The Hacker News

Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone

Unbound 1.26.1 fixes a critical DNSSEC heap overflow that malicious zones can trigger, with possible remote code execution.
Hosted on MSN

An 18-year-old heap buffer overflow in NGINX gives attackers remote code execution — billions of devices run the affected module

A single rewrite rule, the kind pasted into NGINX configurations thousands of times a day, can hand an unauthenticated attacker full remote code execution on the underlying server. The vulnerability, ...
Phoronix

NTFS-3G Update Brings Many Security Fixes

NTFS-3G 2026.9.18 was released this morning as the newest update to this FUSE-based open-source driver for NTFS file-system support. NTFS-3G continues kicking for Linux and other FUSE-supported ...