Help Net Security سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۹:۴۵

X.Org patches eight server vulnerabilities a month after fixing 12 others

X.Org has fixed eight vulnerabilities in the X.Org X server and Xwayland, including one in the Xorg server that lets a malicious monitor corrupt its memory. The fixes ship in xorg-server 21.1.26 and xwayland 24.1.15, and each of the eight affects versions before those two releases. The X server provides the low-level display layer for graphical desktops on many Linux and Unix systems. Xwayland runs X11 applications o…

Vulnerabilities & Zero-Day Operating Systems

Read the full article at Help Net Security Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

BleepingComputer سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۹:۴۷

Critical Xen Orchestra auth bypass flaw exploited to hijack VM servers

A critical authentication bypass vulnerability in Xen Orchestra is being actively exploited in attacks that could grant administrator privileges and allow takeover of XCP-ng virtualization hosts. [...]

Vulnerabilities & Zero-Day Identity & Access Security

Source

Graham Cluley سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۹:۳۵

Iranian hackers turned up the heat on French supermarket freezers, says France

Iran has been officially accused by France of being responsible for cyber attacks last month that meddled with supermarket freezers, causing some to catch fire. Read more in my article on the Hot for Security blog.

Vulnerabilities & Zero-Day

Source

The Hacker News سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۹:۳۰

Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor

Cybersecurity researchers have disclosed details of an attack that exploited two now-patched vulnerabilities in AhsayCBS to deliver a Python-based implant. The activity, observed by Huntress in October 2026, involves the exploitation of a chain comprising CVE-2026-105133 and CVE-2026-105134 to bypass authentication and execute arbitrary commands on affected systems. Patches for the two

Malware & Threats Vulnerabilities & Zero-Day Programming & Languages

Source

eSecurityPlanet سه‌شنبه ۱۹ آبان ۱۴۰۵ · ۱۹:۳۰

Japan Unveils Cybersecurity Package to Combat AI-Assisted Attacks

Japan announces a $63 million cybersecurity package featuring an AI-powered vulnerability testing team, stronger threat intelligence, and faster incident response.

Vulnerabilities & Zero-Day Threat Intelligence Incident Response & Forensics

Source