📰 Daily Digest — September 21, 2026

• Portainer 3.0 Pivots to Kubernetes, Shuffles Free Tier
• Gzip 1.15 Fixes Bugs Present Since the Dawn of Time
• Linux 7.3-rc4: File Systems and LLM Cleanups Dominate
• KDE Lays Out Two-Year Plan for Enterprise, Theme Engines, and Docs
• Clonezilla Live 3.3.3-37 Adds HTTP Boot and Ditches Legacy Net-Tools
• MX Linux 25.3 Ships with Smart Storage Defaults and New Tools
• Garuda Linux Wraps NixOS in Neon and Declarative Flakes
• Intel Microcode and APX Compiler Bugs Patched in Linux 7.3-rc4
• FOSS Digest: From Anti-AI Office Suites to Void Linux Drama
• Linux 7.3-rc4 Welcomes Quirky Gamepads and Fixes Laptop Touchpads
• Vulkan 1.4.363 Ends Fragile Intel GPU Look-Up Tables
• Starling 0.5 Revives the Useless 3D Desktop Fad via AI
• Under the Hood of NVIDIA's 400Gbps QSFP112 Optical Modules

https://or1k.net/digests/daily-digest-2026-09-21/

📰 Daily Digest — September 22, 2026

• Keep Your VMs Humming While the Host Kernel Reboots
• Perf Script Ditches Embedded Python for Massive Speedups
• Mainline Apple Silicon Audio Patches Are Here (And Terrifying)
• Kubernetes 1.37 Finally Figures Out If Storage Is in Use
• WebKitGTK and WPE WebKit Drop Legacy Compositor for Skia
• Red Hat OpenShift Gets Quantum-Safe, but the Hard Part Remains
• Rsync 3.5.1 Patches Scary Path Regressions and Steps Up Protocol
• GNU Wget 2.3 Brings Back the Dot Progress Bar and OS/2 Love
• Nebula Matrix SmartNIC Driver Headed for Linux 7.4
• Valve Tests 'Pyrowave,' a Vulkan-Powered LAN Streaming Codec
• Greg Kroah-Hartman Drops Three Massive Stable Kernel Updates
• North Korean Hackers Weaponize Terraform to Hijack macOS Nodes
• ChainScript RAT Abuses Polygon Smart Contracts for C2 Rotation
• Fake LastPass Installer Abuses Microsoft-Signed Driver to Kill AV
• TASK#STOMP PowerShell Backdoor Uses Dual-Process Watchdogs

https://or1k.net/digests/daily-digest-2026-09-22/

📰 Daily Digest — September 23, 2026

• KVM on ARM64 gets a guest-to-host escape hatch
• systemd 262 ships fallback units and an AI canary
• Canonical rakes in $345M in revenue for 2025
• Arch Linux update breaks TPM2-based LUKS decryption
• Alibaba drops $3 million to turn Omarchy into an "AI Agent" OS
• Red Hat pushes Ansible Automation Platform 2.7
• Kubernetes SIG Apps tries to balance reliability with AI workloads
• Linux 7.4 finally exposes AMD SEV status via sysfs
• Kernel scheduler fixes patch up Cache Aware Scheduling bugs
• KDE lays out its 2026-2028 roadmap for enterprise and styling
• PeppermintOS embraces the controversial XLibre to avoid Wayland
• California clamps down on unchecked data center expansion
• Critical Bifrost AI gateway bugs allow unauthenticated code execution
• Active exploits target critical CVSS 10.0 VeloCloud Orchestrator bug
• Check Point zero-day allowed unauthenticated script execution

https://or1k.net/digests/daily-digest-2026-09-23/

📰 Daily Digest — September 24, 2026

• F5 Patches Actively Exploited BIG-IP APM OAuth Zero-Day
• Critical Next.js ImageResponse Flaw Risks Server Execution
• Chinese Threat Actors Chain Chrome and Windows Zero-Days
• DepthFirst Drops Exploit for Unpatched Ubuntu Container Escape
• MikroTrick Chain Grants Root Router Takeover Without Password
• cPanel CalDAV Flaw Allows Full Root Server Takeover
• Radicle Network Protocol Discloses Critical Auth and Privacy Flaws
• Systemd v262 Lands with Static Binary Builds and OpenSSL 4
• Qualcomm Showcases Linux Bring-Up for Snapdragon X2 Laptops
• F5 Details Indicators of Compromise for BIG-IP APM Zero-Day
• Wireshark 4.6.9 Fixes Nineteen Bugs Including RCE Dissector Flaws
• NTFS-3G Driver Update Patches Multiple Heap Buffer Overflows
• FreeRDP 3.32 Adds Microsoft Entra Integration and RAIL Support
• Proposing a Human-First LLM Policy for the GNOME Project
• Qualcomm Posts Open-Source Patches for Adreno 850 Graphics

https://or1k.net/digests/daily-digest-2026-09-24/

📰 Daily Digest — September 25, 2026

• VeloCloud's On-Prem Orchestrator Suffers CVSS 10.0 Bypass
• Unpatched WordPress Themes Open the Door to Instant RCE
• Linux File-Notification API Abused to Spy on Users
• Jonathan Corbet Resurrects the Kernel Report for 2026
• Proposed 'slab_tiny' Boot Option Aims to Clean Up Allocations
• Fuzzing Bots Force Linux to Add a New Kernel Taint Flag
• Canonical Speeds Up Ubuntu Kernel Releases to Fight AI CVEs
• openSUSE Leap 16.1 Approaches Release Candidate Phase
• Qualcomm Drops Snapdragon X2 Developer Preview for Linux
• F-Droid 2.0 Delivers Modern Material Design and Compose Rewrite
• COSMIC Epoch 1.9 Lands Native Image Viewer and On-Screen Keyboard
• Mir 2.30 Makes Rust Mandatory to Align with Ubuntu 26.04
• KDE Plasma 6.8 Beta Welcomes Backups and Expanded Themes
• What's Up Docker 9.0 Swaps LokiJS for SQLite and Adds RBAC
• ReactOS Merges Massive Wine 10.0 DirectX Update

https://or1k.net/digests/daily-digest-2026-09-25/

📰 Daily Digest — September 26, 2026

• CISA KEV Adds Adobe Commerce and WSO2 RCE Flaws
• Cloudflare Forgot to Zero Shared Container Disks
• Roundcube SQL Injection Actively Exploited in the Wild
• Dutch Government Moves to NixOS After Microsoft Sanctions
• systemd Adds Built-In systemd-report Infrastructure
• Samba 4.25 Arrives with SMB3 Persistent Handles
• The Battle Over LLM-Generated Code in GNOME and KDE
• GNOME Community Updates: Era Calendar and Deep Dive
• Git Contributors Outline Plans for Git 3.0
• Mageia 9 Reaches End of Life on September 30
• Re-Enabled GitHub Actions Resumed Serving Malware
• Red Hat Automates DISA STIG Compliance for RHEL 10
• AI Hype Drives Nvidia RTX 5090 Prices to $5,000
• AMD Lays Out Zen 6 Venice EPYC 9006 CPU Details

https://or1k.net/digests/daily-digest-2026-09-26/

📰 Daily Digest — September 27, 2026

• Kiteworks Tells Customers to Shut Down Everything for Nine Hours
• Microsoft and MikroTik Bugs Chained and Exploited in the Wild
• Image-Based Linux Desktops Still Have a Developer Toolchain Problem
• Sharing Nvidia GPUs via KVM Without PCI Passthrough
• Incus 7.5.1 Arrives with OVN Upgrades and Critical Security Fixes
• GDB 18.1 Brings Cleaner Windows Support and Indexing Fixes
• Attackers Bypass WAFs with Basic URL Encoding to Hit PeopleSoft
• Lunex Stealer Blinds Security Software Using a Vulnerable AMD Driver
• SteamOS 3.9.2 Beta Tightens Up Hardware Support and Performance
• Proton Experimental Fixes CEG Games and AMD CPU Crashing
• PeaZip 11.3 Enforces Master Passwords and Tightens File Extraction
• Fastfetch 2.69 Drops ImageMagick and Adds Animated Logos
• OBS Studio 33 Beta 4 Overhauls Plugins and Upgrades CEF
• Solus Linux Sets Rules for AI-Generated Contributions
• AlmaLinux Launches Crowdsourced Hardware and Software Certification

https://or1k.net/digests/daily-digest-2026-09-27/

📰 Daily Digest — September 28, 2026

• Citrix Left the Door Wide Open Again
• Apprise 2.0 Finally Fixes Notification Retries
• Noctalia 5.2 Refines Its Wayland Window Switcher
• postmarketOS Rebrands to Nura
• Budgie 10.10.3 Adds Menu Favorites and Free Icon Placement
• Klassik Brings KDE 3 Back on Top of Plasma 6
• Vigilantism in Bug Reports Helps Nobody
• Linuxiac Weekly Wrap-Up for Week 39
• openSUSE Leap 16.1 RC Brings Built-in Immutable Mode
• OpenShot 4.0.1 Upgrades the Razor Tool and Linux Support
• OneTek Expands Full Fibre Network in Scotland
• Tellico 4.3 Celebrates 25 Years of Collection Management

https://or1k.net/digests/daily-digest-2026-09-28/

📰 Daily Digest — September 29, 2026

• Patch your NetScaler boxes now, or enjoy the breach
• CISA confirms active exploitation of NetScaler zero-days
• Git 2.56 lands with safer conflict resolution mechanics
• Fedora Linux on Snapdragon X1 laptops gets less painful
• GNOME 49.10 arrives as the final maintenance drop
• KDE Plasma 6.8 gives the classic Oxygen theme an accent color
• Shotcut 26.9 video editor adds audio ducking and FFmpeg 9.0
• Git 2.56 hits the mailing list with fresh contributors
• Carbonato botnet uses AI agents to pillage Docker hosts
• Securing AI agents means locking down the underlying OS
• Network digital twins replace testing in production
• NVIDIA launches Open Agent Safety Platform with kernel sandboxing

https://or1k.net/digests/daily-digest-2026-09-29/

📰 Daily Digest — September 30, 2026

• MCP Python SDK OAuth credential theft flaw
• OpenSSL 4.0.3 drops with 14 CVE fixes
• Spectre-v2 BTR attack leaks Linux kernel memory
• Firefox 157 ships hardware AV1 decoding
• Archinstall 4.5 adds AArch64 and RT kernels
• Firefox defaults to Nova redesign
• GoZen 0.14 video editor hits beta
• AMD buys World Labs for 8.2 billion

https://or1k.net/digests/daily-digest-2026-09-30/

📰 Daily Digest — October 1, 2026

• OpenStack Hibiscus Lands With AI Scaling and Security Fixes
• OpenSSL DTLS Flaw Leaks Heap Memory and Crashes Daemons
• Citrix NetScaler Pre-Auth RCE Exploited in the Wild
• Cisco Catches Zero-Day Exploits in SD-WAN Manager API
• AI Coding Agents Accidentally Leak Internal Data to Public GitHub
• Gitea 28.0 Drops 1.x Scheme and Adds Built-In Audit Logs
• Zimbrite Flaw Weaponized for Web Shells and Credential Harvest
• Microsoft Generalizes WSL Containers for Native Windows Use
• OpenTofu 1.13 Brings Windows ARM64 and Smarter Planning
• Tcl/Tk 9.1 Gains Screen Reader Accessibility and RTL Text
• Python Language Summit Reports Detail Free-Threaded Future

https://or1k.net/digests/daily-digest-2026-10-01/

📰 Daily Digest — October 2, 2026

• Cisco Catalyst SD-WAN Hit by Absurdly Simple Auth Bypass
• Spectre-v2 Strikes Again With Branch Target Reuse on Linux
• Rust 1.99.0 Lands with Variadics and Pointer Helpers
• Nvidia Enforces AI Agent Safety at the Kernel and Hardware Levels
• Thunderbird Is Finally Building a Real iOS App
• Raspberry Pi 2GB Models Get a Steep Price Hike
• Record Labels Try to Label CLI Tool yt-dlp as Piracy
• Clean Up Your Homelab with Local DNS and a Reverse Proxy

https://or1k.net/digests/daily-digest-2026-10-02/

📰 FortiMail CVE-2026-104286 - GitLab Flaw - Dell CSM: Digest for October 3, 2026

• Cloudflare Wants to Be Your Next Free CA
• Fortinet Bungles Basic Input Validation in FortiMail
• GitLab AI Gateway Flaw Opens Door to Command Execution
• Dell CSM Fails Every Basic Security Exam in the Book
• systemd-appd Aims to Clean Up Desktop Application Tracking
• The Exhausting Reality of AI-Driven Vulnerability Scanning
• COSMIC Draws a Hard Line Against LLM-Generated Code
• Ubuntu Eyes Sequoia PGP to Finally Replace Legacy GnuPG
• Ubuntu Preps SHA3 Support for APT to Avoid Cryptocalypse
• Linux 7.4 Lands Initial Support for Apple M4 and A18 Pro
• KDE Linux Might Drop Arch Packages in Favor of BuildStream
• Red Hat OpenShift Prepares for RHCOS 10 Hardware Requirements
• Coreboot 26.09 Modernizes Codebase, Targets AMD Turin openSIL
• The EU Cyber Resilience Act Ends Free-Lunch Open Source Auditing
• AI Hardware Startup Apex Compute Chooses Mesa and Vulkan

https://or1k.net/digests/daily-digest-2026-10-03/

📰 Zig 0.17, Microsoft Rust Tier-1 - Obscura VPN: Digest for October 4, 2026

• Zig 0.17 Delivers Working x86_64 Incremental Compilation
• Greg Kroah-Hartman Drops Seven Fresh Stable Kernels
• Microsoft Promotes Rust to Internal Tier-1 Status
• Vincent Guittot's Scheduler Patches Tackle Peak Latency
• Arm Tackles Massive Core Counts With TLBI Domains
• Parrot OS 7.4 Cleans Up KDE and Overhauls AnonSurf
• Valve's Timur Kristóf Breathes New Life Into Ancient AMD GPUs
• Warlock Group Hijacks SharePoint Using Vulnerable Drivers
• Wine 11.19 Lands Vulkan Color Management on Wayland
• openSUSE Factory Adopts ZUPT Post-Quantum Backup Tool
• LunarG's KosmicKrisp Achieves Vulkan 1.4 Conformance on macOS
• KDE Plasma 6.8 Beta 2 Squared Up for Release
• NVIDIA Hikes GB10 Prices and Drops a Costly 64GB Model
• Carl Dong's Obscura VPN Replaces No-Logs with Cryptography
• KDE Akademy 2026 Focuses on Continuous Delivery and Wayland

https://or1k.net/digests/daily-digest-2026-10-04/