> TritonInfoSec News
Home / Nov 06, 2026 / Story
0
#4 The Hacker News general November 04, 2026 at 17:00 UTC

Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root

By [email protected] (The Hacker News)

AI Summary

A MitM flaw in APT, the package manager for Debian and Ubuntu, allows an attacker who can intercept package downloads to substitute a verified package with malicious code that executes as root. The attack is triggered when APT retries failed downloads — a behavior enabled by default starting in Debian 12 — and was disclosed jointly by Debian, Ubuntu, and APT developers on November 4, 2026. All Debian 12+ and affected Ubuntu users should apply the available patches immediately.

Read full article → https://thehackernews.com/2026/11/debian-and-ubunt…

Relevance score: 88.0/100

# More from November 06

  1. 1
    OpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine Linux The Hacker News
  2. 2
    OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run The Hacker News
  3. 3
    Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution The Hacker News
  4. 5
    SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records The Hacker News
  5. 6
    Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes SecurityWeek
  6. 7
    Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says The Hacker News
  7. 8
    French bank confirms cyber heist, hackers suspected to have stolen an estimated $133 million The Record
  8. 9
    Cyberattack disrupts blood storage refrigeration systems in France BleepingComputer
  9. 10
    Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads The Hacker News