News that matters, without the noise.

RHSA-2026:17795: Critical: kernel security update

An update for kernel is now available for NVIDIA for RHEL 10. Red Hat Product Security has rated

RHSA-2026:17790: Critical: nginx security update

An update for nginx is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat

Gremlin Stealer’s Evolved Tactics: Hiding in Plain Sight With Resource Files

Unit 42 analyzes the evolution of Gremlin stealer. This variant uses advanced obfuscation, crypto clipping and session hijacking

Kazuar: Anatomy of a nation-state botnet

In this article Delivery Module types Botnet operations Who is Secret Blizzard? Mitigation and protection guidance Microsoft Defender

Defense in depth for autonomous AI agents

Designing Secure Autonomous AI Agents with Defense in Depth AI agents are moving beyond assistance and into action.

When configuration becomes a vulnerability: Exploitable misconfigurations in AI apps

In this article Background What is an exploitable misconfiguration? Exploitable misconfigurations in popular AI applications Minimizing the risk:

DSA-6272-1 nodejs – security update

https://security-tracker.debian.org/tracker/DSA-6272-1

Now Live: The CrowdStrike 2026 Financial Services Threat Landscape Report

CVE-2026-45011

High Severity Description Apostrophe has stored XSS via javascript: URL in Image Widget Link Read more at https://www.tenable.com/cve/CVE-2026-45011

CVE-2026-45012

High Severity Description Apostrophe has authenticated SSRF in rich-text widget import via @apostrophecms/area/validate-widget Read more at https://www.tenable.com/cve/CVE-2026-45012

CVE-2026-45013

High Severity Description Apostrophe has a Weak Password Recovery Mechanism for Forgotten Password and Improper Input Validation Read

RHSA-2026:17659: Important: openexr security update

An update for openexr is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.