Multiple security issues were identified in the libXi client-side library for the X Input Extension, leading to a high severity vulnerability (CVE-2026-109089). These issues affect versions of libXi prior to 1.8-5.oe2203sp4. The vulnerabilities have a CVSS 3.1 base score of 7.5, indicating high impact on confidentiality, integrity, and availability. Official security fixes have been released to address these problems.
A vulnerability in MIT Kerberos 5 (krb5) through version 1.22.2 allows authenticated clients to cause a denial of service by triggering a NULL pointer dereference. This occurs when mismatched KRB-CRED arrays are sent, specifically when forwarded credentials contain more tickets than ticket_info entries, crashing GSS-API acceptor services.
Multiple critical security vulnerabilities have been identified in the X.Org X server and Xwayland, including CVE-2025-62231 which involves an unsigned short overflow in the X Keyboard (Xkb) extension's XkbSetCompatMap() function. Other issues include out-of-bounds reads and stack-based buffer overflows in various XKB components, leading to potential memory corruption, information disclosure, or denial of service. These vulnerabilities affect versions prior to xorg-server 21.1.23 and xwayland 24.1.12. Fixes have been released in these versions to address the issues.
Multiple critical vulnerabilities affect Apache HTTP Server versions from 2.4.0 through 2.4.68. These include unauthorized access to internal state files in mod_dav_fs, out-of-bounds write on Windows, improper privilege management in mod_ssl, FTP PASV reply address validation issues in mod_proxy_ftp, stack-based buffer overflow in mod_vhost_alias, NULL pointer dereference in mod_xml2enc, HTTP request smuggling via mod_proxy_uwsgi, path equivalence issues in mod_userdir, and integer overflow in mod_dav_fs. All these issues are fixed in version 2.4.69. Users are strongly recommended to upgrade to 2.4.69 to address these critical security flaws.
Multiple critical vulnerabilities have been identified in Apache HTTP Server versions from 2.4.0 through 2.4.68, including memory calculation bugs, NULL pointer dereferences, out-of-bounds writes, use-after-free conditions, information exposure, privilege management flaws, and HTTP request smuggling. These issues affect various modules such as mod_dav, mod_heartmonitor, mod_session_cookie, mod_charset_lite, mod_rewrite, mod_http2, mod_dav_fs, mod_ssl, mod_proxy_ftp, mod_vhost_alias, mod_xml2enc, mod_proxy_uwsgi, and mod_userdir. The vulnerabilities can lead to denial of service, information disclosure, arbitrary code execution, and privilege escalation. Users are strongly recommended to upgrade to Apache HTTP Server version 2.4.69, which addresses all these vulnerabilities.
Multiple critical vulnerabilities affect Apache HTTP Server versions from 2.4.0 through 2.4.68, including out-of-bounds writes, use-after-free, improper privilege management, and HTTP request smuggling. These flaws impact various modules such as mod_charset_lite, mod_rewrite, mod_http2, mod_dav_fs, mod_ssl, mod_proxy_ftp, mod_vhost_alias, mod_xml2enc, mod_proxy_uwsgi, and mod_userdir. The vulnerabilities can lead to remote code execution, denial of service, information disclosure, and privilege escalation. Users are strongly recommended to upgrade to version 2.4.69, which addresses all these issues.
Multiple critical vulnerabilities affect Apache HTTP Server versions from 2.4.0 through 2.4.68, including authentication bypass, denial of service, information disclosure, buffer overflow, and privilege management issues. These vulnerabilities impact various modules such as mod_auth_digest, mod_dav_fs, mod_ssl, mod_proxy_ftp, mod_vhost_alias, mod_xml2enc, mod_proxy_uwsgi, and mod_userdir. The issues allow unauthenticated remote attackers to cause denial of service, read unauthorized data, execute arbitrary code, or bypass authentication under certain configurations. Apache HTTP Server version 2.4.69 addresses all these vulnerabilities and is recommended for upgrade.
A path traversal vulnerability exists in the Kubernetes kubectl client's 'kubectl cp' command on Windows. This flaw allows a malicious tar binary inside a container to execute arbitrary code and write files to arbitrary paths on the local Windows machine when copying files from the container. The vulnerability is limited by the local user's system permissions and affects kubectl clients running on Windows prior to version 1.29.1-19.oe2403sp3.
Mozilla Thunderbird contained a critical heap buffer overflow vulnerability (CVE-2026-103500) triggered by opening an email of size 2GB or larger. This flaw allows remote attackers to cause severe impact including full confidentiality, integrity, and availability compromise. The issue was fixed in Thunderbird versions 157, 140.17, and 153.4.
Multiple critical security vulnerabilities affecting Mozilla Firefox were fixed in Firefox ESR 153.4 and Firefox 157. These include sandbox escapes, use-after-free bugs, mitigation bypasses, same-origin policy bypass, denial-of-service, privilege escalation, and cryptography misuse across various components such as the JavaScript engine, DOM, graphics, storage, and networking. The vulnerabilities could allow remote attackers to execute arbitrary code, escalate privileges, bypass security mitigations, or cause denial of service. The issues affect versions prior to Firefox ESR 153.4 and Firefox 157.
This content is an interview-style article profiling Corey Thuen, a hacker and CEO of Gravwell, discussing his philosophy on hacking, the concept of the 'evil bit' as an adversarial mindset, and his career path including work in cybersecurity and open source tools development. It does not describe a specific security vulnerability or threat.
This analysis covers rapid credential theft and data exfiltration attacks that occur within minutes of initial compromise, often outpacing traditional security detection and response. Attackers exploit stolen GitHub tokens, malicious AI tool installers, and MFA phishing to quickly access and exfiltrate sensitive data. Detection requires anomaly and behavior-based monitoring, while effective containment demands automated or autonomous response to minimize attacker dwell time. Manual response delays enable significant data loss. The threat highlights gaps in current identity provider detections and the need for integrated, fast-acting defense mechanisms.
In Z-Wave SDK 8.1.1 and earlier (for 700/800 series devices) and 6.85.02 and earlier (for 500 series devices), missing checks in the ZWAVE_CMD_NODES_EXIST handler can result in nodes being removed from the network. These messages must come from a device that has already joined the network.
In EmberZNet 9.1.1 and earlier, a malformed Simple_Desc_req response can result in an out-of-bounds write potentially leading to remote code execution. This response must come from a device that has already joined the network, and the attacker must wait for a Simple_Desc_req before the attack can be performed.