Security updates for Wednesday

https://lwn.net/Articles/1099202/

#LWN #Linux #security

xorg-server 21.1.25 and xwayland 24.1.14 released due to more security issues https://www.gamingonlinux.com/2026/10/xorg-server-21-1-25-and-xwayland-24-1-14-released-due-to-more-security-issues/

#OpenSource #Security #XOrg #XWayland #Linux

LibreSSL 4.2.2 and 4.3.3 released https://www.undeadly.org/cgi?action=article;sid=20261007052424 #openbsd #libressl #openssl #tls #ssl #https #cryptography #security #crypto #portablesoftware #freesoftware #libresoftware

openssh-10.6 released https://www.undeadly.org/cgi?action=article;sid=20261007052827 #openbsd #openssh #ssh #securelogin #networking #security #cryptography #crypto #portablesoftware #freesoftware #libresoftware

OpenSSH 10.6 released

https://lwn.net/Articles/1098980/

#LWN #Linux #security #OpenSSH

Security updates for Tuesday

https://lwn.net/Articles/1098979/

#LWN #Linux #security

Security updates for Monday

https://lwn.net/Articles/1098599/

#LWN #Linux #security

What did this old #gammon think would happen?

Its not his job to audit what headgear customers are wearing, let alone try and guess their religion - presumably #Waitrose in #Worthing has #CCTV and #security staff like everywhere else and if they thought the chap with the helmet was dodgy they would have stepped in (any ban on wearing them is more a precaution against robbery, but its equally likely he was simply riding a motorcycle and maybe even picking groceries for home delivery so the staff knew him!)

Also why was he intervening in a complaint from some old granny lady about the state of loos? He's not allowed to go into loos that aren't for his gender presentation anyway - should have just bought his chocs for his ill friend and kept quiet...

https://unwall.app/www.theargus.co.uk/news/26601644.man-banned-waitrose-called-shopper-muslim-looking/

This is a typical AI article that again mentions "rogue agents" which is really a public relations blame dodge - trying to move the blame elsewhere. And the truth? Inadequate guardrails for sure, but poor prompting and the training process itself is to blame. That puts blame squarely on the AI company itself. Rogue is when a human acts out against the rules on purpose, these agents were simply following orders as they understood them.

#ai #security #infosec

https://thehackernews.com/2026/10/openai-parts-ways-with-three-safety.html

🤬 … oh Microsoft 🤦🏻‍♂️

Somewhere right now, a nonprofit staffer is clicking around Microsoft 365 looking for a critical file. It's gone. And Microsoft just confirmed it isn't coming back. 😳

Not "we'll look into it"... Not "give us 48 hours"... Gone. 🤬

I've seen this movie before. People assume the cloud is the backup. It isn't. The cloud is where your data lives, which means it's also where your data can vanish. One wrong click, one bad sync, one retention policy nobody read, and you're the drunk landscaper who just weed-whacked your own files.

Nonprofits feel this harder than anyone. Smaller teams, tighter budgets, donor records and grant documents they can't afford to lose. The exact folks who assume Microsoft has it covered are the ones finding out it doesn’t.

So, do this today. Find out who owns your backups. If the answer is the cloud, you don't have backups. Get a real one, test that you can actually restore from it, and sleep better tonight.

Disaster isn't a question of if. It's when.

https://www.theregister.com/saas/2026/09/28/microsoft-tells-nonprofits-their-deleted-m365-data-isnt-coming-back/5299433#Nonprofits

#Microsoft365 #DataProtection #ITLeadership #Cybersecurity #CloudComputing #BusinessContinuity #security #privacy #cloud #infosec #Backup

Security updates for Friday

https://lwn.net/Articles/1098312/

#LWN #Linux #security

Ubuntu is shaking up its OpenPGP implementation, adding Rust-based Sequoia PGP to 26.10 installs.

GnuPG is still included, but Canonical plans to phase it out in a future release.

https://www.omgubuntu.co.uk/2026/10/ubuntu-rust-pgp-sq?v1

#rust #security #ubuntu

OpenBGPD 9.3 released https://www.undeadly.org/cgi?action=article;sid=20261001164002 #openbsd #openbgpd #bgp #routing #networking #development #security #freesoftware #libresoftware

Security updates for Thursday

https://lwn.net/Articles/1098067/

#LWN #Linux #security

@gamingonlinux
thats almost as bad as the 1300 Debian CVEs!
#NVIDIA #Drivers #Security

NVIDIA security bulletin for Sept 30 notes many GPU issues https://www.gamingonlinux.com/2026/09/nvidia-security-bulletin-for-sept-30-notes-many-gpu-issues/

#NVIDIA #Drivers #Security

Security updates for Wednesday

https://lwn.net/Articles/1097753/

#LWN #Linux #security

OpenBSD 8.0 is due out soon, and -current snapshots identify as 8.0 already. So it's time to reprise "You Have Installed OpenBSD. Now For The Daily Tasks." https://nxdomain.no/~peter/openbsd_installed_now_for_the_daily_tasks.html which should help answer some common questions. #openbsd #newrelease #maintenance #sysadmin #security #dailytasks #freesoftware #libresoftware

Security updates for Tuesday

https://lwn.net/Articles/1097466/

#LWN #Linux #security

Blair is reported to have said that the Freedom of Information Act was one of the things he regretted the most. Possibly even more than Devolution (although that was inevitable). This is an example of why. The government must hate it.

But don’t worry, practice will make perfect.

https://www.theguardian.com/technology/2026/sep/29/trial-live-facial-recognition-cameras-london-stations-false-positive

#FOI #FreedomOfInformation #Blair #Labour #Legislation #UKPol #FacialRecognition #Privacy #Security

Whoa!!!

https://lists.debian.org/debian-security-announce/2026/msg00441.html

#IT #Security #Linux #Debian

Security updates for Monday

https://lwn.net/Articles/1097191/

#LWN #Linux #security

OpenBSD -current has moved to version 8.0 https://www.undeadly.org/cgi?action=article;sid=20260927120854 #openbsd #current #newversion #pleasetest #development #networking #security #freesoftware #libresoftware

OpenBSD gains new networking daemon - rtrd(8) https://www.undeadly.org/cgi?action=article;sid=20260927120124 #openbsd #rtrd #rpki #bgpd #routing #networking #security

Turns out WebKit cannot store a non-extractable X25519 CryptoKey in IndexedDB.

Kind of a big deal for security/privacy.

If you know anyone at Apple/on the WebKit team, please nudge them about this.

https://bugs.webkit.org/show_bug.cgi?id=312279

#webkit #cryptography #security #privacy #x25519 #indexedDB #safari #apple #web #dev #SmallWeb

Security updates for Friday

https://lwn.net/Articles/1096637/

#LWN #Linux #security

Research into file-notification attacks on Linux

https://lwn.net/Articles/1096431/

#LWN #Linux #security #Android

Hackers publish thousands of drivers’ data after breaching Florida motor vehicle database

The ShinyHunters hacking group has published hundreds of thousands of files from a Florida state database of vehicles and driver information. The hackers said they published the stolen data on its leak site “because the victim did not pay a ransom or cooperate and comply” with the hackers’ demands.

#florida #dmv #dataleak #security #cybersecurity #hackers #hacking #hacked

https://techcrunch.com/2026/09/16/hackers-publish-thousands-of-drivers-data-after-breaching-florida-motor-vehicle-database/

Security updates for Thursday

https://lwn.net/Articles/1096407/

#LWN #Linux #security

Critical security vulnerabilities in the Radicle network protocol

https://lwn.net/Articles/1096200/

#LWN #Linux #security

Critical WordPress RCE vulnerability announced

https://lwn.net/Articles/1096195/

#LWN #Linux #security

Security updates for Wednesday

https://lwn.net/Articles/1096191/

#LWN #Linux #security

Security updates for Tuesday

https://lwn.net/Articles/1096022/

#LWN #Linux #security

Security updates for Monday

https://lwn.net/Articles/1095702/

#LWN #Linux #security

I had the joy to chat with @bagder and @icing about #curl security things

We discussed the Summer of Bliss, the influx of LLM vulnerability reports. The stress of dealing with these things, and how much effort all this security work has become

They are both amazing people who have a ton of knowledge and experience to share

https://opensourcesecurity.io/2026/2026-09-curl-bliss-stefan-daniel/

#OpenSourceSecurity #security #vulnerability

its good wider community (mostly older folk/seniors?) came out in support after this Islamic Centre in #Cornwall was attacked (including funding upgraded #CCTV and #security equipment!) but offenders need to be caught

After ramming gates, they poured used engine oil around the grounds from what appears to be a 20/25 litre container + maybe a smaller 5l one.

Not stuff you generally have lying around, unless you do your own oil changes or work in a repair garage!

Also to bust the gates they needed access to a large vehicle they didn't mind putting a few (more?) dents/cracks in the bumper, suggesting lads from local rural community (building not obviously Islamic from outside) with an interest in vehicles (but also with history of reckless driving)

https://www.bbc.co.uk/news/articles/cm62exggn0nwo

...

- #Surveillance
- Controlling content we see
- Making unaccountable life-changing decisions

The #Labour manifesto promised it would regulate AI. But #Starmer succumbed to pressure from #BigTech and pursued ‘growth’ over our rights

It’s time for our new Prime Minister & Minister for AI, Narayan, to introduce legislation that will #regulate AI and ensure that works for all of us and does not harm our #HumanRights

https://action.openrightsgroup.org/tell-andy-burnham-regulate-ai

#safety #security #privacy #DigitalAlert

[2/2]

Security updates for Friday

https://lwn.net/Articles/1095219/

#LWN #Linux #security

Security updates for Thursday

https://lwn.net/Articles/1094962/

#LWN #Linux #security

[$] Ways to encrypt data on servers

At the 2026 edition of FOSSY, Romeo Solano gave a fast-paced, humorous presentation on what could have been a rather boring topic: server encryption. There are a number of threats [...]

https://lwn.net/Articles/1092553/

#LWN #Linux #security #systemd #OpenSSH #XFS

Security updates for Wednesday

https://lwn.net/Articles/1094720/

#LWN #Linux #security