Vulnerability (CVE)
OpenAI released an improved GPT-5.5-Cyber model to trusted defenders under its Daybreak initiative, saying it can sustain deeper analysis across large codebases to find, validate, and patch vulnerabilities, alongside an updated Codex Security plugin for...
A heap over-read in the Squid web proxy, traced to a 1997 FTP-parsing change and still present in the default configuration, can leak another user's cleartext HTTP request, including credentials and session tokens, to anyone already permitted to send...
This week's recap details DirtyClone (CVE-2026-43503), a new variant of the Dirty Frag Linux kernel flaw that lets local users gain root privileges via cloned packets, working on Debian, Ubuntu, and Fedora with default namespace configurations. JFrog said...