Ubuntu USN-9091-1 warns of multiple vulnerabilities in the Linux kernel for NVIDIA Tegra. The supplied record gives no affected branches or fixed packages. Check installed kernels and packages, then consult the Ubuntu notice for the applicable update.
Select a severity level below to filter articles
18 topic assignments; an article may belong to multiple groups.
Qilin is a ransomware-as-a-service operation active since September 2022, using affiliates to breach organizations and deploy ransomware. It steals data before encrypting systems and threatens disclosure; organizations should review their ability to detect intrusions, data theft, and…
ZDI warns that untrusted-data deserialization in Meta FAIRChem’s utils load_inference_model could allow code execution in the current process if a user opens a malicious file or visits a malicious page. ZDI recommends limiting interaction with the product.
Node.js has released security updates for the 22.x, 24.x, and 26.x lines, fixing HTTP/2, HTTPS, and TLS flaws that may disrupt servers, expose memory or data, or bypass certificate authentication. Check your version and upgrade to the corresponding security release.
CISA confirms CVE-2026-124194 in Microsoft Office Outlook is being exploited in the wild. The vulnerability may enable network spoofing. Apply Microsoft's mitigation guidance and note the CISA deadline of 2026-11-24.
Ubuntu USN-9091-1 warns of multiple vulnerabilities in the Linux kernel for NVIDIA Tegra. The supplied record gives no affected branches or fixed packages. Check installed kernels and packages, then consult the Ubuntu notice for the applicable update.
No articles in this topic yet.
Debian DSA-6625-1 updates postgresql-17 on Debian trixie to address multiple vulnerabilities, including CVE-2026-6460. Reported risks include arbitrary code execution, authentication bypass, information disclosure, denial of service, and privilege escalation. Upgrade to 17.12-0+deb13u1 and…
Unit 42 says CL-STA-1238 used the Cairn AI framework with Zhipu GLM and DeepSeek in 25 campaigns targeting at least 19 organizations. Ten organizations experienced unauthorized access or data theft; relevant organizations should review accounts, credentials, and signs of lateral movement.
Copyright © 2026 ViSafe (visafe.net) · A blog sharing cybersecurity knowledge
