October 8, 2026 · lwn.net
LAVD scheduler: from games to servers with BPF
A Kernel Recipes 2026 talk shows how the LAVD scheduler, built for games, now serves other workloads within extensible BPF-based CPU schedulers.
Cyber and security
Each alert sums up the news and says what to do.
Recent alerts
October 8, 2026 · therecord.media
US offers $10 million reward for alleged Chinese hacker linked to Hafnium campaign
US authorities offer a $10 million reward for information on Zhang Yu, described as a prominent figure in the Hafnium campaign, in which intruders compromised thousands of computers and stole large volumes of documents.
October 8, 2026 · blog.talosintelligence.com
Fixed flaws in Microsoft, Adobe, Apple and Foxit products: what to monitor and patch
Cisco Talos has disclosed flaws already fixed in Windows, Photoshop, macOS and Foxit Reader, including remote code execution in Foxit Reader and privilege escalation in Windows and Photoshop.
October 8, 2026 · therecord.media
Lawmakers push $11 million mental health program for Cyber Command
Lawmakers who oversee military cyber policy want a $11 million mental health support program for Cyber Command included in defense spending legislation, according to The Record's report.
October 8, 2026 · krebsonsecurity.com
ShinyHunters extorted Boeing spin-off before suspect's arrest in Amman
The KrebsOnSecurity report links an extortion attempt against Jeppesen ForeFlight, a recently separated Boeing unit, to the ShinyHunters group, and describes the detention of a suspect alleged to lead it, who is reportedly cooperating with the FBI.
October 8, 2026 · therecord.media
Espionage phishing targets AI companies and Asian governments
On October 1, 2026, The Record reported on two reports describing China-linked intrusion operations, including a phishing campaign impersonating Western experts.
October 8, 2026 · ubuntu.com
Ubuntu warns of authorization flaws in Aodh and Watcher
On October 5, 2026, Ubuntu Security published an advisory about flaws in OpenStack Aodh and Watcher that could expose alarm metadata and allow unauthorized triggers.
October 8, 2026 · therecord.media
Unauthorized agent access: controls and incident response
In an article published on September 29, 2026, The Record reports that agents accessed Australian government websites without authorization and that the company acknowledged shortcomings in its incident response.
October 8, 2026 · seclists.org
Apache Thrift 0.25.0 fixes 61 vulnerabilities
The oss-sec advisory says Apache Thrift 0.25.0 fixes 61 vulnerabilities in earlier versions and recommends upgrading.
October 8, 2026 · seclists.org
CVE-2026-97146: YuniKorn admission control bypass
An OSS-Sec advisory published on October 7, 2026 describes a way to bypass annotation checks in Apache YuniKorn 1.9.0 and earlier. The reported severity is medium, with a CVSS 4.0 score of 4.8.
October 8, 2026 · ubuntu.com
Linux kernel update calls for server review
An Ubuntu security advisory published on October 2, 2026, fixes numerous vulnerabilities in the Linux kernel for GKE, across networking, storage, drivers, and file systems.
October 8, 2026 · therecord.media
Connected cars: control data sharing
A September 30, 2026 article by The Record reports that automakers routinely share personal data from connected cars with third parties, including companies in the advertising ecosystem.
October 8, 2026 · therecord.media
Pegasus case dismissed for lack of California jurisdiction
On October 2, 2026, The Record reported that a California judge dismissed a lawsuit by Salvadoran journalists at El Faro who were targeted by Pegasus spyware, ruling that the state lacked jurisdiction.
October 8, 2026 · cisa.gov
CISA warns of critical pre-authentication flaw in MikroTik RouterOS
A CISA advisory published on September 29, 2026 describes a flaw in the RouterOS web service that could enable remote code execution as root or denial of service. MikroTik recommends upgrading to version 7.23 or later.
October 8, 2026 · cisa.gov
CISA warns of critical Armatura One vulnerabilities
A CISA advisory published on October 1, 2026, identifies Armatura One flaws that could expose credentials, enable database access, and allow code execution with maximum privileges. The vendor recommends contacting support to obtain and apply the update.
October 8, 2026 · cisa.gov
CISA warns of authorization flaws in Meari IoT platform
A CISA advisory published October 1, 2026, reports two flaws in Meari’s OpenAPI service that allow unauthorized device changes and sensitive data exposure. All versions are affected, with no fix planned.
October 8, 2026 · cisa.gov
CISA warns of Viidure Dashcam exposure
A CISA advisory published on September 29, 2026 reports publicly accessible cloud storage and permanent credentials embedded in the Viidure Dashcam Android app.
October 8, 2026 · cisa.gov
CISA adds Cisco SD-WAN Manager flaw to KEV catalog
On September 30, 2026, CISA added CVE-2026-76504, a hexadecimal encoding flaw in Cisco Catalyst SD-WAN Manager, to its Known Exploited Vulnerabilities catalog based on evidence of active exploitation.
October 8, 2026 · cisa.gov
CISA adds NetScaler flaw to KEV catalog
On October 4, 2026, CISA added CVE-2026-88779, a Citrix NetScaler flaw, to its KEV catalog following evidence of active exploitation.
October 8, 2026 · cisa.gov
CISA adds Zammad flaws to the KEV catalog
On October 2, 2026, CISA added two Zammad vulnerabilities to the KEV catalog after identifying evidence of active exploitation.
October 8, 2026 · blog.talosintelligence.com
Cisco Talos announces monthly threat hunting for executive accounts
In an article published on September 29, 2026, Cisco Talos announced a monthly threat-hunting and intelligence-analysis service for systems associated with up to 10 key people in an organization.
October 8, 2026 · blog.talosintelligence.com
Cisco Talos reports Antino backdoor targeting Asia
Cisco Talos attributes espionage campaigns using the Antino backdoor to UAT-11587, targeting institutions in eight Asian countries.
October 8, 2026 · therecord.media
Unauthorized automated collection calls for controls
A The Record article reports that an Asymmetric Security investigation identified software that attempted to collect data from dozens of websites without authorization. The case highlights the need to control and monitor automated access to external sources.
October 8, 2026 · elastic.co
Operational tags help prioritize SIEM detection rules
In an article published on October 5, 2026, Elastic Security Labs describes monthly tags for assessing noise, performance, threat, and recommendation across preconfigured SIEM rules.
October 8, 2026 · blog.talosintelligence.com
Make attacks harder to carry out
In an article published on October 1, 2026, Cisco Talos researchers recommend deception, behavioral detections, and controls that limit attackers’ options.
October 8, 2026 · lwn.net
Undefined behavior in C and memory safety
A LWN article covers Martin Uecker's presentation on undefined behavior in C and the possibility of making the language memory-safe.
October 8, 2026 · seclists.org
Early Patches Help Cloud Providers Prepare Mitigations
On October 5, 2026, a reply posted to oss-sec argued that giving cloud providers patches before public advisories helps schedule mitigations and identify gaps in patches.
October 8, 2026 · seclists.org
CVE-2026-104380: routing flaw in Punk for Perl
Advisory published on the oss-sec mailing list on October 5, 2026: Punk for Perl versions 0.48 through releases before 0.55 may route Extended CONNECT to GET routes without validating Origin.
October 8, 2026 · seclists.org
CVE-2026-88816: Update Perl DBI
An advisory published on September 28, 2026, reports that Perl DBI versions earlier than 1.654 incorrectly handle numeric values in FetchHashKeyName.
October 8, 2026 · seclists.org
Apache YuniKorn: admission check bypass
An advisory published on October 7, 2026, reports that Apache YuniKorn 1.9.0 and earlier do not check user labels and annotations for workload UPDATE operations, allowing admission controls to be bypassed. The reported severity is low (CVSS 4.0: 2.0).
October 8, 2026 · blog.talosintelligence.com
Defenses that undermine adversary advantages
In an article published on October 1, 2026, Cisco Talos highlights deception techniques, behavioral detection, and controls on legitimate tools to make attackers’ operations harder.
October 8, 2026 · seclists.org
Vulnerability disclosure for cloud providers
In a post dated October 4, 2026, oss-sec proposes a disclosure list for cloud and VPS hosting providers that do not participate in Linux distribution lists.
October 8, 2026 · elastic.co
Elastic automates Linux endpoint configuration without MDM
In an article published on September 29, 2026, Elastic Security Labs describes a 68-line workflow that checks Linux endpoints every six hours and applies managed configurations without duplicating actions.
October 8, 2026 · therecord.media
New NetScaler alert calls for an exposure review
The Record reports that the United States and Australia warned of a newly observed issue in customer-managed NetScaler deployments, distinct from the vulnerabilities disclosed the previous week.
October 8, 2026 · seclists.org
Critical flaw bypasses LDAP authentication in Apache MINA SSHD
The advisory published on oss-sec on September 29, 2026 describes CVE-2026-94052, a critical LDAP password authentication flaw in Apache MINA SSHD, with a CVSS 3.1 score of 9.1.
October 8, 2026 · seclists.org
Critical Apache MINA SSHD flaw allows authentication bypass
An advisory published on September 29, 2026 reports LDAP injection in the sshd-ldap component, with authentication bypass risk and a CVSS 3.1 severity score of 9.1.
October 8, 2026 · seclists.org
Critical CPython flaw affects SSLContext when SNI switches contexts
A security advisory published on September 30, 2026 reports a critical CPython flaw: a remote, unauthenticated TLS client can trigger a use-after-free when the server's sni_callback switches SSLContext objects.
October 8, 2026 · isc.sans.edu
Actively exploited flaw calls for an Apple update review
The SANS ISC advisory, published on September 28, 2026, reports active exploitation of a vulnerability affecting iOS 26, macOS 26, and macOS 15. iOS and macOS 27 are not affected.
October 8, 2026 · seclists.org
Apache Directory LDAP API flaw can consume CPU for hours
An advisory published on October 2, 2026, on the oss-sec list describes denial of service from bcrypt checks with a high cost factor in versions 2.1.0 through versions before 2.1.9.
October 8, 2026 · seclists.org
Apache Directory LDAP API flaw can consume CPU indefinitely
An advisory published on the oss-sec mailing list on October 2, 2026 warns that malformed telephone numbers can keep one CPU core busy indefinitely in Apache Directory LDAP API versions earlier than 2.1.9.
Let's assess your project
I reply with scope and a proposal.