util-linux 2.42.3 includes vulnerability fixes, with a commit link shared for downstream tracking but no CVEs cited.
An oss-security post links a util-linux commit (286dd3ff41526b582ef48830de239dffbaa61f90) as part of the 2.42.3 vulnerability fix release. No CVE identifiers, flaw descriptions, or exploitation details are provided. The item is a routine open-source fix notification for downstream distributors.
A Metasploit Framework commit adds a DefangedMode advanced option to an exploit module that modifies the target host configuration.
The commit introduces a DefangedMode advanced option so that the exploit's modification of the target configuration runs only explicitly, making the behavior visible to the user. No target product, affected software, or CVE identifier is named in the commit message.
FBI arrested CBP supervisor Terry Liu for swapping CPUs, RAM and drives in 46 DHS computers and trading stolen parts via Newegg.
The FBI arrested and charged CBP supervisor Terry "Jiajia" Liu of Calais, Maine, with theft of government property after hidden cameras captured hardware swaps on midnight shifts. Investigators found 39 processors replaced, six memory modules swapped, and eight hard drives changed across 46 DHS computers at three Maine border facilities, with original Intel 14th-gen Raptor Lake Refresh chips downgraded to older, sometimes Pentium-class parts. Liu traded in the stolen Core i7 chips 16 times via Newegg's trade-in program over 14 months for roughly $200-210 each. Restoring the stolen hardware is estimated at $20,460, with full replacement around $105,800.
Malwarebytes' Lock and Code podcast examines loyalty-points theft, with LexisNexis' Kim Sutherland explaining why stolen airline and hotel points are lucrative for fraudsters.
LexisNexis Risk Solutions' Kim Sutherland says loyalty currency is worth roughly one cent per point, making 100,000 airline points worth about $1,000 in the US. Cited incidents include a Chicago teacher who lost 240,000 airline points, discovered only via a confirmation email, and a man whose miles were used to book rental cars in New York and Memphis. The episode discusses how points theft happens and what companies and consumers can do.
Cisco released IOS XR security hardening fixes for multiple internally discovered vulnerabilities, grouped by CWE class, with no known active exploitation.
Cisco's IOS XR engineering team conducted a comprehensive internal security review and released hardening updates addressing multiple internally discovered vulnerabilities. The issues were found during internal testing and are not known to be actively exploited. Cisco grouped the vulnerabilities by CWE class and assigned a single CVE ID to each grouping to streamline patching and disclosure.
Malwarebytes warns tech support scammers now abuse sponsored search results, fake listings, calendar invites, and Apple Pay notifications, and shares red flags for impersonation scams.
Malwarebytes describes how tech support scams have expanded beyond browser locks and fake virus warnings to sponsored search results, hijacked on-site searches, fake platform listings, renewal scams, fake calendar invites, and Apple Pay notifications. Scammers impersonate trusted security companies including Malwarebytes, seeking payment, personal information, or remote access to victims' computers. Malwarebytes notes it does not outsource support, never makes unsolicited calls, and works with the FTC and the Global Anti-Scam Alliance to combat these scams.
Cisco released an August 2026 Crosswork security hardening update addressing multiple internally discovered vulnerabilities, grouped by CWE class with one CVE per grouping.
Cisco's Crosswork engineering team completed a comprehensive internal security review and shipped a hardening release fixing multiple internally discovered vulnerabilities. The issues were found during internal testing, are grouped by CWE class, and each grouping received a single CVE ID. Cisco states these vulnerabilities are not known to be actively exploited.
Cisco shipped August 2026 hardening releases for Secure Workload fixing multiple internally discovered vulnerabilities that are not actively exploited.
Cisco's Secure Workload engineering team completed an internal security review that found multiple vulnerabilities during internal testing. The issues are grouped by CWE class with a single CVE assigned per grouping, and none are known to be actively exploited. Cisco has released hardening updates for customers to patch.
Unit 42 found a Muhstik botnet variant brute-forcing Tomato router web authentication to harvest IoT devices for crypto mining and DDoS attacks.
Palo Alto Networks Unit 42 researchers in December 2019 identified a new Muhstik botnet variant scanning Tomato routers on TCP 8080 and brute-forcing default admin credentials, targeting roughly 4,600 exposed devices found via Shodan. The variant also scans WordPress and Webuzo installations and exploits the Oracle WebLogic deserialization flaw CVE-2019-2725 for unauthenticated remote code execution. Muhstik, active since March 2018, self-propagates like a worm and typically monetizes infections through cryptocurrency mining and DDoS attacks controlled via an IRC C2 channel.