Tag: Open Source Software
-
OpenSSH 10.4 arrives with security fixes and a post-quantum signature option
Operators who manage remote access to Unix and Linux systems keep a close watch on OpenSSH, the software that carries most SSH traffic …
-
Atomic Arch Campaign Hijacks 20+ Linux AUR Packages to Deliver Malware
Research firm Sonatype has discovered a malicious campaign targeting Linux systems in an entirely different way. Hackers are exploiting a …
-
Avast’s former CEO built an AI that found every OpenSSL zero-day this year. Now it runs inside air-gapped networks.
AISLE, the cybersecurity startup founded by former Avast CEO Ondrej Vlcek, launched Snapshot on Tuesday, a product that deploys its AI …
-
New WordPress Malware Uses Steam Profile Comments to Hide C2 Instructions
A new WordPress malware campaign has been found using an unusual hiding place for its command instructions: Steam Community profile …
-
KDE Linux security audit cuts kernel modules and unused packages
KDE Linux, the in-progress operating system from the KDE community, removed several kernel modules and software packages after a security …
-
No fix yet for critical RCE bug in open-source Git service Gogs – exploit module is out
There’s a huge hole and no one is patching it thus far. A critical, remote code execution (RCE) bug in Gogs, a popular open-source …
-
Fake software on GitHub and SourceForge distribute Deno RAT
During our threat hunting activities, we found fake installers and plugins impersonating popular software including ChatGPT, Claude, …
-
Investigating unauthorized access to GitHub-owned repositories
On Monday May 18, we detected and contained a compromise of an employee device involving a poisoned VS Code extension published by a third …
-
Investigating unauthorized access to GitHub’s internal repositories
On Monday May 18, we detected and contained a compromise of an employee device involving a poisoned VS Code extension published by a third …
-
Clear your calendar, Drupal user: You have a critically urgent patch to install
If you use Drupal, get ready to patch without delay. The org behind the popular open source content management system is warning of a …
-
MetInfo CMS CVE-2026-29014 Exploited for Remote Code Execution Attacks
Threat actors are actively exploiting a critical security flaw impacting an open-source content management system (CMS) known as MetInfo, …
●●●