DSA-6370-1 incus – security update
https://security-tracker.debian.org/tracker/DSA-6370-1
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Vendor Advisories
Photo ZIP campaign targeting hospitality industry delivers Node.js implant for persistent access
In this article Attack chain overview Mitigation and protection guidance References Learn more Microsoft Threat Intelligence has identified
CVE-2026-54753
Medium Severity Description Nx is a monorepo solution for TypeScript and polyglot codebases. From 17.0.4 until 22.7.2 and
CVE-2026-48090
Medium Severity Description Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.37.0
CVE-2026-47220
High Severity Description Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.37.0
2 sources
Synology-SA-26:11 Synology MailPlus Server
Synology has released a security update for the Synology MailPlus Server package in DSM to address multiple vulnerabilities
Connected reporting, one intelligence threadsynology.com · cybersecuritynews.com
DSA-6369-1 pdns-recursor – security update
https://security-tracker.debian.org/tracker/DSA-6369-1
DSA-6368-1 pdns – security update
https://security-tracker.debian.org/tracker/DSA-6368-1
DSA-6367-1 dnsdist – security update
https://security-tracker.debian.org/tracker/DSA-6367-1
CVE-2026-55964
Medium Severity Description Chain intermediate CA:TRUE without keyCertSign accepted as a signing CA. Intermediate CA certificates are required
CVE-2026-37453
High Severity Description Insecure Permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 allows a remote attacker to obtain sensitive
CVE-2026-55960
High Severity Description Un-negotiated Raw Public Key (RFC 7250) accepted in place of an X.509 certificate, bypassing chain