news
Security Leftovers
-
Security Week ☛ Sysdig Adds Runtime Security and Governance for Hey Hi (AI) Agents
Sysdig’s platform uses runtime visibility to track Hey Hi (AI) agent actions and block risky behavior before it reaches production systems.
-
Security Week ☛ Chrome 157 Rolls Out With 213 Security Fixes, Seven Rated Critical
The browser update resolves dozens of memory safety bugs and incorrect/missing authorization issues.
-
Qt ☛ Security advisory: CVE-2026-110944: Resource exhaustion vulnerability in HTTP request handling impacts Qt HTTP Server (QHttpServer)
Resource exhaustion vulnerability in the HTTP request handling of the QHttpServer component of Qt HTTP Server has been discovered and has been assigned the CVE id CVE-2026-110944.
-
Security Week ☛ Malicious cPGuard Updates Served in OpsShield Supply Chain Attack
Using compromised credentials, the attackers accessed OpsShield’s update servers and poisoned multiple cPGuard versions.
-
SANS ☛ The Classics Return: Vulnerable E-Mail Scripts, (Wed, Nov 4th)
One of the early web application vulnerabilities I remember was CVE-2000-0411 [CVE]. This was a simple vulnerability in a CGI-bin script used to send e-mail. The vulnerability was pretty straightforward: Adding additional parameters to the URL leaked environment variables. Other vulnerabilities allowed setting the "To" address and were heavily abused by spammers. And if parameters were passed directly to the sendmail binary, similar vulnerabilities could allow arbitrary code execution.
-
Security Week ☛ Barracuda ESG Authentication Bypass Flaw Opens Path to Root
An authentication bypass and a command injection flaw can be chained for root access on Barracuda’s Email Security Gateway appliances.
-
LWN ☛ Security updates for Wednesday
Security updates have been issued by AlmaLinux (cockpit, dpdk, fence-agents, firefox, freerdp, gimp, opentelemetry-collector, python-dns, qemu-kvm, and raptor2), Debian (apt and squid), Fedora (ags, apptainer, chromium, fractal, mingw-harfbuzz, mingw-qt5-qtwebkit, mingw-qt6-qt5compat, python-mistune, python3-docs, python3.14, python3.9, rubygem-gist, rust-app-store-connect, rust-qemu-rdp, rust-redlib, and selenium-manager), Mageia (java-latest-openjdk, java-17-openjdk, java-21-openjdk, timezone), Oracle (.NET 10.0, .NET 8.0, .NET 9.0, bind, bind9.16, cockpit, firefox, freerdp, gcc, ghostscript, glibc, grafana, java-17-openjdk, java-21-openjdk, kernel, kernel-uek, libXi, pipewire, pki-deps:10.6, podman, python-jwt, python-pillow, python-pyasn1, qt5-qtbase, thunderbird, tomcat, util-linux, and wireshark), Red Hat (dnsmasq, fence-agents, freerdp, pki-core:10.6, and thunderbird), SUSE (amazon-ssm-agent, aom-tools, apache2, brotli, cadvisor, chromium, cups, curl, distribution-registry, eog, gh, go-containerregistry, google-guest-agent, gvfs, haproxy, hauler, helm3, kernel, libBasicUsageEnvironment2, libcdio, libinstpatch-1_0-2, libosmocore, libreoffice, libX11, nodejs22, nvidia-open-driver-G06-signed, openssh, parted, perl-DBI, perl-mime-tools, python-pypdf, rootlesskit, rqlite, rsyslog, sssd, tomcat10, warewulf4, and xen), and Ubuntu (apt-cacher, bind9, bitlbee, cakephp, deluge, dmitry, e17, feh, gnome-shell, golang-github-gin-contrib-cors, gvfs, haproxy, jabberd2, libmspack, libnet-easytcp-perl, libphp-swiftmailer, libsoup2.4, libsoup3, libuser, pcre2, rear, ruby-rack, ruby-sprockets, rxvt-unicode, shapelib, sogo, vips, and yaws).
-
Qt ☛ Security advisory: CVE-2026-107479: Integer truncation vulnerability in QTextCodec conversion functions impacts Qt Framework [Ed: Implementing slop in Qt stuff causes security problems]
An integer truncation vulnerability in the QTextCodec conversion functions of the Qt 5 Core Compatibility Hey Hi (AI) module of the Qt Framework has been discovered and has been assigned the CVE id CVE-2026-107479.
-
Pen Test Partners ☛ The problem with shared Wi-Fi passwords at work
TL;DR Why WPA2-PSK is a corporate liability
-
Security Week ☛ Canadian Extradited to US Over Cryptomining Hacks on University Supercomputers
A federal grand jury indicted two Canadian men for hijacking university supercomputers to secretly mine Electroneum cryptocurrency.
-
Security Week ☛ AI-Linked Breaches Mount as WorkOS, Northflank, Trigger.dev Disclose Hacks
Hackers have been harvesting Hey Hi (AI) access tokens and have been using AI-assisted offensive tools to automate attacks.
-
Hacker News ☛ Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root
A flaw in APT, the package manager for Debian and Ubuntu, allows an attacker who can modify package downloads to swap a checked package for their own.
-
Windows TCO / Windows Bot Nets
-
LRT ☛ Cyberattacks on supermarket refrigeration systems spare Lithuania, retailers say
A series of cyberattacks targeting supermarket refrigeration systems across Europe has not affected stores in Lithuania, local retailers say, although cybersecurity experts warn that poorly protected remote access to equipment could leave businesses vulnerable.
-
France24 ☛ French blood banks foil new cyberattack targeting refrigerators
A cyberattack in France targeted three cold stores containing donated blood samples and plasma, authorities said on Wednesday. The incident – which was unsuccessful due to the facilities' alarm systems – is the latest in a series of suspected attacks that have targeted refrigerators in European supermarkets, as well as French cooperative bank, Credit Mutuel Arkea, which was also affected Wednesday.
-
Silicon Angle ☛ French blood banks hacked amid ‘deeply concerning’ wave of fridge and freezer cyberattacks in Europe
In a recent spate of cyberattacks in Europe against fridges and freezers, the latest assault hit France’s national blood service, where hackers gained control of cold storage systems at medical facilities and turned up the temperature.
-