News
ai OpenCode breach exposes stored OpenAI and Anthropic keys, prompts urgent key rotation - Startup Fortune - Anthropic - Claude AI cybersecurity Microsoft 365: let an app send mail from chosen mailboxes only - Pro CISO cybersecurity Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack - BleepingComputer cybersecurity Drupal patches critical RCE flaws, warns exploits may emerge soon - BleepingComputer threat-intel Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups - GBHackers cybersecurity ConnectWise SkyKick Credentials Abused in Microsoft 365 Attacks, Backup Services Shut Down - CyberPress cybersecurity Encryption Is Getting Squeezed From All Sides - Wired Security cybersecurity MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon - The Hacker News cybersecurity Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel - SecurityWeek threat-intel Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years - GBHackers threat-intel Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication - GBHackers threat-intel OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root - GBHackers threat-intel GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories - GBHackers threat-intel SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data - GBHackers cybersecurity Anthropic’s Claude AI Solves 25-Year-Old NSA Cryptography Mystery in Under 30 Minutes - CyberPress
1 / 15
All news ›
Vulnerability

USN-8929-1: Bind vulnerabilities

Ubuntu Security Notices ·

Zuyao Xu and Xiang Li discovered that Bind incorrectly handled certain malformed DNSKEY records. A remote attacker could possibly use this issue to cause Bind to consume resources, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. (CVE-2025-8677) Yuxiao Wu, Yunyi Zhang, Baojun Liu, and Haixin Duan discovered that Bind incorrectly accepted certain records from answers. A remote attacker could possibly use this issue to perform a cache poisoning attack. This issue only affected Ubuntu 18.04 LTS. (CVE-2025-40778) Samy Medjahed discovered that Bind incorrectly handled insecure delegation validation. A remote attacker could possibly use this issue to cause excessive NSEC3 iterations, consuming CPU resources, and leading to a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2026-1519) It was discovered that Bind incorrectly accepted NSEC3 records whos

Continue on Ubuntu Security Notices ↗ ‹ All news Get the newsletter