ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants

The cyber extortion group known as ShinyHunters on Tuesday claimed it had breached the U.S. Federal Bureau of Investigation and stolen data belonging to current and former employees at the agency. "We have compromised the FBI. We hold very sensitive data on almost ALL FBI Agents and individuals w...

SUSE CVE-2026-93062

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: guard against division by zero in iwldbgtlvallocfragments Make sure we don't end-up with a numfrags = 0 situation. For that, check that the required size is not 0 and put a checker on numfrags as well...

Safety-Aware Zero Trust Enforcement for IoT and Cyber-Physical Systems

Zero Trust ZT replaces the implicit trust of perimeter-based security with explicit, continuous, context-aware authorization. This shift is particularly relevant to IoT and cyber-physical systems, whose heterogeneous, long-lived, and remotely connected components make persistent trust untenable...

ROS-20260923-73-0027

The vulnerability of the comedibufmunge function in the drivers/comedi/comedibuf.c module of the Linux kernel is related to insufficient validation of input data during division by zero. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux Distros Unpatched Vulnerability : CVE-2026-89790

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: avoid divide by zero in rt6multipathrebalance rt6multipathrebalance calculates the total eligible nexthop weight in one pass and programs upper bounds in ...

ironflock (>=0.1.0, <=1.0.9), nucypher (6.1.0) +3 more potentially affected by CVE-2026-77528 via autobahn (22.3.2)

autobahn PYPI version 22.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - ironflock =0.1.0, =0.0.11, =0.0.19 - tahoe-lafs 1.18.0 - zero-knowledge-access-pass-authorizer 2022.8.21 Source cves: CVE-2026-77528 Source...

SUSE CVE-2026-92520

In the Linux kernel, the following vulnerability has been resolved: bpf: Zero queue and stack outputs on lock failure Queue and stack pop/peek helpers accept an uninitialized output buffer because the verifier expects the helper to initialize it. The empty-map error path clears the buffer, but a...

Meta’s Muse AI assistant has a zero-day that can turn it into a Mac backdoor

Mac security researcher Patrick Wardle says it’s trivial to turn Muse into “the ultimate backdoor.” Increasingly, AI assistants are changing from tools that simply answer questions into agents that can plan tasks, use connected services, and take actions for us. These actions might include bookin...

ROS-20260922-73-0046

The vulnerability of the adis16260writeraw function in the drivers/iio/gyro/adis16260.c module of various types of embedded sensors in the Linux operating system is related to zero-division errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, a...

On the Construction of Trapdoor Claw-Free Functions with Certifiable Key

Trapdoor claw-free functions TCFs underpin much of classical-quantum cryptographic interaction, yet every TCF-based protocol states its guarantees relative to an honestly generated key. We give a family-agnostic abstraction of key certification for noisy TCF constructions, built on two notions: a...

ROS-20260922-73-0025

The vulnerability in gstreamer1-plugins-good is related to the lack of checks for division by zero. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: djvulibre (UTSA-2023-003109)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003109 advisory. An issue was discovered IW44EncodeCodec.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by zero. Tenable has extracted the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: djvulibre (UTSA-2023-003110)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003110 advisory. An issue was discovered IW44Image.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by zero. Tenable has extracted the preceding...

ROS-20260922-73-0108

The vulnerability in the 389-ds-base is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260922-73-0026

The vulnerability in gstreamer1-plugins-good is related to the lack of checks for division by zero. Exploiting this vulnerability could allow an attacker to cause a service failure...

Specter NFC Reader / Skimmer Bug-Sweep 3.0.1

Specter turns your Flipper Zero into a pocket counter-surveillance bug-sweep for active 13.56 MHz NFC readers - a hidden card skimmer slipped into a payment terminal, a covert reader behind a door panel, a rogue logger taped under a desk. It passively senses the RF carrier that any powered-on...

SUSE CVE-2026-93589

ImageMagick before 7.1.2-31 and 6.9.13-56 contains a division-by-zero flaw in the FLIF encoder. An incorrect value for ticks per second in the image being encoded causes a divide-by-zero and crashes the encoder, resulting in a denial of service. The issue is fixed in 7.1.2-31 and 6.9.13-56...

Updated nmap packages fix a security vulnerability

Denial of Service via Zero-Length TCP Option Packet. CVE-2026-72712...

SUSE CVE-2026-90086

In the Linux kernel, the following vulnerability has been resolved: xsk: honor XDPTXMETADATA in zero-copy path The zero-copy path reads TX metadata whenever the UMEM has metadata space, even if the descriptor does not set XDPTXMETADATA. Pass descriptor options through the metadata helpers and...

SUSE CVE-2026-90272

In the Linux kernel, the following vulnerability has been resolved: perf: armpmuv3: Zero initialize hwid branch stack field PERFSAMPLEBRANCHHWINDEX is supported by BRBE so hwid is passed to userspace, but it's never set by the BRBE driver. Zero initialize it as it should be according to the docs:...