SafeGuard

./safeguard --version 1.0 Safeguard is a fast, lightweight, cross-platform command-line file encryption tool written in Go. Security Notice This project is a learning-oriented file encryption tool. While it uses standard cryptographic primitives from Go’s standard library e.g. AES-GCM for...

SafeGuard for Privileged Passwords < 7.5.2 - Authentication Bypass

One Identity Safeguard for Privileged Passwords before 7.5.2 allows unauthorized access because of an issue related to cookies. This only affects virtual appliance installations VMware or HyperV. The fixed versions are 7.0.5.1 LTS, 7.4.2, and 7.5.2. id: CVE-2024-45488 info: name: SafeGuard for...

Rocky Linux 9 [CIQ] Security Update: python3-urllib3 Multiple Vulnerabilities (crlsa-2026_1087)

The Rocky Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-20261087 advisory. urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion CVE-2025-66418 urllib3: urllib3 Streaming API improperly handles highly...

Rocky Linux 9 [CIQ] Security Update: fence-agents-aliyun / fence-agents-all / fence-agents-amt-ws / etc Multiple Vulnerabilities (crlsa-2026_1239)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20261239 advisory. urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion CVE-2025-66418 urllib3: urllib3 Streaming API improperly handles highly...

Rocky Linux 8 [CIQ] Security Update: resource-agents / resource-agents-aliyun / etc Multiple Vulnerabilities (crlsa-2026_1241)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20261241 advisory. urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion CVE-2025-66418 urllib3: urllib3 Streaming API improperly handles highly...

Rocky Linux 10.1 [CIQ] Security Update: python3-urllib3 Multiple Vulnerabilities (crlsa-2026_1086)

The Rocky Linux 10.1 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-20261086 advisory. urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion CVE-2025-66418 urllib3: urllib3 Streaming API improperly handles highly...

Rocky Linux 8 [CIQ] Security Update: python3.12-urllib3 Multiple Vulnerabilities (crlsa-2026_1226)

The Rocky Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-20261226 advisory. urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion CVE-2025-66418 urllib3: urllib3 Streaming API improperly handles highly...

Rocky Linux 9 [CIQ] Security Update: python3.12-urllib3 Multiple Vulnerabilities (crlsa-2026_1088)

The Rocky Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-20261088 advisory. urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion CVE-2025-66418 urllib3: urllib3 Streaming API improperly handles highly...

SafeGuard

./safeguard --version 1.0 Safeguard is a fast, lightweight, cross-platform command-line file encryption tool written in Go. Security Notice This project is a learning-oriented file encryption tool. While it uses standard cryptographic primitives from Go’s standard library e.g. AES-GCM for...

Using AI for Weapons Development

Last week, Anthropic released a long and detailed document describing current misuses of their Claude models. I'm still reading it, but I wanted to flag this: We identified a cell of threat actors based in northern Yemen running three weapons development programs: a guided rocket that used a...

OpenAI Overhauls Safety Protocols After Its AI Agents Went Rogue

The ChatGPT maker says its upcoming Astra model may have reached “critical” cyber capabilities, prompting it to halt a significant number of training runs while it tightens internal safeguards...

CVE-2026-12251

The Ultimate Member WordPress plugin before 2.12.1 does not filter administrator-level capabilities from the roles it makes selectable on its registration forms, and its post-registration safeguard against elevated accounts is disabled by default, allowing unauthenticated users to register with a...

CVE-2026-12251

The Ultimate Member WordPress plugin before 2.12.1 does not filter administrator-level capabilities from the roles it makes selectable on its registration forms, and its post-registration safeguard against elevated accounts is disabled by default, allowing unauthenticated users to register with a...

Important: Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.10.2 release

Red Hat OpenShift distributed tracing platform Tempo 3.10.2 has been released This release of the Red Hat OpenShift distributed tracing platform Tempo provides security improvements. Breaking changes: None Deprecations: None Technology Preview features: None Enhancements: None Bug fixes: Punycode...

commonmeta-py (>=0.10.0, <=0.16.3), foodreversefda (>=0.1.0, <=0.1.8) +5 more potentially affected by unknown CVE via vcrpy (5.1.0)

vcrpy PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on vcrpy and may be impacted: - commonmeta-py =0.10.0, =0.1.0, =1.8.0, =1.2.1, =1.0.6, =2.166.0, =2.247.0 Source cves: unknown CVE Source advisory: OSV:GHSA-RPJ2-4HQ8-938G...

oneidentity-safeguard-sessions-plugin-sdk (>=1.4.2, <=1.6.0) potentially affected by unknown CVE via vcrpy (2.1.0)

vcrpy PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on vcrpy and may be impacted: - oneidentity-safeguard-sessions-plugin-sdk =1.4.2, =1.6.0 Source cves: unknown CVE Source advisory: OSV:GHSA-RPJ2-4HQ8-938G...

airbyte-source-linnworks (>=0.1.7, <=0.1.66), data-harvesting (2.0.0) +4 more potentially affected by unknown CVE via vcrpy (6.0.2)

vcrpy PYPI version 6.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on vcrpy and may be impacted: - airbyte-source-linnworks =0.1.7, =1.3.0, =0.3.0, =0.4.1 - vcrpy-encrypt 0.9.2 Source cves: unknown CVE Source advisory: OSV:GHSA-RPJ2-4HQ8-938G...

airbyte-source-gitlab (>=2.1.1, <=4.4.0.dev202506251856), airbyte-source-quickbooks (>=3.0.2, <=4.0.4) +9 more potentially affected by unknown CVE via vcrpy (4.1.1)

vcrpy PYPI version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on vcrpy and may be impacted: - airbyte-source-gitlab =2.1.1, =3.0.2, =0.2.3, =1.0.0, =1.0.0, =8.2.1, =1.7.1, =1.0.2, =2.54.0, =2.92.0 Source cves: unknown CVE Source advisory:...

oneidentity-safeguard-sessions-plugin-sdk (>=1.1.7, <=1.3.4) potentially affected by unknown CVE via vcrpy (2.0.1)

vcrpy PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on vcrpy and may be impacted: - oneidentity-safeguard-sessions-plugin-sdk =1.1.7, =1.3.4 Source cves: unknown CVE Source advisory: OSV:GHSA-RPJ2-4HQ8-938G...

Fedora 44 : bind9-next (2026-dbb0776ac5)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-dbb0776ac5 advisory. Update to 9.21.22 rhbz2480122 Security Fixes: - Limit resolver server list size. CVE-2026-3592 - Fix GSS-API resource leak. CVE-2026-3039 - Disable...