NewsSecurityWeek
In Other News: Anthropic Maps AI Threats, Unpatched Comodo Flaw, Palantir Chief Eyed for CISA
More on Other
Other advisories
- Not ratedCVE-2026-97209Insecure temporary file in mix deps.partition lets a local user execute code in another user's dependency build
- Not ratedosv:CLEANSTART-2026-UA87106Like many other SSH implementations, Apache MINA SSHD suffered from the issue that is more widely known as CVE-2023-48795
- Not ratedosv:CVE-2026-85749MailWatch: IDOR lets any authenticated user release or delete another tenant's quarantined mail
- MediumCVE-2026-112908filelock: StrictSoftFileLock creates its claim directories without the lock mode, so another local user with a write bit on them can end a live hold
- Not ratedCVE-2026-112908filelock: StrictSoftFileLock creates its claim directories without the lock mode, so another local user with a write bit on them can end a live hold
- MediumCVE-2026-112911filelock: StrictSoftFileLock and SoftReadWriteLock adopt a protocol directory another user created first, losing mutual exclusion
- MediumCVE-2026-112911filelock: StrictSoftFileLock and SoftReadWriteLock adopt a protocol directory another user created first, losing mutual exclusion
- MediumCVE-2026-112939filelock: SoftFileLock removes a live holder's marker when another user forges the PID in a writable marker
Other news entries
- A deep dive into China’s Volt Typhoon suggests it is preparing for an assault on infrastructureNewsCSO Online
- ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More StoriesNewsThe Hacker News
- Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other DistributionsNewsThe Hacker News
- Imposter abused trust in OpenAI, Anthropic, and 30 others to hunt for secretsNewsCSO Online
- Telegram Android Flaw Lets Attackers Run Code When Users Answer Voice CallsNewsThe Hacker News
- Shadowy AI Relay Disables OpenAI Codex, Claude Code SandboxesNewsDark Reading
- Binance says a compromised DevOps laptop led to a $6.3B hack; it will cover all losses and about $3B is frozenBreachpwn.watch
- Oracle celebrates end of Cybersecurity Awareness Month with quadruple troubleNewsThe Register — Security
ID