● On the wire
Ubuntu 16.04 LTS Linux kernel Privilege Escalation Vulnern USN-8548-1//Ubuntu 16.04 Ruby Critical IMAP Injection Buffer Overflow USN-8556-1//Ubuntu 24.04 LTS Linux Kernel Important Security Advisory USN-8569-1//Cisco RoomOS Security Hardening Release: July 2026//Ubuntu 26.04 Tar Important Regression Extraction Issue USN-8477-2//Ubuntu 26.04 Linux Kernel Privilege Escalation Vulnerabilities USN-8568-1//Ubuntu 20.04 LTS Linux Kernel Important Security Fixes USN-8547-1//Ubuntu 26.04 FreeType Important Denial of Service CVE-2026-50811//Debian Chromium Critical Denial of Service Info Disclosure DSA-6390-1//Ubuntu 26.04 SQLite Critical DoS Buffer Overread USN-8565-1//Ubuntu 26.04 nginx Critical Denial of Service Vuln 8563-1//Ubuntu 26.04 LTS Python-idna Important DoS Issue 8549-1//Ubuntu 26.04 libslirp Important Info Exposure CVE-2026-9539 Advisory 8550-1//Ubuntu 24.04 LTS Linux Kernel Critical Security Update 8570-1//Debian tiff Critical Denial of Service or Code Exec Advisory DSA-6392-1//Ubuntu 16.04 LTS Linux kernel Privilege Escalation Vulnern USN-8548-1//Ubuntu 16.04 Ruby Critical IMAP Injection Buffer Overflow USN-8556-1//Ubuntu 24.04 LTS Linux Kernel Important Security Advisory USN-8569-1//Cisco RoomOS Security Hardening Release: July 2026//Ubuntu 26.04 Tar Important Regression Extraction Issue USN-8477-2//Ubuntu 26.04 Linux Kernel Privilege Escalation Vulnerabilities USN-8568-1//Ubuntu 20.04 LTS Linux Kernel Important Security Fixes USN-8547-1//Ubuntu 26.04 FreeType Important Denial of Service CVE-2026-50811//Debian Chromium Critical Denial of Service Info Disclosure DSA-6390-1//Ubuntu 26.04 SQLite Critical DoS Buffer Overread USN-8565-1//Ubuntu 26.04 nginx Critical Denial of Service Vuln 8563-1//Ubuntu 26.04 LTS Python-idna Important DoS Issue 8549-1//Ubuntu 26.04 libslirp Important Info Exposure CVE-2026-9539 Advisory 8550-1//Ubuntu 24.04 LTS Linux Kernel Critical Security Update 8570-1//Debian tiff Critical Denial of Service or Code Exec Advisory DSA-6392-1//
Backdoored AI code completions need forensic analysis as poisoned training data becomes a supply-chain risk
Top story — News

Backdoored AI code completions need forensic analysis as poisoned training data becomes a supply-chain risk

A Help Net Security piece describes a forensic tool designed to trace backdoored code completions generated by AI assistants. The concern is that code used to train large models may have been tampered with before training, allowing poisoned examples to influence later suggestions. In practice, that could teach an assistant to emit insecure or malicious code only when a certain…

Read the article →
Sourcehelpnetsecurity.com
From the newsroom