ZeroDay Findings
Sign inSign up

Every 4 hours

Cyber

Keywords match titles. Record type separates incidents, intel, and research from CVEs.

  1. Research · Oct 16, 2026 · Help Net Security

    Malware Exploits Typos in Arch Linux AUR Package Installation

    Recent findings reveal that malicious packages in the Arch Linux AUR can exploit user typos, potentially granting attackers root access to systems.

    What changed

    Malicious actors have taken advantage of typographical errors during the installation of AUR helpers like yay and paru. Users who inadvertently mistype these commands may unknowingly install compromised packages that grant root privileges to attackers.

    Who is affected

    This vulnerability primarily impacts users of Arch Linux and its derivatives who utilize the Arch User Repository (AUR) for software installation.

    The following groups are particularly at risk:

    • Arch Linux users who rely on AUR helpers like yay and paru.
    • Developers and maintainers of packages in the AUR.
    • Organizations using Arch Linux for development or production environments.
    • General users who may install packages from unverified sources.

    What to do

    Users are advised to exercise caution when installing packages from the AUR and to verify the authenticity of the packages before installation. It is recommended to double-check command inputs to avoid typos.

    Additionally, consider implementing the following measures:

    • Regularly audit installed packages for any unauthorized changes.
    • Utilize security tools to monitor for unusual activity on systems.
    • Stay informed about updates and advisories from Arch Linux and related communities.

    Original report

  2. Research · Oct 16, 2026 · SecurityWeek

    Critical Vulnerabilities Patched by F5 and Juniper Networks

    F5 and Juniper Networks have released patches addressing critical vulnerabilities that could allow remote code execution and complete device control.

    What changed

    F5 and Juniper Networks have issued important security updates to mitigate critical vulnerabilities in their products. These vulnerabilities, if exploited, could enable attackers to execute arbitrary code remotely, potentially leading to a complete takeover of affected devices.

    Who is affected

    Organizations utilizing products from F5 and Juniper Networks may be at risk due to these vulnerabilities. Prompt action is necessary to secure systems and prevent potential exploitation.

    • F5 Networks products, including application delivery controllers and security solutions.
    • Juniper Networks routers and switches that are part of enterprise networks.
    • Any organizations relying on these vendors for network infrastructure and security.

    What to do

    Security teams should prioritize the application of the latest patches provided by F5 and Juniper Networks. Conduct thorough assessments of network devices to identify any that may be vulnerable.

    • Review and apply the latest security updates from F5 and Juniper Networks immediately.
    • Monitor network traffic for any suspicious activity that may indicate exploitation attempts.
    • Educate staff about the importance of maintaining updated systems to mitigate risks.

    Original report