system administrators

Several security vulnerabilities have been discovered in the Linux kernel, prompting attention from system administrators and developers who rely on the open-source operating system. Details are being circulated on LWN, a widely read Linux and free software news outlet. Kernel flaws of this kind typically require patched releases to prevent local or remote attacks against affected systems.

Nigeria is working to strengthen its land administration and mortgage systems to make housing more accessible and inclusive. The effort focuses on improving land registration and expanding mortgage access so that more Nigerians, particularly lower-income households, can own homes. Observers note that weak land titling and limited mortgage finance have long been major barriers to affordable housing across the country.

The U.S. Supreme Court has issued rulings touching on mail ballots, congressional district maps, and the SAVE database, a federal system for verifying voter eligibility. The decisions arrive at a time of ongoing national disputes over election rules and voting access, and they are likely to shape how states run elections and draw district boundaries.

Community banks are publicly opposing Trump-era banking regulators' moves to approve crypto-focused charters, according to a Wall Street Journal report. The banks argue that granting federal charters to digital-asset firms threatens deposit levels and creates unfair competition with less-regulated players. The dispute marks a rare clash between traditional community lenders and an administration otherwise seen as friendly to crypto, with implications for how digital-asset companies gain access to the banking system.

A weekly cybersecurity bulletin rounds up more than 20 stories, led by a Pentagon data breach and newly disclosed zero-day vulnerabilities affecting Apple, Citrix and Fortimail products. The Apple flaws are the kind typically exploited before patches are available, making rapid updates a priority for users and system administrators.

GlobalFoundries has received an additional $300 million award under the CHIPS Act from the Trump administration, strengthening US chip manufacturing support. Separately, Nvidia CEO Jensen Huang said silicon photonics is 'essential' to the future of AI, highlighting growing demand for optical interconnect technology in data centers. The moves underline Washington's continued push to onshore semiconductor production while Nvidia frames photonics as key infrastructure for scaling AI systems.

Zammad has issued a security alert for CVE-2026-102489, a session hijacking vulnerability that can lead to remote code execution as the Zammad service account on affected older installations. DIVD reports that the flaw has already been exploited in a real-world incident, prompting urgent calls for administrators to update their systems.

A new tutorial walks through installing DNSControl, an open-source tool for managing DNS records across multiple providers, on an Ubuntu VPS and configuring it to control PowerDNS servers. The guide covers what DNSControl is, the installation steps, and how to connect it to PowerDNS, aimed at administrators who want to automate and centralize DNS management from the command line.

Orlando Health has finalized its acquisition of RMC Health System, based in Anniston, Alabama, bringing the regional provider under the Florida health network's umbrella. The deal means Anniston-area hospitals and services will now operate as part of Orlando Health, a move expected to reshape healthcare access and administration in east Alabama.

A step-by-step tutorial for deploying Nagios Core on an Ubuntu virtual private server has been published, covering system preparation, web access setup, plugins, and host and service configuration through to security hardening. The commands target Ubuntu 22.04 LTS, with notes that they work similarly on 20.04 and 24.04, giving administrators a practical open-source server monitoring option.

Dell has released fixes for 37 vulnerabilities in its Container Storage Modules, including six critical flaws. The most serious allow unauthenticated attackers to steal storage administrator credentials and gain root access on Kubernetes nodes. Administrators running Dell storage with Kubernetes are urged to apply the patches promptly to avoid credential theft and full system compromise.

Frontline Education has reported a data breach after attackers exploited a vulnerability in a third-party software product to gain unauthorized access to its systems. The incident exposed sensitive employee records belonging to school districts that use the company's HR and administrative software, raising concerns about the security of personal data held by education-sector vendors and prompting scrutiny of third-party software vulnerabilities.

Community banks are mounting opposition to regulators in the Trump administration over plans to approve crypto-focused charters, according to a Wall Street Journal report. The banks argue the move would favor digital-asset firms and create uneven competition, adding a new fault line to the ongoing fight in Washington over how far regulators should go in embracing cryptocurrency companies within the traditional banking system.

Fortinet has issued a warning that attackers are actively exploiting a critical zero-day vulnerability in its FortiMail email security products. The flaw could allow compromise of systems that organizations rely on to filter and protect email. Administrators are being urged to apply patches and review their FortiMail deployments, as details about affected versions and exploitation methods continue to circulate in security advisories.

A Wall Street Journal essay recounts how the author's alleged political crime traveled through the courts to the Supreme Court and ultimately to President Trump's desk. The first-person piece frames the case as an example of politically charged prosecution, describing its path through the legal system and the presidential action that followed, drawing attention to the intersection of law and politics in the case.

Faculty and staff at City Colleges of Chicago have set an October 19 strike date, raising the prospect of classes being disrupted across the system's seven community colleges. The move signals stalled contract negotiations between the faculty union and the college administration over pay, staffing and working conditions. Students and staff across Chicago are watching closely for any last-minute deal that could avert the walkout.

The Department of Homeland Security has filed an appeal against a court decision that blocked its plan to impose a fixed four-year limit on student visas. The policy, championed by the Trump administration, would have replaced the current duration-of-status system with hard time limits for international students, prompting lawsuits from universities and immigrant rights groups. The appeal keeps the legal fight over the rule alive.

A new vulnerability, tracked as EUVD-2026-86804, has been disclosed and resolved in the Linux kernel. The flaw involves the configfs subsystem, where the fix pins the symlink target's dirent instead of chasing its dentry pointer, closing a potential security issue. The advisory covers the Linux kernel across multiple affected versions and was published on September 25, 2026, with an update on October 3, 2026. No severity score has been assigned yet, and administrators are advised to apply kernel updates.

A vulnerability in the Linux kernel's Reliable Datagram Sockets networking subsystem has been resolved, with the fix addressing TCP stream corruption that could occur when large memory pages are in use. The advisory, published 25 September 2026 and updated 3 October, affects the Linux kernel and a range of related products, drawing attention from security teams tracking kernel updates.

The October 1 ThreatsDay bulletin from Italian security outlet Deafnews compiles 16 cybersecurity stories showing how routine system operations can be weaponised as attack vectors. The piece argues the real danger lies in how banal such threats can be, prompting discussion among infosec professionals about overlooked everyday risks.

California Governor Gavin Newsom has signed two higher education bills aimed at protecting the state's colleges and universities from federal funding cuts. The measures are intended to safeguard institutions against financial pressure stemming from federal policy decisions. The legislation is being reported by Bay Area news outlets, though details of the bills' provisions and reactions from educators and lawmakers have not yet been widely reported.

A medium-severity missing authorization vulnerability, tracked as EUVD-2026-91567 and scored 6.5 out of 10 under CVSS v3.1, has been published for the Learning Management System from Turkish vendor AVEZ Electronics Communication Training and Consultancy Trade Inc. The advisory was updated on 2 October 2026. Missing authorization flaws can let users perform actions without proper permissions, so administrators of the LMS are being urged to review the advisory and apply any available fixes.

Security researchers have disclosed multiple vulnerabilities in the Linux kernel, prompting renewed attention to patching across systems that rely on it. The news circulated alongside other privacy items, including a study on data collection in connected vehicles from Northeastern University researchers. Administrators are being urged to apply kernel updates promptly.

Attackers are reportedly using Microsoft Defender's exclusion settings to conceal malware from antivirus scanning, according to a report by Spanish security blog elhacker.NET. By adding malicious files or folders to Defender's exclusion list, malware can run undetected on Windows systems. The technique highlights ongoing concerns that trusted security tools themselves can be manipulated by attackers to bypass endpoint protection.

A security vulnerability tracked as CVE-2026-90970 has been disclosed in GitLab's AI Gateway, reportedly allowing remote code execution on affected systems. GitLab's AI Gateway sits in front of the company's AI-powered features, so a flaw there could expose organizations using the platform's AI tooling. Administrators are being urged to check their deployments and apply patches. Details on affected versions and exploitation are still limited.

Flamethrower is a fast, open-source tool for benchmarking and stress-testing DNS servers, supporting queries over UDP, TCP, DNS-over-TLS and DNS-over-HTTPS on Linux. It measures performance and functional behaviour of DNS infrastructure, letting administrators test how servers cope under load and verify protocol support.