The popular Python package for monitoring data quality was briefly available as a malicious version. Provider Elementary ...

Malicious Lightning 2.6.2/2.6.3 released April 30 enable credential theft via hidden payload, leading to PyPI quarantine and ...

CVE-2026-31431 CVSS 7.8 flaw since 2017 enables root via 732-byte exploit, impacting major Linux distributions.

Publicly released exploit code for an effectively unpatched vulnerability that gives root access to virtually all releases of ...

ESET researchers have investigated an ongoing attack by the ScarCruft APT group that targets the Yanbian region via ...

Developers of major Linux distributions have begun shipping patches to address a local privilege escalation (LPE) ...

CISA has warned that threat actors have started exploiting the "Copy Fail" Linux security vulnerability in the wild, one day ...

Batten down the distros.

An attacker pushed a malicious version of the popular elementary-data package Python Package Index (PyPI) to steal sensitive ...

Say "no" to running dubious scripts.

Experts say until the distros release patches, CSOs have to beware of unauthorized privilege escalation; Kubernetes container ...