The Hacker News · 11/4/2026

Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root

APT package manager flaw (CVE in Debian 12+) allows MitM attackers to replace verified packages with malicious code executing as root on retry.

Read original coverage