// security
$ tail -f ./security
Headlines from early disclosure channels, research labs and curated news, each with a short summary.
# Today
-
DSA-6579-1 roundcube - security update
A security update for Roundcube webmail has been released for Debian systems.
-
DSA-6580-1 erlang - security update
A security update has been released for the Erlang programming language packages on Debian.
-
DSA-6581-1 unbound - security update
A security update has been released for the Unbound DNS resolver in Debian.
-
Vulnerabilities in PHP Affecting Cisco Products: October 2026
Two critical PHP remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619, affect certain Cisco products.
-
ASPM in the AI Era Part 2: Prioritize Exploitable Risks with Code-to-Cloud Context
The report discusses using code-to-cloud context to prioritize exploitable application security risks across code, infrastructure, and runtime.
-
Attacks on PHP2Shell Continue, But No Known Compromises as a Result Yet
PHP developers released fixes for two critical vulnerabilities, and attacks are continuing, though no confirmed compromises have been reported so far.
-
VU#763488: Memory corruption vulnerabilities in PHP
Two memory corruption vulnerabilities in older PHP versions could allow remote code execution through crafted HTTP requests.
-
Railway warns devs to rotate secrets after potential breach
Railway reported suspicious activity involving customer environment variables and recommended rotating stored secrets.
# Yesterday
-
Toronto crime tips org freezes operations after details of data breach come to light
A Toronto Crime Stoppers chapter paused operations after disclosing details of a data breach and its timeline.
-
CVE-2026-115417 - Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in aws-c-mqtt
CVE-2026-115417 is a memory allocation flaw in the MQTT 3.1.1 compatibility adapter of aws-c-mqtt, affecting AWS Common Runtime and IoT SDK components.
-
PHP2Shell exploit bypasses protections designed to stop remote code execution
A PHP2Shell exploit reportedly bypasses protections designed to prevent remote code execution, according to researchers.
-
CVE-2026-76268 | Splunk Enterprise Patroni REST API Missing Authentication Vulnerability
A missing authentication flaw in Splunk Enterprise's Patroni REST API could let unauthenticated network users execute operating-system commands.
-
Capcom confirms data breach affecting 11.7 million accounts
Capcom has confirmed a breach of its CAPCOM ID membership service exposed email addresses and related data for 11.7 million accounts.
-
Disgraced eMudhra drops out of TLS business after using cert private key of 4
eMudhra left the TLS certificate business after a signing ceremony error exposed a private key that could issue certificates for any website.
-
CVE-2026-115419 - Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server
CVE-2026-115419 is an issue in the Strands Agents SDK A2A server where conversation state was not isolated between authenticated callers, allowing data to be disclosed to the wrong session.
-
LiteLLM release pipeline hacked to distribute info-stealer malware
Hackers compromised LiteLLM’s PyPI package and published malicious Docker images that steal credentials, secrets, and environment variables.
-
The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest Insider Threat
A webinar discusses AI agents operating on employee laptops with stored credentials and internal access, raising concerns about oversight and insider risk.
-
Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks
Arista reports active exploitation of a zero-day SQL injection flaw in VeloCloud Orchestrator that allows authenticated users to gain operator privileges.
-
Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability
A Snort 3 SMTP MIME parsing flaw in multiple Cisco products could let a remote attacker cause a denial-of-service restart.
-
Multiple Cisco Products Snort 3 Security Hardening Release: October 2026
Snort 3 hardening updates address multiple internally discovered out-of-bounds write vulnerabilities tracked by CVE-2026-20043.
-
Multiple Cisco Products Snort 3 Denial of Service Vulnerabilities
Multiple Cisco products using Snort 3 detection engine have denial-of-service vulnerabilities that could cause unexpected restarts.
-
Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerability
Multiple Cisco products using Snort 3 may restart unexpectedly if a remote attacker sends crafted GRE traffic exploiting improper handling of nested GRE packets.
-
Multiple Cisco Products Snort 3 Denial of Service Vulnerability
A vulnerability in Cisco Snort 3 Detection Engine could let a remote unauthenticated attacker cause a denial-of-service condition through crafted GTP traffic.
-
Multiple Cisco Products Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability
Cisco has disclosed a buffer overflow vulnerability in Snort 3 VBA decompression that can cause a remote denial of service.
-
PHP2Shell Exposure Depends on More Than Whether You Use PHP
PHP2Shell exposure may affect bundled runtimes, containers, and hosted applications beyond direct PHP usage, requiring validation of exploitability.
-
CVE-2026-115414 - OS Command Injection Issue in SAM CLI Terraform Hook
CVE-2026-115414 describes an OS command injection issue in AWS SAM CLI's Terraform hook, where resource addresses are interpolated into generated Makefile recipes.
-
Indian tech company eMudhra announces withdrawal from certificate business after security incident
eMudhra announced it will withdraw from certificate services after a security incident involving a poorly generated private key.
-
eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable
eMudhra will exit its global SSL/TLS certificate business after a researcher found eight intermediate CA private keys were easily guessable.
-
I had plans for that second
The post discusses leap second abolition and critical vulnerabilities in PHP.
-
ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More
A security roundup describes AI secrets leaks, PingCAP source theft, a Signal hang-up flaw, a Laravel authentication bypass, and other software vulnerabilities.