CLSA-2026-1776099155 systemd: Fix of 2 CVEs

CVE-2026-29111: validate input cgroup path in GetUnitByControlGroup to prevent PID 1 assert/freeze on spurious IPC API calls - CVE-2026-4105: reject invalid class types when registering machines in systemd-machined to prevent privilege escalation...

MAL-2026-2575 Malicious code in @ascend-ops/web-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57ec262f68b9b9bd081ce675c1eb28e56c6c630c03cf1ecb680e5b56035f0aaa The package @ascend-ops/web-client was found to contain malicious code. Source: ghsa-malware...

MAL-2026-2631 Malicious code in babel-plugin-blocks (npm)

Malicious package due to data exfiltration via test, preinstall, and preupdate scripts in package.json using wget to send data to webhook.site. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 679960b444e4781d7276df8692808a4bc4507d29aefe943ffe4d3dfb35dcc141 The...

Identity Protection in the AI Era

Enterprises aiming to predict and mitigate human, machine, and AI‑agent risks at scale demand AI‑powered identity‑first security without compromise...

A Synthetic Conversational Smishing Dataset for Social Engineering Detection

Smishing SMS phishing has become a serious cybersecurity threat, especially for elderly and cyber-unaware individuals, causing financial loss and undermining user trust. Although prior work has focused on detecting smishing at the level of individual messages, real-world attackers often rely on...

Ubuntu: Security Advisory (USN-8161-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2026-2620 Malicious code in upstartportal (npm)

Collects system info, reads sensitive files, and exfiltrates data to a suspicious host. Multiple YARA matches confirm malicious intent. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 932dee0dcf84fc1044efb1ec35950d6102fcbb5122f26cca5e2b1f13eb599729 The package...

Machine Learning-Based Detection of MCP Attacks

The Model Context Protocol MCP is a new and emerging technology that extends the functionality of large language models, improving workflows but also exposing users to a new attack surface. Several studies have highlighted related security flaws, but MCP attack detection remains underexplored. To...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: nats, nri-mysql, nova, kor, libnvidia-container, fuse-overlayfs-snapshotter, aws-nuke, opencost, crossplane-provider-azure-storage, grpc-health-probe, external-secrets-operator, external-dns, apache-exporter, terraform-provider-azapi, db-operator, falcoctl,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch, flannel, dask-gateway, bento, datadog-agent, cloud-sql-proxy, aws-efs-csi-driver, dbmate, libnvidia-container, amazon-cloudwatch-agent-operator, fuse-overlayfs-snapshotter, terraform-provider-azuread, trivy-operator, newrelic-infrastructure-agent,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: generic-device-plugin-fips, pvc-autoresizer-fips, aws-flb-firehose, actions-runner-controller-fips, grafana-mimir, newrelic-fluent-bit-output, conjur-cli, db-operator-fips, gatus, hubble-fips, jobset-fips, multus-cni-fips, kubescape-server,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: actions-runner-controller-fips, newrelic-fluent-bit-output, gatus, hubble-fips, terraform-provider-kubernetes-fips, thanos-operator, gosu, modelmesh-runtime-adapter, pulumi-language-yaml, ko, rancher-security-scan-fips, cert-manager, longhorn-cli, elastic-agent-fips,...

GHSA-FM2X-C5QW-4H6F LXD: VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf

Summary The isVMLowLevelOptionForbidden function in lxd/project/limits/permissions.go is missing raw.apparmor and raw.qemu.conf from its hardcoded forbidden list. A user with canedit permission on a VM instance in a restricted project can combine these two omissions to bridge the LXD unix socket...

LXD: VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf

Summary The isVMLowLevelOptionForbidden function in lxd/project/limits/permissions.go is missing raw.apparmor and raw.qemu.conf from its hardcoded forbidden list. A user with canedit permission on a VM instance in a restricted project can combine these two omissions to bridge the LXD unix socket...

nodejs: Nodejs uninitialized memory exposure

A memory exposure flaw has been discovered in Node.js. A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using the vm module with the timeout option. Under specific timing conditions, buffers allocated with Buffer.alloc and other...

CVE-2025-64436 vulnerabilities

Vulnerabilities for packages: virt-launcher, virt-controller-fips, docker-machine-driver-harvester, virt-handler, virt-operator-fips...

GHSA-9M94-W2VQ-HCF9 vulnerabilities

Vulnerabilities for packages: virt-launcher, virt-controller-fips, docker-machine-driver-harvester, virt-handler, virt-operator-fips...

GHSA-7XGM-5PRM-V5GC vulnerabilities

Vulnerabilities for packages: virt-launcher, virt-controller-fips, docker-machine-driver-harvester, virt-handler, virt-operator-fips...

CVE-2026-5194

A flaw was found in wolfSSL. Missing hash/digest size and Object Identifier OID checks allow the acceptance of smaller, less secure digests during the verification of Elliptic Curve Digital Signature Algorithm ECDSA certificates. This could enable a remote attacker, with knowledge of the public...

CVE-2026-5194

Missing hash/digest size and OID checks allow digests smaller than allowed when verifying ECDSA certificates, or smaller than is appropriate for the relevant key type, to be accepted by signature verification functions. This could lead to reduced security of ECDSA certificate-based authentication...