Additional Linux privilege escalation exploits related to long-existing bugs have been disclosed, so patch ASAP.

Packagist packages hid malicious package.json scripts, enabling Linux binary execution during installs and workflows.

CVE-2026-46333 is a nine-year Linux kernel improper privilege management flaw introduced in November 2016 with a CVSS score ...

A multi-stage attack on Linux devices began with an exposed F5 BIG-IP edge appliance and pivoted to an internal Confluence ...

Drupal is warning that hackers are attempting to exploit a "highly critical" SQL injection vulnerability announced earlier ...

There was a way to elevate normal Linux users' privileges to root, granting threat actors admin access.

Drupal warns users that it has seen attempts to exploit CVE-2026-9082 and security firms are seeing attacks against thousands ...

In its warning, Drupal said a vulnerability in this API allows an attacker to send specially crafted requests resulting in ...