We recently announced the launch of Zephyr 26.04 LTS, bringing up to 15 years of security maintenance per LTS and

Rails, a software framework used to build websites, has fixed flaws that could let an uploaded file do more than

A flaw in APT, the tool that installs software on Debian and Ubuntu, could let an attacker replace a package

Two flaws in the Xen hypervisor can let a malicious virtual machine reach memory that belongs to other parts of

A WordPress vulnerability is being used in attacks that target the moment a site updates its main software.LinuxSecurity – Security

In September 2026, Amazon Web Services (AWS) published its first DLAMIs built on Ubuntu Pro in the Base GPU family.

Fixes are available in Ubuntu for the CVE-2026-109518 vulnerability affecting APT.Ubuntu blogRead More

One of our team members recently took (and passed!) OffSec’s advanced penetration testing course & exam, PEN-300/OSEP. Whilst it focuses

If you work with robots, perhaps you’ve come up against a common, but annoying situation: the one field run that

Apache Arrow gives data tools a shared way to organize information.LinuxSecurity – Security ArticlesRead More

Chainlit helps developers turn an AI model into a chat app, but it no longer receives security updates.LinuxSecurity – Security

To set an environment variable in a Bash session on Linux, enter an export command such as export EDITOR=vim.LinuxSecurity –

Flaws in two open-source AI platforms could let code reach files outside the space meant to contain it.LinuxSecurity – Security

Fixes for the CVE-2026-98432 Linux kernel vulnerability are available for Ubuntu.Ubuntu blogRead More

David Goguen’s free chmod calculator shows what Linux permission numbers mean before you copy a command.LinuxSecurity – Security ArticlesRead More

HashiCorp has fixed a Nomad vulnerability that could let a malicious program change files on the computer running it.LinuxSecurity –

Wasmtime has fixed a flaw that lets an untrusted program use up the memory of the server running it.LinuxSecurity –

Some Apache Kafka servers could accept a made-up identity and give an attacker access as that user.LinuxSecurity – Security ArticlesRead

Hetzner says customers using PXE boot should hold off on server restarts.LinuxSecurity – Security ArticlesRead More

Attackers are exploiting a flaw in Brotli, Google’s software for unpacking compressed data.LinuxSecurity – Security ArticlesRead More