no-c00135.md) - An advisory published on October 2, 2026 reports that a small BER response can trigger excessive memory allocation, an OutOfMemoryError, and denial of service. Versions 1.2.0 up to, but not including, 1.2.9 are affected.
* [Critical Apache OpenOffice vulnerability alert](https://ai.exponencialadm.net/okf/en/cyber/alerta-falha-critica-no-apache-openoffice-59e75b.md) - A notice published on October 2, 2026 reports arbitrary code execution, including remote execution, when a specially crafted document is opened in Apache OpenOffice 4.1.16 or earlier.
* [Apache Traffic Server: SNI/Host policy flaw](https://ai.exponencialadm.net/okf/en/cyber/apache-traffic-server-falha-na-politica-2cbdd1.md) - An advisory published on October 2, 2026 reports a moderate access-control flaw in Apache Traffic Server, which does not correctly enforce the matching policy between SNI and the Host header.
* [Rust: Beyond the & Operator](https://ai.exponencialadm.net/okf/en/cyber/rust-alem-do-operador-7d3cfc.md) - A RustConf 2026 talk covered the effort to let user-defined smart pointers support operations currently available to native references.
* [Ransomware disrupts public services in Vicksburg](https://ai.exponencialadm.net/okf/en/cyber/ransomware-interrompe-servicos-publicos-em-vicksburg-c29d19.md) - Vicksburg’s mayor said a ransomware incident led the Mississippi city to temporarily shut down systems and disrupted public services. The FBI and other authorities are investigating.
* [Warlock linked to attacks on critical infrastructure](https://ai.exponencialadm.net/okf/en/cyber/warlock-e-associado-a-ataques-contra-32d68f.md) - A report published on October 2, 2026, links the Warlock ransomware group to attacks on critical infrastructure in Portuguese- and Spanish-speaking countries, exploiting multiple Microsoft SharePoint vulnerabilities.
* [Linux Test Project releases September stable version](https://ai.exponencialadm.net/okf/en/cyber/linux-test-project-lanca-versao-estavel-eed3ff.md) - Announced on October 2, 2026, the September stable release of the Linux Test Project includes 382 patches from 41 authors since the May version.
* [Distributions issue security updates](https://ai.exponencialadm.net/okf/en/cyber/distribuicoes-publicam-atualizacoes-de-seguranca-5e94f4.md) - On October 2, 2026, AlmaLinux, Debian, Fedora, Mageia, Oracle, Red Hat, SUSE, and Ubuntu announced security updates for various packages, including kernels, browsers, libraries, and system tools.
* [CISA adds two Zammad flaws to KEV catalog](https://ai.exponencialadm.net/okf/en/cyber/cisa-inclui-duas-falhas-do-zammad-1d2502.md) - On October 2, 2026, CISA added two Zammad vulnerabilities to the KEV catalog based on evidence of active exploitation: session fixation and improper privilege management.
* [SequenceHash aims to prevent hash ambiguity](https://ai.exponencialadm.net/okf/en/cyber/sequencehash-busca-evitar-ambiguidades-em-hashes-1cadd8.md) - In a publication dated October 2, 2026, Trail of Bits introduced SequenceHash and SequenceMAC, constructions for combining inputs unambiguously without relying on a single hash function.
* [USN-8864-1: Linux kernel flaws fixed](https://ai.exponencialadm.net/okf/en/cyber/usn-8864-1-atualizacao-corrige-falhas-722d07.md) - A security notice published on October 2, 2026 reports fixes in the Linux kernel's NFS, IPv6 networking, and Netfilter components.
* [USN-8816-4: Linux kernel fixes for GKE](https://ai.exponencialadm.net/okf/en/cyber/atualizacao-corrige-falhas-no-kernel-linux-725e46.md) - Published on October 2, 2026, the notice reports vulnerabilities across numerous Linux kernel subsystems and says an update addresses the flaws.
* [USN-8818-6: Linux kernel FIPS vulnerabilities](https://ai.exponencialadm.net/okf/en/cyber/usn-8818-6-alerta-para-falhas-f7533b.md) - A notice published on October 2, 2026 describes vulnerabilities across Linux kernel subsystems, including a possible memory write after permissions are revoked on some Arm processors.
* [USN-8851-2: Linux kernel flaws for Raspberry Pi](https://ai.exponencialadm.net/okf/en/cyber/atualizacao-corrige-falhas-no-kernel-linux-c0877f.md) - A security notice published on October 2, 2026 reports Linux kernel flaws in NFS, IPv6 networking, and Netfilter, addressed by an update.
* [Vibrating surfaces may adjust aerodynamics in flight](https://ai.exponencialadm.net/okf/en/cyber/superficies-vibrantes-podem-ajustar-a-aerodinamica-c8b0c9.md) - A text published on October 2, 2026, says vibrations beneath aircraft and other vehicles' surfaces can oppose turbulence and optimize aerodynamic performance.
* [Tin solar cells and the claim of efficiency above 33%](https://ai.exponencialadm.net/okf/en/cyber/celulas-solares-de-estanho-e-a-543021.md) - A text published on October 2, 2026, claims emerging tin solar cells exceed 33% efficiency and retain heat a thousand times longer. It provides no method, study, or measurement conditions.
* [ISC Stormcast: October 2 episode](https://ai.exponencialadm.net/okf/en/cyber/stormcast-do-isc-episodio-de-2-8c651a.md) - The item records the publication of a SANS ISC Stormcast podcast episode on October 2, 2026. It gives no topic or episode content, and reports no findings.
* [Iranian accused of hacking universities extradited](https://ai.exponencialadm.net/okf/en/cyber/acusado-de-ataques-a-universidades-e-37c0b2.md) - An Iranian citizen accused by the United States of taking part in dozens of university intrusions was extradited from Montenegro. The allegations involve theft of academic data and intellectual property.
* [Investigation reports unauthorized collection across dozens of sites](https://ai.exponencialadm.net/okf/en/cyber/relato-de-coleta-sem-autorizacao-destaca-226705.md) - Published on October 1, 2026, the report summarizes an Asymmetric Security investigation into software that reportedly tried to collect data from dozens of sites without permission.
* [Apache mod_dav_fs: flaw in PROPPATCH requests](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-93546-risco-no-mod-5914df.md) - A notice published on October 1, 2026 reports a moderate flaw in Apache HTTP Server through version 2.4.68. An authenticated WebDAV client with write access may cause service disruption and persistent data corruption.
* [CVE-2026-79768: Apache mod_userdir information disclosure](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-79768-risco-no-mod-62b03a.md) - A notice published on October 1, 2026 describes a low-severity flaw in Apache HTTP Server mod_userdir under specific absolute, non-wildcard UserDir configurations.
* [Apache HTTP Server: mod_auth_digest flaw may cause DoS](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-73637-dos-no-mod-271bd2.md) - A bulletin published on October 1, 2026 describes CVE-2026-73637, a use-after-free flaw that can corrupt Apache HTTP Server authentication state under specific conditions.
* [CVE-2026-73636: replay in mod_auth_digest](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-73636-repeticao-de-nonce-6e0557.md) - A notice published on October 1, 2026 reports a low-severity flaw in Apache HTTP Server 2.4.x. Under specific conditions, a man-in-the-middle attacker may replay captured Digest credentials.
* [Apache HTTP Server: mod_proxy_uwsgi alert](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-63718-risco-no-mod-3588fc.md) - A bulletin published on October 1, 2026 reports a low-severity vulnerability in Apache HTTP Server versions 2.4.30 through 2.4.68.
* [Apache HTTP Server: mod_xml2enc flaw](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-63686-risco-de-dos-00fb0d.md) - A notice published on October 1, 2026 describes a low-severity flaw that can cause denial of service. It affects Apache HTTP Server versions 2.4.0 through 2.4.68; the stated fix is version 2.4.69.
* [CVE-2026-63292: Apache HTTP Server stack overflow risk](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-63292-risco-no-mod-66301c.md) - A bulletin published on October 1, 2026 reports a moderate-severity flaw in mod_vhost_alias: in affected configurations, a Host header over 8192 bytes may cause denial of service or potentially code execution.
* [CVE-2026-63045: mod_proxy_ftp risk](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-63045-risco-no-mod-0246b9.md) - An advisory published on October 1, 2026 describes a low-severity flaw in Apache HTTP Server, on all platforms, in versions 2.4.0 through 2.4.68. In certain forward proxy configurations, an untrusted FTP server can direct a data connection to an arbitrary host.
* [CVE-2026-59797: SSLRequire issue in Apache](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-59797-atencao-ao-sslrequire-6b5aed.md) - An advisory published on October 1, 2026 rates a mod_ssl flaw in Apache HTTP Server as low severity. It concerns file-related expressions in SSLRequire.
* [CVE-2026-59685: Apache HTTP Server flaw](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-59685-falha-no-apache-bf3376.md) - A notice published on October 1, 2026 describes an out-of-bounds write in Apache HTTP Server for Windows, rated moderate and affecting versions 2.4.0 through 2.4.68.
* [CVE-2026-58415: mod_dav_fs property disclosure](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-58415-leitura-de-propriedades-3e651e.md) - A security notice published on October 1, 2026 rates an Apache HTTP Server flaw as low severity. Remote clients may read certain WebDAV properties through the .DAV state directory.
* [CVE-2026-57941: Apache mod_http2 vulnerability](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-57941-relata-falha-de-63dcc1.md) - A bulletin dated October 1, 2026 reports a moderate use-after-free vulnerability in mod_http2, linked to reentrancy and shared session->bbtmp. The stated affected range is Apache HTTP Server versions 2.4.0 through 2.4.68.
* [Apache HTTP Server: mod_proxy_html flaw](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-56449-falha-no-mod-3fae67.md) - A notice published on October 1, 2026 reports a low-severity vulnerability that may cause an out-of-bounds write with crafted HTTP response bodies. The stated affected range is versions 2.4.0 through 2.4.68.
* [Apache HTTP Server: mod_rewrite flaw](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-56154-falha-de-uso-f41f59.md) - A notice published on October 1, 2026 reports a use-after-free vulnerability in mod_rewrite triggered by lookahead use. The stated affected range is versions 2.4.0 through 2.4.68.
* [Apache HTTP Server: heap flaw in mod_charset_lite](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-56153-falha-de-heap-17b814.md) - A bulletin published on October 1, 2026 reports an out-of-bounds write vulnerability in the mod_charset_lite module, rated low severity and affecting Apache HTTP Server versions 2.4.0 through 2.4.68.
* [Reports point to espionage targeting AI firms and Asian governments](https://ai.exponencialadm.net/okf/en/cyber/relatorios-descrevem-espionagem-contra-empresas-de-6dc06c.md) - Two cybersecurity company reports describe intrusion operations linked to China, including phishing that impersonated Western experts.
* [Well-being and cyber defense in Threat Source](https://ai.exponencialadm.net/okf/en/cyber/bem-estar-e-defesa-cibernetica-na-39a9e9.md) - The October 1, 2026 edition of the Threat Source newsletter combines a reflection on workplace well-being with defensive strategies to make cyber adversaries’ operations harder.
* [USN-8863-1: GStreamer plugin vulnerabilities](https://ai.exponencialadm.net/okf/en/cyber/falhas-nos-gstreamer-good-plugins-podem-1aa1e9.md) - A security notice published on October 1, 2026 reports flaws in GStreamer Good Plugins when processing FLAC streams, AVI files and subtitle data, with possible information exposure and denial-of-service impacts.
* [Android: six advanced protection measures](https://ai.exponencialadm.net/okf/en/cyber/protecao-avancada-no-android-mira-ameacas-78b8c0.md) - Published on October 1, 2026, the text presents Android Advanced Protection features intended to address sophisticated threats and protect data. The supplied source does not detail the six measures.
* [European operation targets ransomware service KillSec](https://ai.exponencialadm.net/okf/en/cyber/operacao-europeia-atinge-servico-de-ransomware-2cf4cc.md) - Published on October 1, 2026, the report says European authorities carried out operations against the KillSec ransomware service and arrested an adolescent suspect described as a prominent figure.
* [Kernel faces a surge in vulnerability reports](https://ai.exponencialadm.net/okf/en/cyber/como-lidar-com-mais-relatos-de-4a7fd4.md) - A report on Greg Kroah-Hartman’s Kernel Recipes 2026 talk: the rise in vulnerability reports facilitated by LLMs and how the kernel security team is responding.
* [Rust 1.99.0 adds variadic extern “C” functions](https://ai.exponencialadm.net/okf/en/cyber/rust-1-99-0-traz-suporte-32be82.md) - Released on October 1, 2026, Rust 1.99.0 includes support for variadic extern “C” functions, stabilized APIs, and functions to query raw pointer size and alignment.
* [Security updates across Linux distributions](https://ai.exponencialadm.net/okf/en/cyber/atualizacoes-linux-abrangem-pacotes-de-seguranca-0dde67.md) - An October 1, 2026 bulletin lists security updates from AlmaLinux, Debian, Fedora, Mageia, Red Hat, Slackware, SUSE, and Ubuntu for a broad range of packages.
* [USN-8862-1: libXpm flaw may cause denial of service](https://ai.exponencialadm.net/okf/en/cyber/usn-8862-1-falha-no-processamento-6777dd.md) - A security notice published on October 1, 2026 reports excessive resource consumption when processing XPM images with dimensions set to zero.
* [Polish billing platform attack may expose customer data](https://ai.exponencialadm.net/okf/en/cyber/ataque-pode-expor-dados-de-clientes-dec0b0.md) - Published on October 1, 2026, the report says a breach at one of Poland’s leading online billing platforms may have exposed information belonging to users, customers, and business partners.
* [USN-8861-1: OpenSSL vulnerabilities](https://ai.exponencialadm.net/okf/en/cyber/openssl-falhas-em-fluxos-quic-podem-32573b.md) - A security notice published on October 1, 2026 reports two vulnerabilities in OpenSSL QUIC streams that may cause denial of service through excessive CPU or memory consumption.
* [ABB PCM600 flaws may raise privileges and write outside a directory](https://ai.exponencialadm.net/okf/en/cyber/abb-pcm600-falhas-podem-elevar-privilegios-7f8f03.md) - A CISA advisory published on October 1, 2026 describes two vulnerabilities in ABB PCM600, used in the energy sector: one in Scheduler Service and another in project-file extraction. It reports risks of privilege escalation and writing outside the intended location.
* [Alert: EasyIO Neo controllers vulnerable](https://ai.exponencialadm.net/okf/en/cyber/alerta-controladores-easyio-neo-vulneraveis-f0d035.md) - CISA advisory on CVE-2026-64893: specific versions of Johnson Controls EasyIO Neo EC and CW controllers may transmit sensitive data in cleartext. The recommendation is to update and secure management communications.
* [Alert: flaws in CISA Malcolm](https://ai.exponencialadm.net/okf/en/cyber/alerta-falhas-no-cisa-malcolm-88d4bb.md) - An advisory published on October 1, 2026 lists flaws in CISA Malcolm, including XSS, command injection and path traversal. Version September 2026 or later fixes the issues.
* [CISA warns of critical Armatura One vulnerabilities](https://ai.exponencialadm.net/okf/en/cyber/armatura-one-falhas-podem-expor-credenciais-448231.md) - A CISA advisory dated October 1, 2026, reports risks of code execution, unauthorized access, and credential exposure in Armatura One. The stated severity reaches CVSS 9.8.
* [CISA adds FortiMail flaw to KEV catalog](https://ai.exponencialadm.net/okf/en/cyber/cisa-inclui-falha-no-fortimail-no-95fb63.md) - On October 1, 2026, CISA added CVE-2026-104286, a path traversal flaw in Fortinet FortiMail, to the KEV catalog, citing evidence of active exploitation.
* [EasyIO Neo alert: flaw exposes information](https://ai.exponencialadm.net/okf/en/cyber/falha-em-controladores-easyio-neo-pode-0c2e5d.md) - A CISA-attributed advisory describes CVE-2026-64892 in versions of Johnson Controls EasyIO Neo Series EC and CW controllers. Fixed firmware is available; updates in industrial environments require operational planning.
* [CISA warns of Meari IoT Cloud authorization flaws](https://ai.exponencialadm.net/okf/en/cyber/falhas-de-autorizacao-afetam-plataforma-meari-3fb2f5.md) - A notice published on October 1, 2026 describes two authorization flaws in the Meari IoT Cloud OpenAPI Service, affecting all versions. The issues could expose device data and permit unauthorized changes.
* [Critical flaws may affect Monta charging stations](https://ai.exponencialadm.net/okf/en/cyber/falhas-em-plataforma-de-recarga-podem-421f59.md) - A CISA alert dated October 1, 2026 reports authentication and session flaws in Monta monta.app that could enable unauthorized administrative control or disruption of charging services.
* [USN-8860-1: OpenStack Designate flaw](https://ai.exponencialadm.net/okf/en/cyber/usn-8860-1-falha-no-openstack-c514bf.md) - A notice published on October 1, 2026 reports incorrect validation of overlapping DNS zones in OpenStack Designate. An authenticated user could redirect traffic or cause denial of service.
* [USN-8857-1: KCoreAddons flaw](https://ai.exponencialadm.net/okf/en/cyber/usn-8857-1-falha-no-kcoreaddons-062316.md) - A security notice published on October 1, 2026 reports that incorrect argument quoting in KShell::quoteArgs could allow shell escape and arbitrary command execution.
* [Talos outlines ways to frustrate adversaries](https://ai.exponencialadm.net/okf/en/cyber/talos-propoe-formas-de-frustrar-adversarios-e91046.md) - In material published on October 1, 2026, eight Cisco Talos researchers recommend deception, behavioral detection, tool controls, and limits for AI agents to make adversary operations harder.
* [Light-responsive semiconductors may reconfigure chips](https://ai.exponencialadm.net/okf/en/cyber/semicondutores-a-luz-podem-reconfigurar-chips-f2e4e2.md) - Published on October 1, 2026, the item says light-responsive semiconductors may allow chip functions to be changed after manufacture. It reports no experimental results or security guidance.
* [Single-wing drone flies under control](https://ai.exponencialadm.net/okf/en/cyber/drone-de-uma-asa-voa-sob-950f55.md) - A note dated October 1, 2026 describes a seed-inspired flying robot with one motor and one wing that can accurately follow complex trajectories. The text provides no cybersecurity information.
* [Remote access and AI: reduce what a compromised session can find](https://ai.exponencialadm.net/okf/en/cyber/acesso-remoto-e-ia-reduza-o-d6ed11.md) - Legitimate tools can be abused. Constrain access, keep prompts out of logs and process data before inference.
* [ISC Stormcast episode announced for October 1](https://ai.exponencialadm.net/okf/en/cyber/isc-stormcast-episodio-anunciado-para-1-0a45f1.md) - The listing announces an ISC Stormcast episode for October 1, 2026, but gives no topics or program content.
* [LWN.net: weekly edition of October 1, 2026](https://ai.exponencialadm.net/okf/en/cyber/edicao-semanal-do-lwn-net-1-9ea6ab.md) - The weekly edition features PostgreSQL, the kernel, Rust, KDE, security, and project development, along with brief news items and announcements.
* [WebKitGTK and WPE WebKit security correction](https://ai.exponencialadm.net/okf/en/cyber/correcao-no-comunicado-de-seguranca-do-14311c.md) - A notice published on September 30, 2026 clarifies that CVE-2025-6558 had already been fixed in WebKitGTK and WPE WebKit version 2.48.5.
* [U.S. sanctions 10 over ATM malware scheme](https://ai.exponencialadm.net/okf/en/cyber/eua-sancionam-10-por-esquema-de-f308c2.md) - A report published on September 30, 2026, says OFAC sanctioned 10 people and companies linked to laundering money stolen from dozens of ATMs through a malware scheme.
* [Mobility data: remove identity before AI analysis](https://ai.exponencialadm.net/okf/en/cyber/dados-de-mobilidade-remova-a-identidade-12b161.md) - Location and habits can identify people without a name. Minimize the dataset and assess risks from combining information.
* [Pentagon scrutinizes Cyber Command after suicide reports](https://ai.exponencialadm.net/okf/en/cyber/pentagono-volta-atencao-ao-cyber-command-df64ed.md) - A September 30, 2026 news item says an August 31 memo made demands of U.S. Cyber Command leadership following reports of suicide deaths.
* [AI vulnerability triage without exposing your inventory](https://ai.exponencialadm.net/okf/en/cyber/triagem-de-vulnerabilidades-com-ia-sem-800f8a.md) - Automation can help organize advisories. Decisions need evidence, and context should not contain secrets or customer data.
* [Python TLS: inspect the path that switches server contexts](https://ai.exponencialadm.net/okf/en/cyber/tls-em-python-confira-o-caminho-2ba053.md) - The SSLContext advisory requires checking the actual configuration. API privacy processing does not replace runtime remediation.
* [Hostname validation: review TLS before trusting an integration](https://ai.exponencialadm.net/okf/en/cyber/validacao-de-hostname-revise-tls-antes-7c9aad.md) - Verify the connection's recipient and the advisory conditions. Encryption alone is insufficient when destination validation fails.
* [Authentication and AI: protect reports without confusing controls](https://ai.exponencialadm.net/okf/en/cyber/autenticacao-e-ia-proteja-o-relato-0b5fa8.md) - An authentication flaw requires fixing the affected component. Prompt processing protects a different boundary: investigation data.
* [Images and documents: isolate processing before using AI](https://ai.exponencialadm.net/okf/en/cyber/imagens-e-documentos-isole-o-processamento-e8b407.md) - A file can attack its processor before becoming text. Updates and isolation complement inference privacy.
* [USN-8855-1: flaw in GStreamer Bad Plugins](https://ai.exponencialadm.net/okf/en/cyber/falha-em-gstreamer-bad-plugins-pode-099674.md) - A security notice published on September 30, 2026 reports incorrect validation of multichannel audio blocks and possible impacts when processing a crafted WAV file.
* [USN-8856-1: Kdenlive and MLT vulnerability](https://ai.exponencialadm.net/okf/en/cyber/falha-no-kdenlive-e-mlt-pode-d3db2c.md) - A Ubuntu security notice published on September 30, 2026 describes how malicious project files could exploit Kdenlive parameters and run arbitrary commands through MLT properties.
* [USN-8845-1: GVfs security vulnerabilities](https://ai.exponencialadm.net/okf/en/cyber/usn-8845-1-vulnerabilidades-no-gvfs-8c9936.md) - A September 30, 2026 bulletin reports GVfs issues that could allow code execution, denial of service, or local privilege escalation.
* [KDE Plasma: new features and plans ahead](https://ai.exponencialadm.net/okf/en/cyber/kde-plasma-novidades-e-planos-para-756c64.md) - A summary of a presentation at Akademy 2026 on changes to KDE Plasma over the past year and plans for remote desktop support and removing X11 support.
* [CVE-2026-80490 affects Algorithm::AhoCorasick::XS versions through 0.04](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-80490-afeta-pacote-perl-dd9b24.md) - A notice published on September 30, 2026 identifies a flaw in Algorithm::AhoCorasick::XS for Perl: through version 0.04, the code reads a string's length before converting it. The source is an automated translation of content from the oss-sec feed.
* [Complete Kernel Recipes videos published](https://ai.exponencialadm.net/okf/en/cyber/kernel-recipes-publica-videos-completos-da-bfd5f1.md) - The complete set of videos from the recently concluded Kernel Recipes conference has been published, accompanied by caricatures of attendees and speakers by Frank Tizzoni.
* [Reports from Python Language Summit 2026](https://ai.exponencialadm.net/okf/en/cyber/python-summit-2026-coleta-de-lixo-e69f37.md) - A series covers topics discussed on July 14 in Kraków, including garbage collection and Python without the GIL.
* [Chromium development practices at Google and Igalia](https://ai.exponencialadm.net/okf/en/cyber/chromium-duas-formas-de-desenvolver-2b664b.md) - At FOSSY 2026, Sharon Yang compared her work on Chromium at the two companies, discussing differences in how they operate and the effects on the codebase.
* [USN-8817-3: Linux kernel vulnerabilities for AWS](https://ai.exponencialadm.net/okf/en/cyber/atualizacao-corrige-falhas-no-kernel-linux-2a43ce.md) - A security notice published on September 30, 2026 reports flaws in the Linux kernel and Arm processors. The update fixes issues that could allow memory protections to be bypassed or systems to be compromised.
* [USN-8816-3: Linux kernel update for Oracle](https://ai.exponencialadm.net/okf/en/cyber/atualizacao-corrige-falhas-no-kernel-linux-ecd1c2.md) - A bulletin published on September 30, 2026 reports an update fixing multiple Linux kernel vulnerabilities and lists the affected subsystems.
* [USN-8818-5: Linux kernel flaws on NVIDIA Tegra](https://ai.exponencialadm.net/okf/en/cyber/atualizacao-corrige-falhas-no-kernel-linux-d5b2ad.md) - A security notice published on September 30, 2026 reports Linux kernel and Arm processor flaws, including risks of bypassing memory protections or escalating privileges.
* [Ukrainian warning cites DarkSword in iOS and Android attacks](https://ai.exponencialadm.net/okf/en/cyber/alerta-sobre-darksword-aponta-ataques-a-9e9cea.md) - Published on September 30, 2026, the warning attributed to Ukraine’s SSSCIP says the DarkSword malware, described as a fast-attack type targeting iPhones, is part of a wave of attacks against iOS and Android devices.
* [Linux Foundation opens nominations for technical board election](https://ai.exponencialadm.net/okf/en/cyber/eleicao-de-2026-para-conselho-tecnico-ee477b.md) - The electronic election for the Linux Foundation Technical Advisory Board will fill five seats after the next Linux Plumbers Conference. Candidate nominations are open until October 7, 2026.
* [Wednesday security updates](https://ai.exponencialadm.net/okf/en/cyber/distribuicoes-linux-publicam-atualizacoes-de-seguranca-29a487.md) - On September 30, 2026, Linux distributions announced updates for numerous packages. The bulletin lists affected projects but gives no vulnerability details or severity ratings.
* [USN-8854-1: OpenStack Keystone vulnerabilities](https://ai.exponencialadm.net/okf/en/cyber/usn-8854-1-alerta-para-falhas-111b1e.md) - A security notice published on September 30, 2026 describes three OpenStack Keystone vulnerabilities involving delegated tokens and role assignment queries.
* [USN-8853-1: OpenSBI vulnerability](https://ai.exponencialadm.net/okf/en/cyber/falha-no-opensbi-pode-causar-negacao-62411e.md) - A security notice published on September 30, 2026 reports incorrect index validation in requests to the SBI PMU extension, which could allow denial of service.
* [CISA adds Cisco SD-WAN flaw to KEV catalog](https://ai.exponencialadm.net/okf/en/cyber/cisa-registra-falha-explorada-no-cisco-4ed19e.md) - On September 30, 2026, CISA added CVE-2026-76504 to its Known Exploited Vulnerabilities catalog, citing evidence of active exploitation.
* [Star Blizzard expands phishing against Ukraine supporters](https://ai.exponencialadm.net/okf/en/cyber/phishing-ligado-ao-fsb-amplia-ataques-3dd5a6.md) - A news item dated September 30, 2026, reports that the Star Blizzard group expanded its phishing operations and adopted a new technique to make malware infections easier.
* [CVE-2026-95616: denial-of-service flaw in Apache WSS4J](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-95616-falha-no-parsing-9f284d.md) - A September 30, 2026 bulletin reports an integer overflow in WSS4J DER parsing that could enable unauthenticated denial of service. Check the affected versions and verify details in the original advisory.
* [CVE-2026-92899: Apache WSS4J flaw](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-92899-falha-de-replay-56f861.md) - A notice published on September 30, 2026 describes how differing Base64 representations of a Nonce can bypass UsernameToken replay protection in Apache WSS4J. The stated severity is moderate.
* [CVE-2026-92121: WSS4J signature-check flaw](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-92121-alerta-no-streaming-38708a.md) - An alert published on September 30, 2026 reports that Apache WSS4J streaming mode may leave an internal signed-content flag enabled after an STR-Transform reference. The stated severity is moderate.
* [CVE-2026-89238: Apache WSS4J flaw](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-89238-risco-de-confusao-6c101b.md) - A notice published on September 30, 2026, reports that confusion among EncryptedHeader child elements may cause Apache WSS4J to treat attacker-controlled content as a decrypted header.
* [Apache WSS4J flaw bypasses SAML authentication](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-88920-falha-no-apache-85d49f.md) - A notice published on September 30, 2026 reports that a flaw in Apache WSS4J’s DOM processor may let unauthenticated remote attackers forge authenticated SOAP messages. The alert rates the severity as important and lists affected versions.
* [CVE-2026-87830: Apache WSS4J streaming validation flaw](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-87830-alerta-sobre-validacao-df015f.md) - A notice published on September 30, 2026 reports that certain XPath expressions may fail to match elements during StAX validation of WS-SecurityPolicy. The stated severity is low; check the affected versions and verify details in the original notice.
* [CVE-2026-85532: Apache WSS4J validation flaw](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-85532-validacao-insuficiente-no-4dff9c.md) - An advisory published on September 30, 2026 reports insufficient validation of derived-key parameters, with moderate severity and a risk of weak keys or excessive CPU use.
* [UAT-11587 and the Antino backdoor: an espionage campaign in Asia](https://ai.exponencialadm.net/okf/en/cyber/uat-11587-e-o-backdoor-antino-240f81.md) - A Cisco Talos report published on September 30, 2026, describes campaigns attributed with high confidence to UAT-11587 and the Antino backdoor, observed against institutional targets in several Asian countries.
* [Ordinary light proposed for quantum computing](https://ai.exponencialadm.net/okf/en/cyber/luz-comum-e-proposta-para-computacao-2e6708.md) - A note published on September 30, 2026 reports an approach using bright ordinary light to solve computational problems and claims it avoids data losses associated with quantum processors.
* [Simpler mathematics for designing metamaterials](https://ai.exponencialadm.net/okf/en/cyber/matematica-mais-simples-pode-facilitar-mantos-096939.md) - Published on September 30, 2026, the item reports a simplified mathematical approach to designing metamaterials that can control different kinds of waves.
* [Apache PLC4X: CVE-2026-102511 in ADS discovery](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-102511-risco-na-descoberta-f3dbcd.md) - A notice published on September 30, 2026 reports that spoofed responses in Apache PLC4X ADS discovery could influence the connection destination. The source gives a CVSS 4.0 score of 8.5 and lists versions before 1.0.0 as affected; confirm details in the original notice.
* [CVE-2026-102510: Apache PLC4Go flaw](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-102510-risco-de-indisponibilidade-8be216.md) - A September 30, 2026 advisory reports allocation and framing flaws in Apache PLC4X for Go. Its CVSS 4.0 score is 8.7, high; version 1.0.0 is not affected.
* [CVE-2026-102509: resource flaw in Apache PLC4X](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-102509-falha-pre-autenticacao-583fa7.md) - A notice published on September 30, 2026 reports pre-authentication resource exhaustion in PLC4J, Apache PLC4X’s Java implementation. Version 1.0.0 is listed as unaffected.
* [Apache PLC4X: critical alert for the OPC UA secure channel](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-102508-alerta-sobre-canal-51cdc2.md) - An alert published on September 30, 2026 reports a flaw in the Apache PLC4X OPC UA driver. It assigns CVSS 4.0 a score of 9.2 and lists versions before 1.0.0 in the 0.9.0 line as affected; version 1.0.0 is stated to be unaffected.
* [Moodle: notice highlights end of fixes for 3.9 line](https://ai.exponencialadm.net/okf/en/cyber/moodle-3-9-x-correcoes-de-c6dec9.md) - A reply published on September 30, 2026 says security fixes for Moodle 3.9.x ended on December 11, 2023, and points to newer LTS versions to assess.
* [PCRE2: reply explains how to consult a security advisory](https://ai.exponencialadm.net/okf/en/cyber/correcao-de-estouro-de-buffer-no-b2cc56.md) - Published on September 30, 2026, the oss-sec feed item suggests retrieving a PCRE2 advisory description through the API and converting its Markdown to plain text. It gives no technical details of the flaw.
* [SANS ISC Stormcast: episode listed for September 30, 2026](https://ai.exponencialadm.net/okf/en/cyber/sans-isc-stormcast-de-30-de-69d546.md) - The SANS ISC Stormcast feed lists an episode for Wednesday, September 30, 2026. The item gives no topic or additional description.
* [Study presents Spectre-v2 attacks against JIT engines](https://ai.exponencialadm.net/okf/en/cyber/estudo-demonstra-ataques-spectre-v2-em-2a727b.md) - An announcement published on September 29, 2026 shares a study, paper, and proof-of-concept code on Spectre-v2 attacks against JIT engines using stale branch-prediction entries.
* [Firefox 157.0 brings visual changes and AV1](https://ai.exponencialadm.net/okf/en/cyber/firefox-157-0-traz-mudancas-visuais-1a3b8a.md) - Released on September 29, 2026, Firefox 157.0 highlights a visual redesign, hardware AV1 decoding in WebRTC calls, and various fixes.
* [U.S. Air Force members sentenced in cyber theft exceeding $2 million](https://ai.exponencialadm.net/okf/en/cyber/militares-dos-eua-recebem-mais-de-6f3b43.md) - A September 29, 2026 item reports that two U.S. Air Force members received prison sentences of more than six years in a cyber theft case involving over $2 million.
* [Paragon plans to go public by year-end](https://ai.exponencialadm.net/okf/en/cyber/paragon-planeja-abrir-capital-ate-o-d4bd3f.md) - The spyware company plans to complete the deal near the end of 2026 and trade on Nasdaq under the REDLattice name, according to content in The Record’s feed.
* [CPython race condition may delete files outside a temporary directory](https://ai.exponencialadm.net/okf/en/cyber/cpython-risco-de-exclusao-fora-do-b9c72a.md) - A notice published on September 29, 2026 reports a race condition during tempfile.TemporaryDirectory cleanup that may delete files outside the temporary directory. The available text provides no technical detail beyond message headers.
* [Apology after unauthorized access to government sites](https://ai.exponencialadm.net/okf/en/cyber/agentes-acessaram-sites-do-governo-australiano-9ce0d9.md) - A report dated September 29, 2026 says an AI company acknowledged shortcomings in its response to incidents involving Australian government websites.
* [CVE-2026-94053: LDAP flaw in Apache MINA SSHD](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-94053-injecao-ldap-no-c72c1b.md) - A notice published on September 29, 2026 describes a critical LDAP injection flaw that may bypass authentication in Apache MINA SSHD’s sshd-ldap component.
* [Critical LDAP authentication flaw in Apache MINA SSHD](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-94052-falha-na-autenticacao-d62368.md) - A notice published on September 29, 2026 reports a critical LDAP password authentication flaw in Apache MINA SSHD. It affects versions before the stated fixes; the source assigns a CVSS 3.1 score of 9.1.
* [CVE-2026-94029 in Apache MINA SSHD: memory exhaustion risk](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-94029-risco-de-memoria-c99ad5.md) - A notice published on September 29, 2026 reports a moderate flaw in Apache MINA SSHD's sshd-sftp component. Exploitation requires privileges and may exhaust server memory; the excerpt lists fixed versions starting at 2.20.0 and 3.0.0-M6.
* [CVE-2026-94002: memory risk in Apache MINA SSHD](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-94002-risco-de-memoria-75f4e3.md) - A September 29, 2026 notice reports memory exhaustion in SFTP clients caused by unsolicited responses and lists affected versions.
* [CVE-2026-93996: DoS risk in Apache MINA SSHD](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-93996-risco-de-dos-e1e4a6.md) - An advisory published on September 29, 2026 reports uncontrolled resource consumption while reading SCP command lines in the sshd-scp component. It rates the issue moderate, with a CVSS 3.1 score of 6.5.
* [CVE-2026-93995: Apache MINA SSHD flaw](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-93995-falha-no-sshd-2457ef.md) - A notice published on September 29, 2026 reports inadequate validation in sshd-git that may let a JGit archive operation write a file to the server. It rates the issue moderate, with a CVSS 3.1 score of 6.5.
* [Apache MINA SSHD: authentication policy flaw](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-93994-falha-no-apache-27d46a.md) - A notice published on September 29, 2026 reports that Apache MINA SSHD servers using multi-factor authentication may bypass a requirement for different public keys. The issue has a CVSS 3.1 score of 8.1, rated high.
* [CVE-2026-77185: critical Apache MINA SSHD flaw](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-77185-risco-de-autenticacao-5735cb.md) - A notice published on September 29, 2026 reports a possible authentication bypass in specific SSH server implementations using Apache MINA SSHD’s sshd-core. The flaw is rated CVSS 3.1 9.1.
* [Discussion of multiple CVEs in Debian DSA 6528-1 bulletin](https://ai.exponencialadm.net/okf/en/cyber/debate-sobre-os-cves-no-boletim-41a372.md) - Published on September 29, 2026, the comment links the number of issues in the bulletin to Debian maintainers’ effort to avoid excessive changes. It suggests using the changelog to identify items relevant to a particular environment.
* [Rust on GPUs: a prototype proposes a common target](https://ai.exponencialadm.net/okf/en/cyber/prototipo-propoe-rust-como-destino-de-cf5d9c.md) - Published on September 29, 2026, the report presents a proposal to compile conventional Rust code for GPUs without special libraries. The approach remains a prototype.
* [groff 1.24.2 fixes security vulnerabilities](https://ai.exponencialadm.net/okf/en/cyber/groff-1-24-2-corrige-vulnerabilidades-b5fe73.md) - A bulletin published on September 29, 2026 announces groff 1.24.2 and says it fixes vulnerabilities affecting releases since 2012. The text gives no details about the flaws.
* [Moodle 3.9.2: discussion does not confirm a CVE or exploit](https://ai.exponencialadm.net/okf/en/cyber/moodle-3-9-2-discussao-sobre-a3d8cc.md) - A September 29, 2026 message clarifies that the oss-security mailing list does not assign CVEs and is not a way to bypass MITRE's process. The text does not, by itself, confirm an exploitable Moodle vulnerability.
* [OpenSSL reports serious flaw in DTLS retransmissions](https://ai.exponencialadm.net/okf/en/cyber/openssl-comunicado-aponta-falha-grave-em-934a4a.md) - A notice dated September 29, 2026 describes a high-severity flaw in DTLS retransmission of handshake messages. The available excerpt does not provide affected versions or a fix.
* [Discussion on libpng 1.6.59 distribution](https://ai.exponencialadm.net/okf/en/cyber/libpng-1-6-59-disponibilidade-e-79a3ef.md) - On September 29, 2026, a post in the oss-sec feed asked where to find the official libpng 1.6.59 tarball, which the title describes as fixing CVE-2026-46675.
* [The Linux kernel through PostgreSQL’s lens](https://ai.exponencialadm.net/okf/en/cyber/o-kernel-linux-visto-pelo-postgresql-7a502a.md) - At a 2026 Kernel Recipes talk, Andres Freund discussed how Linux kernel features and behavior affect PostgreSQL and how the kernel could better support applications.
* [Tuesday security updates across Linux distributions](https://ai.exponencialadm.net/okf/en/cyber/atualizacoes-de-seguranca-para-componentes-linux-625088.md) - On September 29, 2026, a roundup from the LWN feed listed security updates from seven Linux distributions for kernels, browsers, libraries, and other components.
* [CVE-2026-97395: Apache Polaris FileIO risk](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-97395-risco-no-iceberg-15ca26.md) - A security feed reports that Apache Polaris versions before 1.8.0 may let FileIO requests be redirected to attacker-controlled endpoints.
* [Sensors report scans for a file linked to Wordfence](https://ai.exponencialadm.net/okf/en/cyber/varreduras-observadas-em-sites-protegidos-pelo-013c55.md) - A SANS ISC note published on September 29, 2026 reports a small number of scans for wordfence-waf.php and describes the file's connection to WordPress site protection.
* [Dodo Pizza confirms cyberattack and possible data exposure](https://ai.exponencialadm.net/okf/en/cyber/dodo-pizza-confirma-ciberataque-em-rede-ee47d2.md) - The Russian chain, with 1,500 locations, said customer data may have been compromised after hackers made claims. The reported categories include personal information and order details.
* [Arizona reports theft of residents’ personal data](https://ai.exponencialadm.net/okf/en/cyber/corte-do-arizona-relata-roubo-de-afc1a8.md) - On September 29, 2026, the Arizona Supreme Court reported that hackers stole residents’ personal data. The court said the incident did not involve ransomware and that, as of Monday, no ransom demands had been made.
* [Baicells Nova 430H flaw may temporarily disrupt cellular service](https://ai.exponencialadm.net/okf/en/cyber/baicells-nova-430h-uplink-malformado-pode-2fae0b.md) - A CISA advisory published on September 29, 2026 describes a denial-of-service flaw in the Nova 430H eNodeB. The notice says no fix is planned and recommends reducing device exposure.
* [CISA adds exploited Apple flaw to KEV catalog](https://ai.exponencialadm.net/okf/en/cyber/cisa-registra-falha-explorada-em-produtos-2453db.md) - On September 29, 2026, CISA reported adding CVE-2026-86950 to its KEV catalog: an out-of-bounds write flaw affecting several Apple products, with evidence of active exploitation.
* [Critical Firmware Flaw in VIVOTEK Cameras](https://ai.exponencialadm.net/okf/en/cyber/falha-de-injecao-de-comandos-em-fcf0c5.md) - An alert published on September 29, 2026 says CVE-2026-22755 affects multiple VIVOTEK camera models. Command injection may enable remote execution, possibly as root; the vendor recommends installing the latest firmware.
* [Alert: Critical flaws in Anjvision YSSD-RTMP-H5](https://ai.exponencialadm.net/okf/en/cyber/falhas-no-firmware-anjvision-yssd-rtmp-40ed40.md) - A CISA notice published on September 29, 2026 reports nine CVEs in device firmware 3.3.2.4_build_2024-12-26. Impacts may include access to data and accounts, command execution, and device takeover; the notice reports no planned fix.
* [Lantronix G520 gateway flaws may allow root-level execution](https://ai.exponencialadm.net/okf/en/cyber/falhas-no-gateway-lantronix-g520-permitem-bcf988.md) - A September 29, 2026 cybersecurity notice says flaws in the Lantronix G520 Series may allow software replacement and code execution with root privileges. Version 2.6.0.7R6 fixes the issues.
* [Alert: critical MikroTik RouterOS flaw](https://ai.exponencialadm.net/okf/en/cyber/routeros-falha-pre-autenticacao-pode-dar-913d48.md) - A CISA-attributed advisory reports a pre-authentication flaw in the RouterOS web service, with risk of remote code execution as root or denial of service. MikroTik recommends upgrading to version 7.23 or later.
* [Critical flaws affect Toptech TMS7 and TopHAT 7.6.3](https://ai.exponencialadm.net/okf/en/cyber/toptech-tms7-e-tophat-dez-cves-a10e13.md) - A CISA-attributed alert lists ten CVEs affecting TMS7 and TopHAT 7.6.3, with a CVSS score of 10. Toptech says the issues were fixed in version 7.8.
* [Viidure Dashcam: flaws expose data and credentials](https://ai.exponencialadm.net/okf/en/cyber/viidure-dashcam-dados-e-credenciais-de-3f78e0.md) - A CISA alert published September 29, 2026, reports two flaws in the Viidure Dashcam Android app: publicly readable cloud storage and permanent credentials embedded in code. No planned fix is reported.
* [Cisco Talos announces monthly threat hunting for executives](https://ai.exponencialadm.net/okf/en/cyber/cisco-talos-anuncia-caca-mensal-a-7322d7.md) - Published on September 29, 2026, the article introduces Executive Threat Detection, a Cisco Talos service announced for up to 10 key people, with monthly threat hunting and intelligence analysis focused on corporate systems associated with executives.
* [USN-8842-1: Linux kernel vulnerabilities](https://ai.exponencialadm.net/okf/en/cyber/usn-8842-1-falhas-no-kernel-d1c556.md) - A security notice published on September 29, 2026 reports flaws in several Linux kernel subsystems and lists 18 CVE identifiers.
* [USN-8728-3: update fixes Linux kernel vulnerabilities](https://ai.exponencialadm.net/okf/en/cyber/falhas-no-kernel-linux-exigem-atualizacao-a062e3.md) - A security notice published on September 29, 2026 describes Linux kernel vulnerabilities, including risks of memory corruption and privilege escalation. The update covers a wide range of architectures and subsystems.
* [USN-8816-2: fixes for Linux kernel vulnerabilities](https://ai.exponencialadm.net/okf/en/cyber/atualizacao-corrige-vulnerabilidades-em-componentes-do-c24e78.md) - A security notice published on September 29, 2026 reports fixes for vulnerabilities across numerous Linux kernel components. Consult the original bulletin to identify affected systems and applicable updates.
* [Ubuntu fixes flaws across Linux kernel subsystems](https://ai.exponencialadm.net/okf/en/cyber/atualizacao-corrige-falhas-no-kernel-linux-4f3321.md) - Notice USN-8729-6, published on September 29, 2026, reports fixes for multiple vulnerabilities in the Linux kernel for AWS, spanning networking, filesystems, memory, drivers, and other subsystems.
* [Moodle 3.9.2: questions about an RCE claim](https://ai.exponencialadm.net/okf/en/cyber/moodle-3-9-2-alegacao-de-f676e4.md) - A message published on September 29, 2026 questions a claim of upload-validation bypass and remote code execution under a misconfiguration in Moodle 3.9.2. The author asks for reproduction on a newer version.
* [KVM/x86: flaw can trigger a host panic](https://ai.exponencialadm.net/okf/en/cyber/falha-no-kvm-pode-permitir-panico-5b0d81.md) - A report published on September 29, 2026 describes a host-kernel panic triggerable by a guest virtual machine, reproduced on Linux 6.1.74 and a mainline version predating the fix.
* [Gelatin and yeast as an idea for building on Mars](https://ai.exponencialadm.net/okf/en/cyber/gelatina-e-fermento-podem-inspirar-construcoes-c7391d.md) - Published on September 29, 2026, the news item presents a living material as a possible alternative for future Mars habitats, where conventional construction is considered difficult.
* [Quantum leap in sound observed directly](https://ai.exponencialadm.net/okf/en/cyber/salto-quantico-no-som-e-observado-ed72af.md) - Published on September 29, 2026, the item reports the first direct observation of quantum jumps occurring in sound and links it to scientific exploration begun more than a century ago.
* [Why homogeneous systems can be fragile](https://ai.exponencialadm.net/okf/en/cyber/por-que-sistemas-homogeneos-podem-ser-d5afa2.md) - Published on September 29, 2026, the text questions whether networks with components that behave homogeneously necessarily work better and notes that they can be surprisingly fragile.
* [libpng 1.6.59 fixes a use-after-free vulnerability](https://ai.exponencialadm.net/okf/en/cyber/libpng-1-6-59-corrige-falha-ceec2e.md) - Released on September 28, version 1.6.59 fixes CVE-2026-46675, a medium-severity flaw in libpng's sequential reader.
* [WebKitGTK and WPE WebKit: WSA-2026-0006 advisory](https://ai.exponencialadm.net/okf/en/cyber/webkitgtk-e-wpe-webkit-aviso-wsa-28a24d.md) - Advisory WSA-2026-0006 announces security updates for WebKitGTK and WPE WebKit. The supplied material is incomplete and gives no details on vulnerabilities or affected versions.
* [PCRE2 10.49 fixes a JIT flaw](https://ai.exponencialadm.net/okf/en/cyber/pcre2-10-49-corrige-falha-no-13207a.md) - PCRE2 version 10.49 is a security-only release. It fixes an out-of-bounds write with arbitrary data under specific JIT usage conditions.
* [Report alleges Moodle 3.9.2 upload flaw](https://ai.exponencialadm.net/okf/en/cyber/relato-aponta-possivel-falha-de-upload-156d5f.md) - A September 28 post reports a possible file-validation bypass in Moodle 3.9.2 and requests a CVE identifier. Other versions have not been verified.
* [SANS ISC Stormcast: September 29, 2026 episode](https://ai.exponencialadm.net/okf/en/cyber/sans-isc-stormcast-episodio-de-29-0ab1e8.md) - The feed announces a SANS ISC Stormcast episode for September 29, 2026, but provides no description or details about its content.
* [Linux without MDM: Elastic workflow updates configurations](https://ai.exponencialadm.net/okf/en/cyber/linux-sem-mdm-fluxo-atualiza-configuracoes-b9af43.md) - Published on September 29, 2026, the report describes a 68-line YAML workflow that checks Linux endpoints every six hours and avoids duplicate actions when applying managed configurations. The team says it validated the complete workflow on Elastic Stack 9.5.1.
* [Apple patches exploited flaw in earlier system versions](https://ai.exponencialadm.net/okf/en/cyber/apple-corrige-falha-explorada-em-sistemas-4ed795.md) - A September 28, 2026 bulletin reports security fixes for iOS 26, macOS 26, and macOS 15, plus a functional update without security fixes for version 27.
* [USN-8487-2: update fixes a curl regression](https://ai.exponencialadm.net/okf/en/cyber/usn-8487-2-atualizacao-corrige-regressao-cab49a.md) - An Ubuntu Security notice published on September 28, 2026, fixes an incomplete earlier correction and lists curl vulnerabilities that may affect connections, authentication, cookies, and credentials.
* [Mandiant warns of Oracle PeopleSoft vulnerability exploitation](https://ai.exponencialadm.net/okf/en/cyber/alerta-sobre-exploracao-de-falha-no-2e2c39.md) - A report published on September 28, 2026 says ShinyHunters is using workarounds to exploit a vulnerability in Oracle PeopleSoft; it gives no technical details or mitigation guidance.
* [Git 2.56.0 adds changes to conflict workflows](https://ai.exponencialadm.net/okf/en/cyber/git-2-56-0-traz-mudancas-491872.md) - Released on September 28, 2026, Git 2.56 includes 748 commits since 2.55, a safer conflict-resolution workflow, and the git history drop subcommand.
* [CVE-2026-85644 affects XS-Parse-Keyword in Perl](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-85644-falha-em-xs-f31555.md) - A notice published on September 28, 2026 reports that XS::Parse::Infix may treat a number as an array reference. The issue is associated with XS-Parse-Keyword versions 0.40 to 0.49; the notice provided is truncated.
* [CVE-2026-88816: DBI for Perl flaw](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-88816-falha-no-dbi-754d36.md) - A notice published on September 28, 2026 reports that DBI for Perl versions earlier than 1.654 mishandle numeric values in FetchHashKeyName.
* [New Mexico jury finds Meta misled consumers](https://ai.exponencialadm.net/okf/en/cyber/juri-do-novo-mexico-aponta-engano-175a19.md) - On September 28, 2026, a New Mexico jury concluded that Facebook violated the law nearly 44 million times by misleading consumers about its data privacy practices.
* [CVE-2026-88815: DBI for Perl mishandles values](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-88815-tratamento-de-valores-c8ceee.md) - A notice published on September 28, 2026, reports that DBI for Perl versions before 1.654 incorrectly treats numeric values as strings in sql_type_cast_svpv.
* [Apache Karaf: JMX authorization flaw fixed in version 4.4.12](https://ai.exponencialadm.net/okf/en/cyber/apache-karaf-bypass-em-operacoes-jmx-2fc5b3.md) - A security notice published on September 28, 2026 reports that Apache Karaf versions before 4.4.12 allow authorization controls to be bypassed in JMX MBean lifecycle operations.
* [CVE-2026-91085: Apache Karaf ACL flaw](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-91085-falha-de-acl-ba6154.md) - A September 28, 2026 advisory reports privilege escalation to administrator in Apache Karaf versions before 4.4.12, due to a missing ACL rule for config:install.
* [Agencies warn of Citrix NetScaler flaws](https://ai.exponencialadm.net/okf/en/cyber/alerta-falhas-zero-day-exploradas-no-b8f3b5.md) - Authorities in the Netherlands, the United States and the United Kingdom confirmed vulnerabilities in NetScaler Gateway; Citrix confirmed eight flaws.
* [Apache Karaf: missing ACL rule may enable command execution](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-91048-falha-no-apache-62e545.md) - A notice published on September 28, 2026 reports that Apache Karaf versions before 4.4.12 may let authenticated sessions run jdbc:* commands without the expected authorization, with a possible path to remote code execution.
* [CVE-2026-91012: Apache Karaf flaw may elevate privileges](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-91012-falha-no-apache-b59db3.md) - A notice published on September 28, 2026 reports a path traversal flaw in Apache Karaf configuration services before version 4.4.12, with possible privilege escalation.
* [GNU C Library warns of out-of-bounds read on Power8](https://ai.exponencialadm.net/okf/en/cyber/aviso-da-gnu-c-library-atualizado-325413.md) - A notice published on September 28, 2026 describes a possible one-byte out-of-bounds read in Power8-optimized strncasecmp in GNU C Library 2.24 and later.
* [Undefined behavior in C and memory safety](https://ai.exponencialadm.net/okf/en/cyber/comportamento-indefinido-em-c-e-seguranca-5ff24e.md) - A Kernel Recipes presentation discusses undefined behavior in C and whether the language could become memory-safe.
* [USN-8839-1: Atril vulnerabilities](https://ai.exponencialadm.net/okf/en/cyber/falhas-no-atril-podem-executar-codigo-b1f8b9.md) - A security notice published on September 28, 2026 reports Atril flaws, including possible code execution when opening crafted PDFs. Two other flaws affect Ubuntu 16.04 LTS only.
* [Netherlands arrest linked to ShinyHunters investigation](https://ai.exponencialadm.net/okf/en/cyber/prisao-na-holanda-em-investigacao-sobre-e7c40d.md) - A report published on September 28, 2026 says Dutch authorities arrested a 24-year-old man suspected of assisting ShinyHunters in data theft and extortion. It also describes prior convictions and attacks attributed to remaining group members after the arrest.
* [Linux security updates across multiple distributions](https://ai.exponencialadm.net/okf/en/cyber/atualizacoes-linux-reforcam-seguranca-de-pacotes-fb6bb2.md) - A September 28, 2026 bulletin, translated from content in the LWN feed, lists security updates for packages from AlmaLinux, Debian, Fedora, Mageia, Oracle, SUSE, and Ubuntu.
* [USN-8838-1: catdoc flaws may allow code execution](https://ai.exponencialadm.net/okf/en/cyber/falhas-no-catdoc-podem-afetar-documentos-69039e.md) - A security notice published on September 28, 2026 reports three integer overflow or underflow flaws in catdoc. Malformed files could cause the program to fail or execute arbitrary code.
* [Flatpak 1.18.4 fixes security vulnerabilities](https://ai.exponencialadm.net/okf/en/cyber/flatpak-1-18-4-corrige-vulnerabilidades-22dd2e.md) - A notice published on September 28, 2026 says Flatpak 1.18.4 fixes several vulnerabilities and considers all earlier versions vulnerable.
* [USN-8837-1: pdfminer PDF-processing vulnerabilities](https://ai.exponencialadm.net/okf/en/cyber/usn-8837-1-falhas-no-processamento-877c78.md) - A security notice published on September 28, 2026 says specially crafted PDFs may exploit pdfminer flaws and possibly allow arbitrary code execution.
* [USN-8835-1: Emacs SVG handling vulnerability](https://ai.exponencialadm.net/okf/en/cyber/emacs-imagens-svg-podem-causar-falhas-e6dd35.md) - A security notice published on September 28, 2026 reports that specially crafted SVG images may cause memory corruption in Emacs, potentially leading to a crash, denial of service, or disclosure of information.
* [USN-8832-1: Booth authentication flaw](https://ai.exponencialadm.net/okf/en/cyber/falha-no-booth-pode-permitir-bypass-8d0c03.md) - A security notice published on September 28, 2026 reports that incorrect validation of message authentication codes in Booth could let a remote attacker bypass authentication.
* [USN-8830-1: three vulnerabilities in phpseclib](https://ai.exponencialadm.net/okf/en/cyber/usn-8830-1-alerta-para-tres-b90f9d.md) - A security notice published on September 28, 2026 lists three phpseclib flaws: two may expose information and one may cause denial of service.
* [Threat intelligence bulletin for September 28, 2026](https://ai.exponencialadm.net/okf/en/cyber/boletim-de-ameacas-de-28-de-569550.md) - The bulletin covers cybersecurity incidents, AI-related threats and actively exploited vulnerabilities. The available excerpt also describes intrusions and thefts, but ends before completing its section on fixes.
* [USN-8829-1: Plasma Workspace flaw](https://ai.exponencialadm.net/okf/en/cyber/falha-de-autenticacao-no-plasma-workspace-796ca5.md) - A security notice published on September 28, 2026 reports an authentication flaw in the Plasma Workspace session manager that could let a local attacker execute code as another user.
* [USN-8828-1: dracut vulnerabilities](https://ai.exponencialadm.net/okf/en/cyber/usn-8828-1-falhas-no-dracut-d46f1d.md) - A security notice published on September 28, 2026 describes four dracut vulnerabilities, including local information exposure and possible root code execution through manipulated DHCP data.
* [Cyberattack on Polish medical vendor exposes patient data](https://ai.exponencialadm.net/okf/en/cyber/ataque-a-fornecedor-polones-expoe-dados-255fae.md) - A report published on September 28, 2026, says hackers stole personal data from a Polish healthcare software vendor, in another recent attack on the country’s medical sector.
* [USN-8827-1: Erlang security vulnerabilities](https://ai.exponencialadm.net/okf/en/cyber/usn-8827-1-falhas-de-seguranca-0f9bd8.md) - An Ubuntu security notice published on September 28, 2026 reports Erlang flaws that may enable denial of service, code execution, TLS interception, request smuggling, and authentication bypass.
* [CVE-2026-85499: BanyanDB proxy flaw](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-85499-restricao-de-leitura-33d4ea.md) - A notice published on September 28, 2026 describes a low-severity authorization flaw in Apache SkyWalking BanyanDB 0.11.0. In a non-default configuration, a read-only Canopy user can send non-read requests through the monitoring proxy.
* [Former U.S. soldier gets nearly six years for telecom company intrusions](https://ai.exponencialadm.net/okf/en/cyber/ex-soldado-dos-eua-e-condenado-aba6dd.md) - Published on September 28, 2026, the report says a former U.S. Army soldier was sentenced to more than five years in prison after admitting to breaking into several telecommunications companies and leaking confidential records.
* [USN-8836-1: FreeRDP vulnerabilities](https://ai.exponencialadm.net/okf/en/cyber/freerdp-atualize-o-ubuntu-contra-vulnerabilidades-86aa87.md) - A notice published on September 28, 2026 reports FreeRDP flaws that could expose information, cause service disruption, or allow code execution. Apply the Ubuntu update.
* [NCSC urges mitigation of Citrix NetScaler vulnerabilities](https://ai.exponencialadm.net/okf/en/cyber/citrix-netscaler-alerta-para-duas-falhas-3437c0.md) - In a September 28, 2026 publication, the UK NCSC urged organizations to promptly mitigate vulnerabilities affecting Citrix NetScaler ADC and Gateway. The notice said two were being actively exploited.
* [Report flags path truncation in crontab](https://ai.exponencialadm.net/okf/en/cyber/relato-questiona-truncamento-de-caminhos-no-f6105e.md) - A message published on September 28, 2026 discusses a Debian report about truncation of file-path arguments with 100 or more characters. The available excerpt questions whether the effect is silent and notes that it may depend on whether the file exists.
* [CVE-2026-91006: command injection in Apache Karaf](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-91006-injecao-de-comandos-0155ab.md) - A September 28, 2026 notice reports a moderate-severity Apache Karaf vulnerability: unquoted javaOpts values may allow command injection when starting child instances.
* [CVE-2026-90979: LDAP injection flaw in Apache Karaf](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-90979-falha-de-filtro-e2a4f6.md) - A notice published on September 28, 2026 reports LDAP filter injection in Apache Karaf JAAS LDAP modules. Versions before 4.4.12 are affected; the notice rates severity as moderate.
* [CVE-2026-19444: kubectl cp risk on Windows](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-19444-risco-no-kubectl-d707e4.md) - A September 28, 2026, oss-sec feed post describes a medium-severity Kubernetes issue: a malicious tar in a container can cause kubectl cp to write files to arbitrary paths on Windows, within the local user's permissions.
* [Heat Revolution: heat has memory](https://ai.exponencialadm.net/okf/en/cyber/revolucao-do-calor-o-calor-tem-7be69d.md) - A text dated September 28, 2026, says scientific understanding of heat is undergoing a revolution, even though some phenomena may seem repetitive.
* [Nanowire LED promises less heat](https://ai.exponencialadm.net/okf/en/cyber/led-de-nanofios-promete-reduzir-o-c3ebeb.md) - A note published on September 28, 2026 describes a nanowire LED architecture intended to improve efficiency by avoiding a limitation of current technology. The text says it does not heat up because it emits all the light it produces.
* [Small farmers and food needs by 2050](https://ai.exponencialadm.net/okf/en/cyber/pequenos-agricultores-e-alimentacao-ate-2050-b26193.md) - The text says that half of the world's 475 million small farmers could meet humanity's additional food needs by 2050 and help restore biodiversity.
* [USN-8826-1: LXC vulnerabilities](https://ai.exponencialadm.net/okf/en/cyber/usn-8826-1-vulnerabilidades-no-lxc-b45e75.md) - A security notice published on September 28, 2026 reports two LXC flaws: possible exposure of sensitive information in specific Ubuntu versions and possible denial of service.
* [ISC Stormcast: September 28, 2026 episode](https://ai.exponencialadm.net/okf/en/cyber/isc-stormcast-episodio-de-28-de-9af3c9.md) - The archive records an ISC Stormcast episode published on September 28, 2026, but provides no information about the subjects covered.
* [USN-8825-1: Requests flaw](https://ai.exponencialadm.net/okf/en/cyber/usn-8825-1-falha-no-requests-a621a9.md) - A security notice published on September 28, 2026 reports that a flaw in Requests' generation of random paths for temporary files could allow arbitrary code execution.
* [Phishing: signals beyond quarantine](https://ai.exponencialadm.net/okf/en/cyber/phishing-sinais-alem-da-quarentena-03f9bb.md) - Published on September 28, 2026, the article describes an Elastic Security and Sublime Security integration that correlates email and endpoint signals and automates responses with human approval.
* [Kernel 7.3-rc5 released for testing](https://ai.exponencialadm.net/okf/en/cyber/kernel-7-3-rc5-e-liberado-2f4b3f.md) - Linux kernel pre-release 7.3-rc5 became available on September 27, 2026. The maintainer described the diffstat as large, but noted no specific pattern or particularly alarming issue.
* [Wireshark 4.6.9 fixes flaws and bugs](https://ai.exponencialadm.net/okf/en/cyber/wireshark-4-6-9-corrige-falhas-9c216b.md) - Wireshark version 4.6.9 fixes 19 vulnerabilities and 16 bugs, according to a notice published on September 27, 2026.
* [CISA warns of exploited Citrix NetScaler flaws](https://ai.exponencialadm.net/okf/en/cyber/cisa-alerta-sobre-falhas-exploradas-no-16a891.md) - A September 27, 2026 alert cites eight vulnerabilities in NetScaler ADC and Gateway. Two critical zero-days, CVE-2026-88771 and CVE-2026-88772, allow remote code execution and are under active exploitation.
* [CISA adds two Citrix NetScaler flaws to KEV catalog](https://ai.exponencialadm.net/okf/en/cyber/cisa-inclui-duas-falhas-do-citrix-d2deb1.md) - On September 27, 2026, CISA added two Citrix NetScaler vulnerabilities with evidence of active exploitation to its KEV catalog and urged organizations to prioritize risk-based remediation.
* [Libextractor and privileged processes: an open question](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-100310-alerta-sobre-o-456948.md) - A message published on September 26, 2026 questions whether GNU libextractor is suitable for use in setuid, setgid, or other privileged processes. The excerpt does not detail the flaw cited in the title; consult and verify the original discussion before drawing conclusions.
* [GDB 18.1 adds commands and support](https://ai.exponencialadm.net/okf/en/cyber/gdb-18-1-amplia-recursos-de-6998f5.md) - Released on September 26, 2026, version 18.1 of the GDB debugger adds subprocess environment commands, history saving, new targets, and updates to the Python API.
* [CVE-2026-95510: GNU Inetutils flaw](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-95510-falha-na-gnu-ce2506.md) - A notice published on September 25, 2026 reports possible service disruption involving an uninitialized sigaction structure; the possibility of code execution remains unclear.
* [CVE-2026-100310: GNU libextractor flaw](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-100310-risco-no-gnu-e8b10c.md) - A notice published on September 25, 2026 reports that GNU libextractor versions before 1.16 may allow local privilege escalation through untrusted plugin search paths.
* [CVE-2026-91206: XSS in Apache Roller 6.1.5](https://ai.exponencialadm.net/okf/en/cyber/apache-roller-6-1-5-xss-7cee9e.md) - A September 25, 2026 advisory reports a moderate reflected XSS issue in Apache Roller 6.1.5’s optional LDAP comment authenticator.
* [CVE-2026-91204: XSS risk in Apache Roller](https://ai.exponencialadm.net/okf/en/cyber/apache-roller-risco-de-link-javascript-f10757.md) - A bulletin describes a moderate flaw in Apache Roller 6.1.5: comments can store javascript: links that may run scripts in visitors’ browsers.
* [Apache Roller 6.1.5: stored XSS in comment moderation](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-86507-xss-armazenado-no-f2cdaa.md) - A security bulletin published on September 25, 2026, reports a stored XSS flaw in Apache Roller 6.1.5, triggered when a moderator or administrator views the comment moderation page.
* [Telecom extortion leads to 70-month sentence](https://ai.exponencialadm.net/okf/en/cyber/extorsao-contra-operadoras-termina-em-condenacao-4c0c58.md) - A report published on September 25, 2026 says a U.S. soldier received a 70-month prison sentence for intrusions, theft of call and message metadata, and extortion targeting telecom companies.
* [Apache Roller 6.1.5: Trackback-stored XSS alert](https://ai.exponencialadm.net/okf/en/cyber/apache-roller-6-1-5-xss-c3f4d0.md) - A notice published on September 25, 2026 describes stored XSS in Apache Roller 6.1.5. The risk depends on published entries accepting comments and Trackbacks; the stated severity is moderate, with a CVSS 3.1 score of 6.1.
* [CVE-2026-82387: Stored XSS in Apache Roller](https://ai.exponencialadm.net/okf/en/cyber/apache-roller-6-1-5-xss-eb452b.md) - A notice published on September 25, 2026 reports stored XSS in Apache Roller 6.1.5: users permitted to upload media may store active content because the system trusts the content type supplied with the upload.
* [CVE-2026-82386: Apache Roller OPML import flaw](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-82386-risco-na-importacao-e47110.md) - A notice published on September 25, 2026 reports a vulnerability in Apache Roller 6.1.5: an administrator could exploit OPML import to read files accessible to the process and reach internal network addresses.
* [Apache Roller 6.1.5: flaw may expose classpath files](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-82385-risco-de-leitura-eefc38.md) - A notice published on September 25, 2026 says a weblog administrator can use an include directive in a Velocity template to read classpath files, including configurations containing secrets.
* [Apache Roller 6.1.5: critical deserialization alert](https://ai.exponencialadm.net/okf/en/cyber/apache-roller-falha-critica-no-endpoint-20bec5.md) - A notice published on September 25, 2026 reports unauthenticated deserialization in Apache Roller 6.1.5's XML-RPC endpoint and rates the flaw critical, with a CVSS 3.1 score of 9.8.
* [CVE-2026-82383: Apache Roller 6.1.5 flaw](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-82383-configuracao-anonima-no-b39b99.md) - A notice published on September 25, 2026 describes an anonymous configuration action that can persistently change the homepage weblog selection in Apache Roller 6.1.5.
* [CVE-2026-82382: XSS in Apache Roller](https://ai.exponencialadm.net/okf/en/cyber/apache-roller-xss-refletido-no-parametro-f42109.md) - A bulletin published on September 25, 2026 reports reflected XSS in Apache Roller 6.1.5, involving a manipulated directory parameter.
* [CVE-2026-82381: Stored XSS in Apache Roller](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-82381-xss-armazenado-no-a9947d.md) - An advisory published on September 25, 2026 describes stored XSS in Apache Roller 6.1.5, rated important with a CVSS 3.1 score of 5.4 (medium).
* [CVE-2026-82380: CSRF flaw in Apache Roller](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-82380-falha-de-csrf-005816.md) - An alert published on September 25, 2026, reports that Apache Roller 6.1.5 accepts requests without the required salt token, enabling actions on behalf of logged-in users.
* [Apache Roller: WSSE header can be replayed](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-82379-risco-de-reutilizacao-bc39ec.md) - A September 25, 2026 security notice says a captured valid WSSE digest header can be replayed to gain the victim’s AtomPub authority in Apache Roller 6.1.5.
* [Kiteworks advises pause after threat alert](https://ai.exponencialadm.net/okf/en/cyber/kiteworks-orienta-clientes-a-interromper-uso-63e005.md) - On September 25, 2026, Kiteworks said it had received intelligence from federal authorities about a possible attack targeting some systems used by customers and advised them to stop using the platform.
* [Labcorp to change security practices after settlement](https://ai.exponencialadm.net/okf/en/cyber/labcorp-anuncia-mudancas-de-seguranca-e-20d8a6.md) - A September 25, 2026 news item says Labcorp will overhaul data security practices and pay a $2.3 million fine. The measures cover supplier incident response, data sharing limits, and risk management.
* [Input Leap through 3.0.3: flaw allows escalation to SYSTEM](https://ai.exponencialadm.net/okf/en/cyber/input-leap-ate-3-0-3-c51137.md) - NotCVE-2026-0015 reports that an unauthenticated critical function in the input-leapd daemon may let a low-privilege local Windows user run commands as NT AUTHORITY\SYSTEM.
* [Note on XSS in ansi2html 1.9.4](https://ai.exponencialadm.net/okf/en/cyber/discussao-sobre-possivel-xss-no-ansi2html-4c4ab8.md) - A September 25, 2026 post points to an oss-sec discussion about an XSS vulnerability in ansi2html 1.9.4 and mentions a related Hacker News discussion.
* [KDE receives nearly €1.3 million for enterprise features](https://ai.exponencialadm.net/okf/en/cyber/kde-recebera-quase-1-3-milhao-40d0e5.md) - The Sovereign Tech Agency will invest nearly €1.3 million in KDE through 2027. At Akademy 2026 in Graz, contributors described how they secured the funding and what they hope it will support.
* [CEO accuses North Korea of stealing US$387 million](https://ai.exponencialadm.net/okf/en/cyber/ceo-acusa-coreia-do-norte-de-7780fb.md) - In a news report published on September 25, 2026, Bitget’s CEO attributed a US$387 million theft to North Korea and said a protection fund holding more than US$464 million would cover the losses.
* [Kernel: stable versions 7.2.8 and 6.18.54 released](https://ai.exponencialadm.net/okf/en/cyber/kernel-versoes-7-2-8-e-09d1bc.md) - On September 25, 2026, Greg Kroah-Hartman announced two stable Linux kernel releases, with fixes in different parts of the code and a recommendation to update.
* [Summary of the 2026 Git Contributors' Summit](https://ai.exponencialadm.net/okf/en/cyber/git-contributors-summit-2026-temas-em-2e80bd.md) - Published on September 25, 2026, this summary covers discussions at the Git Contributors' Summit on Git 3.0, security, documentation, pluggable object databases, and LLM use.
* [Cyberattack affects Dyfed-Powys police systems in Wales](https://ai.exponencialadm.net/okf/en/cyber/ataque-afeta-sistemas-da-policia-dyfed-8f6f77.md) - On September 25, 2026, the force said a cyberattack disrupted some non-emergency systems and may have compromised staff information.
* [Friday security updates: Linux packages](https://ai.exponencialadm.net/okf/en/cyber/distribuicoes-linux-publicam-atualizacoes-de-seguranca-e8825e.md) - On September 25, 2026, the LWN feed listed security updates from several Linux distributions, covering kernels, libraries, browsers, and tools. The note does not detail vulnerabilities or fixed versions.
* [CISA adds two exploited flaws to the KEV catalog](https://ai.exponencialadm.net/okf/en/cyber/cisa-inclui-falhas-no-sharepoint-e-ffb684.md) - On September 25, 2026, CISA reported adding flaws in Microsoft SharePoint and MikroTik RouterOS to the KEV catalog, citing evidence of active exploitation.
* [CISA adds WordPress flaw to KEV catalog](https://ai.exponencialadm.net/okf/en/cyber/cisa-registra-falha-explorada-no-nucleo-02d71c.md) - On September 25, 2026, CISA added CVE-2026-87902 to the KEV catalog, citing evidence of active exploitation. The agency encourages organizations to prioritize known vulnerabilities by risk.
* [Questions over access to Australia's Medicare portal](https://ai.exponencialadm.net/okf/en/cyber/duvidas-sobre-suposta-invasao-ao-portal-318bfa.md) - A report published on September 25, 2026, describes questions about a claim that an AI agent broke into an Australian health portal.
* [USN-8729-5: Linux kernel fixes for AWS FIPS](https://ai.exponencialadm.net/okf/en/cyber/usn-8729-5-falhas-no-kernel-6f6b79.md) - A security notice published on September 25, 2026 reports flaws across numerous Linux kernel subsystems and says an update fixes them. Consult the original Ubuntu Security notice to confirm details that apply to your system.
* [USN-8819-2: Linux kernel vulnerabilities fixed](https://ai.exponencialadm.net/okf/en/cyber/atualizacao-corrige-falhas-no-kernel-linux-b579cc.md) - A bulletin dated September 25, 2026 reports an update addressing flaws in the Linux kernel’s NFS, IPv6 networking, and Netfilter subsystems.
* [USN-8818-2: Linux kernel update](https://ai.exponencialadm.net/okf/en/cyber/atualizacao-corrige-vulnerabilidades-no-kernel-linux-d6a9f7.md) - A security notice published on September 25, 2026 reports flaws across several Linux kernel subsystems, including a risk involving some Arm processors. The update addresses the reported issues.
* [USN-8730-6: Linux kernel vulnerability](https://ai.exponencialadm.net/okf/en/cyber/atualizacao-do-ubuntu-corrige-falha-no-99b844.md) - A Ubuntu notice published on September 25, 2026, reports a Linux kernel vulnerability affecting the IPv6 networking and Netfilter subsystems.
* [TEEs and MPC: hardware alone is not enough](https://ai.exponencialadm.net/okf/en/cyber/tees-podem-enfraquecer-a-seguranca-do-4b07d3.md) - Published on September 25, 2026, the article examines how trusted execution environments can reinforce MPC protocols—and how rollback, incomplete attestation, and centralized trust can introduce risks.
* [Muons raise a question about gravity’s universality](https://ai.exponencialadm.net/okf/en/cyber/muons-e-gravidade-uma-pergunta-em-f7c4fc.md) - Published on September 25, 2026, the item asks whether gravity acts equally on all particles. The text provides no further details or findings.
* [Fungus-inspired computing: what the report says](https://ai.exponencialadm.net/okf/en/cyber/computacao-inspirada-em-fungos-busca-eficiencia-95cb31.md) - Published on September 25, 2026, the item reports researchers' interest in fungus-inspired computational paradigms for handling certain intractable problems more efficiently. It gives no specific method or results.
* [Input Leap 3.0.3: file-transfer flaw](https://ai.exponencialadm.net/okf/en/cyber/input-leap-falha-permite-gravar-arquivos-baf848.md) - A notice published on September 25, 2026 describes a path-traversal flaw in Input Leap 3.0.3’s drag-and-drop feature. A connected device may write files outside the configured receiving directory.
* [USN-8824-1: validation flaw in libpcap](https://ai.exponencialadm.net/okf/en/cyber/usn-8824-1-falha-de-validacao-860ebb.md) - A security notice published on September 25, 2026 reports that libpcap may fail to validate certain BPF instructions, potentially enabling out-of-bounds memory operations.
* [Analysis of Macfinger ClickFix malware](https://ai.exponencialadm.net/okf/en/cyber/analise-do-malware-macfinger-clickfix-0acae9.md) - An item published on September 25, 2026, about an analysis of malware associated with the Macfinger ClickFix campaign. The supplied text contains only the introduction.
* [ISC Stormcast: episode dated September 25, 2026](https://ai.exponencialadm.net/okf/en/cyber/stormcast-do-isc-episodio-anunciado-para-ac191d.md) - The listing announces an ISC Stormcast episode for September 25, 2026. It gives no topics, participants, or findings; the podcast is referenced only in the title.
* [CVE-2026-95811: flaw in location rules](https://ai.exponencialadm.net/okf/en/cyber/falha-no-lemonldap-ng-handler-permite-b0c192.md) - A notice published on September 24, 2026 reports that vulnerable versions of Lemonldap::NG::Handler for Perl allow location rules to be bypassed using equivalent path spellings.
* [CVE-2026-92289: PKCE bypass in Lemonldap::NG::Portal](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-92289-contorno-de-pkce-8c4832.md) - A notice dated September 24, 2026 reports that, in “PKCE or secret” mode, missing client-secret verification may allow PKCE to be bypassed for public clients.
* [CVE-2026-92288: OAuth2 introspection flaw in Lemonldap::NG::Portal](https://ai.exponencialadm.net/okf/en/cyber/falha-no-lemonldap-ng-expoe-introspeccao-c0f36c.md) - A security notice says OAuth2 tokens belonging to public relying parties may be inspected without authentication. The issue affects specified Lemonldap::NG::Portal versions; consult the original notice to confirm scope and recommended action.
* [CVE-2026-92609: session risk in Apache Qpid Broker-J](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-92609-no-apache-qpid-a015b8.md) - A notice published on September 24, 2026 describes an HTTP management authentication session-fixation flaw in Apache Qpid Broker-J through version 10.1.0. Reuse of the identifier may enable unauthorized access.
* [CVE-2026-92608 in Apache Qpid Broker-J](https://ai.exponencialadm.net/okf/en/cyber/falha-no-apache-qpid-broker-j-f9c6bd.md) - A notice published on September 24, 2026 reports a moderate-severity flaw that may interrupt message delivery to AMQP 0-10 consumers. The affected component is listed through version 10.1.0.
* [CVE-2026-92573: memory exhaustion risk in Apache Qpid Broker-J](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-92573-risco-de-memoria-ce7103.md) - A notice published on September 24, 2026 rates as important a flaw that may exhaust Apache Qpid Broker-J memory when processing compressed data.
* [CVE-2026-92564: denial-of-service risk in Qpid Broker-J](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-92564-falha-de-pilha-af6765.md) - A notice published on September 24, 2026 reports that excessively nested AMQP field-table types can cause a stack overflow before authentication in Apache Qpid Broker-J.
* [CVE-2026-92560: denial-of-service flaw in Apache Qpid Broker-J](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-92560-risco-de-negacao-bba376.md) - An alert published on September 24, 2026 describes excessive allocation before authentication in Apache Qpid Broker-J’s AMQP 0-10 decoder. Versions through 10.1.0 are affected; the stated recommendation is to update to 10.1.1.
* [CVE-2026-92550: flaw in Qpid AMQP decoder](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-92550-risco-de-negacao-3be2b8.md) - A notice published on September 24, 2026 reports excessive allocation before authentication in Apache Qpid Broker-J through version 10.1.0. The stated fix is to upgrade to version 10.1.1.
* [XSS in ansi2html versions before 1.9.4](https://ai.exponencialadm.net/okf/en/cyber/xss-no-ansi2html-anterior-a-versao-3c64ae.md) - A report published on September 24, 2026 describes how crafted build-log lines could be converted to HTML and enable XSS for viewers using ansi2html before version 1.9.4.
* [CVE-2026-97230: Alert on Perl module 1.00](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-97230-alerta-sobre-modulo-6c7cb2.md) - Published on September 24, 2026, the alert says version 1.00 of IO::Socket::SSL::SelfCertificate contains malware that runs Python code fetched from an obfuscated URL. The news item is an automatic translation of an oss-sec feed notice.
* [CVE-2026-85491 notice: metadata correction](https://ai.exponencialadm.net/okf/en/cyber/correcao-de-metadados-no-aviso-cve-096dcf.md) - A message published on September 24, 2026 corrected the VCS repository listing in the Catalyst::Seal notice: the earlier repository reference came from incorrect module metadata.
* [CVE-2026-85491: authorization flaw in Catalyst::Seal](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-85491-falha-em-verificacao-5bcfbb.md) - A notice published on September 24, 2026 says versions of Catalyst-Seal earlier than 0.03 may let one request affect another request’s authorization or routing.
* [CVE-2026-97636: Airflow Vault team-scope bypass](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-97636-falha-de-escopo-a92935.md) - A notice published on September 24, 2026 reports a moderate-severity flaw in the Apache Airflow HashiCorp provider: a user-controlled variable key may bypass team scope and expose another team’s secret.
* [Employees who use their own product can spot improvements](https://ai.exponencialadm.net/okf/en/cyber/funcionarios-como-usuarios-do-produto-1cfe5f.md) - In a piece published in the 00f.net feed on September 24, 2026, the author argues that employees who choose to use their company's product for personal projects can notice problems, suggest improvements, and explain its value from experience.
* [DOJ accuses digital forensics firm of concealing Russia link](https://ai.exponencialadm.net/okf/en/cyber/doj-alega-ocultacao-de-vinculos-russos-f47129.md) - A news report published on September 24, 2026, says two executives were arrested on allegations that they lied about the Russian manufacture of data-extraction technology sold to several US agencies.
* [U.S. bill proposes voluntary cybersecurity rules for telecommunications](https://ai.exponencialadm.net/okf/en/cyber/projeto-propoe-regras-voluntarias-de-ciberseguranca-56b26e.md) - Published on September 24, 2026, the report says two U.S. senators introduced a proposal for voluntary rules for the telecommunications sector after attacks attributed to Salt Typhoon.
* [USN-8820-1: update fixes curl vulnerabilities](https://ai.exponencialadm.net/okf/en/cyber/usn-8820-1-atualizacao-corrige-falhas-dbb371.md) - A security notice published on September 24, 2026, reports curl flaws that may affect validation, cookies, credentials, availability, and code execution in specific Ubuntu versions.
* [USN-8821-1: OpenStack Swift flaw](https://ai.exponencialadm.net/okf/en/cyber/falha-no-middleware-s3api-do-openstack-209113.md) - A security notice published on September 24, 2026 reports that truncated aws-chunked PUT request bodies may cause OpenStack Swift's s3api middleware to consume excessive resources and trigger denial of service.
* [Rydox operator pleads guilty after extradition](https://ai.exponencialadm.net/okf/en/cyber/rydox-operador-se-declara-culpado-apos-b98404.md) - A September 24, 2026 news report describes the Rydox illicit-market operator’s guilty plea and summarizes allegations involving the sale of stolen data and illegal access.
* [F-Droid 2.0 refreshes the Android experience](https://ai.exponencialadm.net/okf/en/cyber/f-droid-2-0-renova-a-a22f33.md) - Released on September 24, 2026, F-Droid 2.0 overhauls the official app with improved search, more useful categories, and simpler app discovery and installation.
* [Trust and the tempting consultancy offer](https://ai.exponencialadm.net/okf/en/cyber/ofertas-falsas-de-consultoria-exploram-confianca-e3854a.md) - A September 24, 2026 bulletin warns that fake consultancy offers can probe professionals and seek non-public information or abuse of trusted access.
* [Research warns of Linux file notification attacks](https://ai.exponencialadm.net/okf/en/cyber/pesquisa-aponta-riscos-em-notificacoes-de-493dc6.md) - Published on September 24, 2026, this report summarizes research into file notifications that may expose user activity on Android, Linux, macOS, and Windows. On Linux, it describes directory monitoring and a clickjacking attack affecting KDE.
* [OSSA-2026-042: Zaqar authentication bypass alert](https://ai.exponencialadm.net/okf/en/cyber/openstack-zaqar-falha-de-autenticacao-com-b04ff1.md) - A notice published on September 24, 2026 describes CVE-2026-97404: an empty URL-Signature header in OpenStack Zaqar can bypass authentication. The available text is incomplete.
* [OpenStack Swift advisory reports cross-container exposure](https://ai.exponencialadm.net/okf/en/cyber/openstack-swift-alerta-sobre-possivel-exposicao-f2b373.md) - Advisory OSSA-2026-041, published on September 24, 2026, concerns CVE-2026-97149 and possible information disclosure between containers via Swift tempurl. The supplied description is incomplete.
* [CVE-2026-96512: TZ affects sudo time rules](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-96512-tz-pode-afetar-7eb54f.md) - An alert published on September 24, 2026 reports that the TZ variable can still alter NOTBEFORE/NOTAFTER checks in sudoers rules. The available excerpt does not state the full impact.
* [DolphinScheduler: cross-project authorization flaw](https://ai.exponencialadm.net/okf/en/cyber/cve-2026-57590-falha-de-autorizacao-1be851.md) - A notice published on September 24, 2026 reports an authorization flaw in Apache DolphinScheduler task-group APIs. Versions earlier than 3.4.3 are affected; upgrading is recommended.
* [USN-8819-1: Linux kernel fixes](https://ai.exponencialadm.net/okf/en/cyber/usn-8819-1-corrige-falhas-no-f8f251.md) - A security notice published on September 24, 2026 reports flaws in the Linux kernel's NFS server, IPv6 networking, and Netfilter, addressed by an update.
* [USN-8818-1: update fixes Linux kernel vulnerabilities](https://ai.exponencialadm.net/okf/en/cyber/usn-8818-1-falhas-corrigidas-no-6e2feb.md) - A security bulletin published on September 24, 2026 reports fixes for vulnerabilities across multiple Linux kernel subsystems, including an Arm processor flaw that could allow memory protections to be bypassed or privileges to be raised.
* [USN-8817-1: update fixes Linux kernel vulnerabilities](https://ai.exponencialadm.net/okf/en/cyber/usn-8817-1-atualizacao-corrige-falhas-0954c2.md) - An Ubuntu security notice published on September 24, 2026 describes vulnerabilities fixed in several Linux kernel subsystems. One flaw could let a local attacker bypass memory protections or gain privileges.
* [USN-8816-1: Linux kernel flaws corrected](https://ai.exponencialadm.net/okf/en/cyber/usn-8816-1-atualizacao-corrige-falhas-6f436f.md) - Published on September 24, 2026, notice USN-8816-1 reports numerous Linux kernel vulnerabilities and an update addressing flaws across architectures, drivers, file systems, and network subsystems.
* [USN-8815-1: security flaws in libass](https://ai.exponencialadm.net/okf/en/cyber/usn-8815-1-falhas-no-libass-71a14c.md) - A security notice published on September 24, 2026 reports libass flaws that can cause denial of service or, in some cases, code execution when processing specific subtitles.
* [RustConf 2026: decoding radio with Rust](https://ai.exponencialadm.net/okf/en/cyber/ouvindo-radio-com-rust-4cf066.md) - A RustConf 2026 presentation showed how accessible hardware and Rust software can receive and decode radio transmissions, from AM and FM to aircraft transponder signals.
* [The Kernel Report returns with a 2026 edition](https://ai.exponencialadm.net/okf/en/cyber/the-kernel-report-edicao-de-2026-ded4d4.md) - After a two-year pause, Jonathan Corbet presented an updated report on the Linux kernel community at the Kernel Recipes conference.
* [Drone attack disrupts Kyiv internet providers](https://ai.exponencialadm.net/okf/en/cyber/ataques-afetam-conectividade-em-kyiv-34e9cb.md) - On September 24, 2026, a report attributed to NetBlocks said at least four internet providers serving Kyiv and other parts of Ukraine experienced partial connectivity losses after a drone attack.

# Follow

* [RSS](https://ai.exponencialadm.net/en/cyber/feed.xml) - Cyber
* [HTML](https://ai.exponencialadm.net/en/cyber/) - Cyber