Blog

The Other APT: Why Ignored Bug Reports Help Attackers

We reported CVE-2026-109518 to APT's maintainer and to Debian at the end of September and never heard back. Who gets the credit doesn't matter. The silence does.