s4zero

‼️Breaking - Debian APT Flaw Lets Hackers Hijack Software Updates and Execute Code as Root Details: cybersecuritynews.com/debian… A newly disclosed bug in APT, the package manager behind Debian and Ubuntu, can let a network spy swap a trusted software package for a bad one. The flaw is tracked as CVE-2026-109518 and can end in code running with root rights, the highest level of control on a Linux system. APT checks each package against signed data before it installs anything. This flaw lets an attacker get around that check. According to Debian, APT can merge two different package downloads after an HTTP redirect gives them the same address. When APT resumes an interrupted download, it handles the file badly, and that opens a short window to replace the package after it has been verified. #CybersecurityNews

Multiple NGINX Flaws Let Remote Attackers Crash Servers and Execute Malicious Code Details: cybersecuritynews.com/multip… F5 has disclosed three serious security flaws in NGINX Plus and NGINX Open Source that can let remote, unauthenticated attackers crash worker processes by sending crafted HTTP requests. The flaws are tracked as CVE-2026-97205, CVE-2026-93479, and CVE-2026-15176. F5 published the three advisories on October 14, 2026, and rated every issue High at 8.1 under CVSS v3.1 and Critical at 9.2 under CVSS v4.0. The bugs do not make every NGINX server vulnerable by default because each one needs a specific software version and configuration. F5’s advisories do not report active exploitation of these three newly disclosed flaws. #cybersecuritynews