News that matters, without the noise.

DSA-6346-1 libreoffice – security update

https://security-tracker.debian.org/tracker/DSA-6346-1

DSA-6345-1 libgd-perl – security update

https://security-tracker.debian.org/tracker/DSA-6345-1

Inside the Modern SOC: The 72-Minute Race

Attackers can move from access to exfiltration in 72 minutes. Learn how modern SOC teams close the speed

USN-8431-1: Ruby vulnerabilities

It was discovered that Ruby’s Net::IMAP library did not properly verify that Transport Layer Security (TLS) encryption was

RHSA-2026:26054: Important: osbuild-composer security update

An update for osbuild-composer is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat

CVE-2026-9862

Critical Severity Description Fortra’s Core Privileged Access Manager (BoKS) contains an OS command injection vulnerability in the boks_autoregisterd

CVE-2026-9863

High Severity Description Fortra BoKS Manager contains an OS command injection vulnerability in the client upgrade and patch

CVE-2026-9595

Medium Severity Description Impact: When a user-configured proxy on webpack-dev-server has a broad context (e.g. /) and ws:

CrowdStrike Announces Continuous Identity for AI Agents

RHSA-2026:25999: Moderate: yggdrasil-worker-package-manager security update

An update for yggdrasil-worker-package-manager is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has

Information Disclosure on SSLVPN endpoint

CVSSv3 Score: 3.9 An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] in FortiOS SSL-VPN web-mode

USN-8428-1: tmux vulnerability

It was discovered that tmux incorrectly handled image cleanup, leading to a use-after-free vulnerability. A local attacker could