BCacheFS is being disabled in the openSUSE kernels 6.17+(lwn.net)

44 points by 6581 1 year ago | 36 comments

Libxml2's "no security embargoes" policy(lwn.net)

254 points by jwilk 1 year ago | 207 comments

OpenSSH 9.5 released with keystroke timing obfuscation(lwn.net)

199 points by surteen 3 years ago | 41 comments

Several vulnerabilities have been discovered in the Linux kernel(lwn.net)

529 points by luispa 24 days ago | 380 comments

LWN.net repost of Debian Security Advisory DSA-6528-1, a Linux kernel security update fixing numerous CVEs, dated September 29, 2026.

A free and open-source rootkit for Linux(lwn.net)

190 points by jwilk 9 months ago | 40 comments

Security issues discovered in sudo-rs(lists.debian.org)

7 points by kahlonel 11 months ago | 3 comments

August 27 TCRF DDoS Attack Postmortem(blog.xkeeper.net)

15 points by panic 1 month ago | 6 comments

A blog postmortem by xkeeper describing an August 27 DDoS attack against The Cutting Room Floor (TCRF) wiki and how it was handled.

Three Days in August: What a DDoS Attack Exposed in Our Network(nine.ch)

19 points by nine_ch 28 days ago | 16 comments

Blog post from Swiss cloud provider Nine describing a three-day DDoS attack in August and what it revealed about weaknesses in their network.

New Linux udisks flaw lets attackers get root on major Linux distros(bleepingcomputer.com)

336 points by smig0 1 year ago | 227 comments

BleepingComputer news article about a udisks vulnerability that lets attackers gain root privileges on major Linux distributions.

Vercel April 2026 security incident(bleepingcomputer.com)

817 points by colesantiago 6 months ago | 466 comments

Vercel security bulletin disclosing unauthorized access to certain internal systems in April 2026, affecting a limited subset of customers, with an ongoing investigation.

RCE Vulnerability in React and Next.js(github.com)

559 points by rayhaanj 10 months ago | 214 comments

GitHub security advisory GHSA-9qr9-h5gf-34mp for a critical (CVSS 10.0) remote code execution vulnerability in React Server Components affecting Next.js, with patched versions listed.

Mastercard DNS error went unnoticed for years(krebsonsecurity.com)

925 points by todsacerdoti 1 year ago | 228 comments

KrebsOnSecurity article on a MasterCard DNS server misconfiguration, a typo'd nameserver domain that went unnoticed for nearly five years until a researcher registered it.