The Hacker News

Winning the Mind Game: The Role of the Ransomware Negotiator

Get exclusive insights from a real ransomware negotiator who shares authentic stories from network hostage situations and how he managed them.The Ransomware IndustryRansomware is an industry. As such, it has its own business logic: organizations pay ...

LinuxSecurity - Security Advisories

Ubuntu 6144-1: LibreOffice vulnerabilities

Several security issues were fixed in LibreOffice....

LinuxSecurity - Security Advisories

Ubuntu 6143-1: Firefox vulnerabilities

Several security issues were fixed in Firefox....

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3366:01 Important: OpenShift Container Platform 4.13.2

Red Hat OpenShift Container Platform release 4.13.2 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13....

LinuxSecurity - Security Advisories

Debian: DSA-5419-1: c-ares security update

Two vunerabilities were discovered in c-ares, an asynchronous name resolver library: CVE-2023-31130 ...

The Hacker News

New PowerDrop Malware Targeting U.S. Aerospace Industry

An unknown threat actor has been observed targeting the U.S. aerospace industry with a new PowerShell-based malware called PowerDrop."PowerDrop uses advanced techniques to evade detection such as deception, encoding, and encryption," according to Adl...

LinuxSecurity - Security Advisories

Fedora 38: firefox 2023-af4cfc9c3c

- Updated to latest upstream (114.0)...

LinuxSecurity - Security Advisories

Fedora 38: curl 2023-37eac50e9b

- fix more POST-after-PUT confusion (CVE-2023-28322) - fix IDN wildcard match (CVE-2023-28321)...

LinuxSecurity - Security Advisories

Slackware: 2023-157-01: mozilla-firefox Security Update

New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. ...

The Hacker News

New Malware Campaign Leveraging Satacom Downloader to Steal Cryptocurrency

A recent malware campaign has been found to leverageSatacom downloaderas a conduit to deploy stealthy malware capable of siphoning cryptocurrency using a rogue extension for Chromium-based browsers."The main purpose of the malware that is dropped by ...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3491:01 Important: Red Hat Virtualization Host 4.4.z SP 1

An update for redhat-release-virtualization-host and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3490:01 Important: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3517:01 Important: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3481:01 Moderate: emacs security update

An update for emacs is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rati...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3489:01 Moderate: redhat-ds:12 security, bug fix,

An update for the redhat-ds:12 module is now available for Red Hat Directory Server 12.1 for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, whic...

LinuxSecurity - Security Advisories

Oracle8: ELSA-2023-3425: cups-filters Important Security Update

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: ...

LinuxSecurity - Security Advisories

Oracle9: ELSA-2023-3423: cups-filters Important Security Update

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: ...

LinuxSecurity - Security Advisories

Oracle9: ELSA-2023-3432: webkit2gtk3 Important Security Update

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: ...

LinuxSecurity - Security Advisories

Oracle8: ELSA-2023-3433: webkit2gtk3 Important Security Update

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: ...

LinuxSecurity - Security Advisories

Oracle8: ELSA-2023-3349: kernel Important Security Update

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: ...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3460:01 Moderate: curl security update

An update for curl is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions....

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3461:01 Important: kernel

An update for kernel is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions....

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3465:01 Important: kernel

An update for kernel is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3462:01 Important: kernel-rt

An update for kernel-rt is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions....

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3470:01 Important: kernel-rt

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,...

The Hacker News

5 Reasons Why IT Security Tools Don't Work For OT

Attacks on critical infrastructure and other OT systems are on the rise as digital transformation and OT/IT convergence continue to accelerate. Water treatment facilities, energy providers, factories, and chemical plants — the infrastructure that u...

LinuxSecurity - Security Articles

Top NAS Devices Are Being Targeted by This Dangerous Malware

IoT cybersecurity company Sternum has identified a security vulnerability affecting Zyxel Networks' Linux-operated NAS drives, including NAS326, NAS540, and NAS542 models, running on firmware version 5.21....

LinuxSecurity - Security Articles

Ubuntu Core as an Immutable Linux Desktop Base

Canonical began the development of Ubuntu Core in 2014, to create a fully-containerised platform for IoT. In Ubuntu Core, we use the same kernel container technology that Docker and LXC are built on, to put every component of the system into a secure...

The Hacker News

Zero-Day Alert: Google Issues Patch for New Chrome Vulnerability - Update Now!

Google on Monday released security updates to patch a high-severity flaw in its Chrome web browser that it said is being actively exploited in the wild.Tracked asCVE-2023-3079, the vulnerability has been described as a type confusion bug in the V8 Ja...

LinuxSecurity - Security Advisories

Ubuntu 6142-1: nghttp2 vulnerability

nghttp2 could be made to crash if it opened a specially crafted file....

LinuxSecurity - Security Advisories

Ubuntu 6141-1: xfce4-settings vulnerability

xfce4-settings could be made to run programs with arbitrary arguments if it received specially crafted input....

Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses

KeePass Vulnerability Could Expose Master Password In Plaintext

The popular password manager KeePass had a severe security vulnerability exposing users’ master passwords in…KeePass Vulnerability Could Expose Master Password In Plaintext on Latest Hacking News | Cyber Security News, Hacking Tools and Penet...

LinuxSecurity - Security Advisories

Ubuntu 6140-1: Go vulnerabilities

Several security issues were fixed in Go....

LinuxSecurity - Security Advisories

SUSE: 2023:1788-1 suse/postgres Security Update

The container suse/postgres was updated. The following patches have been included in this update:...

LinuxSecurity - Security Advisories

SUSE: 2023:1787-1 suse/postgres Security Update

The container suse/postgres was updated. The following patches have been included in this update:...

LinuxSecurity - Security Advisories

SUSE: 2023:1785-1 bci/openjdk-devel Security Update

The container bci/openjdk-devel was updated. The following patches have been included in this update:...

LinuxSecurity - Security Advisories

SUSE: 2023:1784-1 bci/openjdk-devel Security Update

The container bci/openjdk-devel was updated. The following patches have been included in this update:...

The Hacker News

Cyclops Ransomware Gang Offers Go-Based Info Stealer to Cybercriminals

Threat actors associated with theCyclops ransomwarehave been observed offering an information stealer malware that's designed to capture sensitive data from infected hosts."The threat actor behind this [ransomware-as-a-service] promotes its offering ...

The Hacker News

Zyxel Firewalls Under Attack! Urgent Patching Required

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Mondayplacedtwo recently disclosed flaws in Zyxel firewalls to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.The vulnerabilities, tracke...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3433:01 Important: webkit2gtk3 security update

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severi...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3432:01 Important: webkit2gtk3 security update

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severi...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3441:01 Important: Red Hat OpenStack Platform 17.0 (etcd)

An update for etcd is now available for Red Hat OpenStack Platform 17.0 (Wallaby). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3447:01 Important: Red Hat OpenStack Platform 16.1 (etcd)

An update for etcd is now available for Red Hat OpenStack Platform 16.1 (Train). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3440:01 Important: Red Hat OpenStack Platform 17.0

An update for python-flask is now available for Red Hat OpenStack Platform 17.0 (Wallaby). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3444:01 Important: Red Hat OpenStack Platform 16.2

An update for python-flask is now available for Red Hat OpenStack Platform 16.2 (Train). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3455:01 Moderate: Release of OpenShift Serverless 1.29.0

OpenShift Serverless version 1.29.0 contains a moderate security impact. The References section contains CVE links providing detailed severity ratings for each vulnerability. Ratings are based on a Common Vulnerability Scoring...

LinuxSecurity - Security Advisories

Debian LTS: DLA-3446-1: linux-5.10 security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. ...

LinuxSecurity - Security Advisories

Ubuntu 6139-1: Python vulnerability

Python could be made to bypass blocklisting methods if a specially crafted URL was provided...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3435:01 Important: Red Hat Advanced Cluster Security 3.74

An update is now available for Red Hat Advanced Cluster Security for Kubernetes (RHACS). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3421:01 Important: Red Hat JBoss Web Server 5.7.3 release

Red Hat JBoss Web Server 5.7.3 zip release is now available for Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, and Windows Server. Red Hat Product Security has rated this release as having a security impact...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3427:01 Important: cups-filters security update

An update for cups-filters is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3354:01 Important: Red Hat JBoss Core Services Apache

An update is now available for Red Hat JBoss Core Services Apache HTTP Server 2.4.51 Service Pack 2 on Red Hat Enterprise Linux versions 7 and 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulner...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3450:01 Moderate: OpenShift Serverless Client kn 1.29.0

OpenShift Serverless 1.29.0 has been released. The References section contains CVE links providing detailed severity ratings for each vulnerability. Ratings are based on a Common Vulnerability Scoring System (CVSS) base score....

LinuxSecurity - Security Advisories

Ubuntu 6138-1: libssh vulnerabilities

Several security issues were fixed in libssh....

LinuxSecurity - Security Advisories

Ubuntu 6137-1: LibRaw vulnerabilities

Several security issues were fixed in LibRaw....

LinuxSecurity - Security Advisories

Ubuntu 6136-1: FRR vulnerabilities

Several security issues were fixed in FRR....

Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses

Guarding the Gate: The Role of Firewalls in Cybersecurity

In the digital age, our personal and professional lives are more intertwined with the internet…Guarding the Gate: The Role of Firewalls in Cybersecurity on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses...

The Hacker News

The Annual Report: 2024 Plans and Priorities for SaaS Security

Over 55% of security executives report that they have experienced a SaaS security incident in the past two years — ranging from data leaks and data breaches to SaaS ransomware and malicious apps (as seen in figures 1 and 2). Figure 1. How many orga...

Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses

Researchers Observed Backdoor-Like Behavior In Gigabyte Systems

Researchers have noticed a weird backdoor-like behavior with Gigabyte systems that risks devices’ security. The…Researchers Observed Backdoor-Like Behavior In Gigabyte Systems on Latest Hacking News | Cyber Security News, Hacking Tools and Pe...

LinuxSecurity - Security Advisories

Ubuntu 6112-2: Perl vulnerability

Perl could be made to install modules from untrusted sources....

The Hacker News

Magento, WooCommerce, WordPress, and Shopify Exploited in Web Skimmer Attack

Cybersecurity researchers have unearthed a new ongoingMagecart-style web skimmer campaign that's designed to steal personally identifiable information (PII) and credit card data from e-commerce websites.A noteworthy aspect that sets it apart from oth...

LinuxSecurity - Security Advisories

Debian LTS: DLA-3445-1: cpio security update

Two vulnerabilities were fixed in GNU cpio, a program to manage archives of files. CVE-2019-14866 ...

LinuxSecurity - Security Articles

Kali Linux 2023.2 Released with 13 New Tools, Pre-Built HyperV Image

Kali Linux 2023.2, the second version of 2023, is now available with a pre-built Hyper-V image and thirteen new tools, including the Evilginx framework for stealing credentials and session cookies....

LinuxSecurity - Security Advisories

SUSE: 2023:1779-1 suse/sle-micro/5.2/toolbox Security Update

The container suse/sle-micro/5.2/toolbox was updated. The following patches have been included in this update:...

LinuxSecurity - Security Advisories

SUSE: 2023:1777-1 suse/sle-micro/5.1/toolbox Security Update

The container suse/sle-micro/5.1/toolbox was updated. The following patches have been included in this update:...

LinuxSecurity - Security Advisories

SUSE: 2023:1775-1 suse/sle-micro/5.4/toolbox Security Update

The container suse/sle-micro/5.4/toolbox was updated. The following patches have been included in this update:...

LinuxSecurity - Security Advisories

SUSE: 2023:1774-1 suse/sle-micro/5.3/toolbox Security Update

The container suse/sle-micro/5.3/toolbox was updated. The following patches have been included in this update:...

LinuxSecurity - Security Advisories

Debian LTS: DLA-3444-1: mariadb-10.3 security update

Latest MariaDB minor maintenance release 10.3.39 included a fix for the following security vulnerability: CVE-2022-47015 ...

LinuxSecurity - Security Advisories

Fedora 37: openssl 2023-964eb00fc6

Rebase to upstream version 3.0.9...

LinuxSecurity - Security Advisories

Fedora 37: python3.6 2023-56cefa23df

Security fix for CVE-2023-24329...

LinuxSecurity - Security Advisories

Fedora 37: texlive-base 2023-d261122726

Fix CVE-2023-32700...

LinuxSecurity - Security Advisories

Fedora 38: mingw-python-requests 2023-f3824383be

Update to requests-2.31.0....

LinuxSecurity - Security Advisories

Debian LTS: DLA-3443-1: wireshark security update

Several vulnerabilities were fixed in the network traffic analyzer Wireshark. CVE-2023-2856 ...

LinuxSecurity - Security Advisories

Debian: DSA-5418-1: chromium security update

Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure. ...

LinuxSecurity - Security Advisories

Debian LTS: DLA-3442-1: nbconvert security update

Alvaro Mu'±oz from the GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert, a tool and library used to convert notebooks to various other formats via Jinja templates. ...

LinuxSecurity - Security Articles

Critical LibreOffice Code Execution Vuln Fixed

An Improper Validation of Array Index vulnerability (CVE-2023-0950) was discovered in the spreadsheet component of The Document Foundation LibreOffice 7.4 versions prior to 7.4.6 and 7.5 versions prior to 7.5.1. With a low attack complexity, no privi...

LinuxSecurity - Security Articles

Multiple Easily Exploitable OpenSSL DoS Bugs Fixed

Multiple important denial of service (DoS) vulnerabilities (CVE-2023-0464 and CVE-2023-2650) have been discovered in the OpenSSL Secure Sockets Layer toolkit. These bugs are easy to exploit and have a high availability impact....

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3304:01 Moderate: OpenShift Container Platform 4.13.1 bug

Red Hat OpenShift Container Platform release 4.13.1 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13....

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3379:01 Important: Red Hat Advanced Cluster Security for

Updated images are now available for Red Hat Advanced Cluster Security for Kubernetes (RHACS). The updated image includes security fixes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability ...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3305:01 Moderate: OpenShift Container Platform 4.13.1

Red Hat OpenShift Container Platform release 4.13.1 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.13....

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3309:01 Moderate: OpenShift Container Platform 4.11.42

Red Hat OpenShift Container Platform release 4.11.42 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.11....

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3303:01 Moderate: OpenShift Container Platform 4.13.1

Red Hat OpenShift Container Platform release 4.13.1 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13....

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3287:01 Moderate: OpenShift Container Platform 4.12.19

Red Hat OpenShift Container Platform release 4.12.19 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12....

The Hacker News

New Linux Ransomware Strain BlackSuit Shows Striking Similarities to Royal

An analysis of the Linux variant of a new ransomware strain called BlackSuit has covered significant similarities with another ransomware family calledRoyal.Trend Micro, which examined an x64 VMware ESXi version targeting Linux machines, said it iden...

The Hacker News

Cloud Security Tops Concerns for Cybersecurity Leaders: EC-Council's Certified CISO Hall of Fame Report 2023

A survey of global cybersecurity leaders through the 2023 Certified CISO Hall of Fame Report commissioned by the EC-Council identified 4 primary areas of grave concern: cloud security, data security, security governance, and lack of cybersecurity tal...

LinuxSecurity - Security Advisories

SUSE: 2023:1773-1 bci/rust Security Update

The container bci/rust was updated. The following patches have been included in this update:...

LinuxSecurity - Security Advisories

SUSE: 2023:1772-1 bci/rust Security Update

The container bci/rust was updated. The following patches have been included in this update:...

LinuxSecurity - Security Advisories

SUSE: 2023:1771-1 bci/ruby Security Update

The container bci/ruby was updated. The following patches have been included in this update:...

LinuxSecurity - Security Advisories

SUSE: 2023:1770-1 bci/python Security Update

The container bci/python was updated. The following patches have been included in this update:...

LinuxSecurity - Security Advisories

SUSE: 2023:1769-1 bci/python Security Update

The container bci/python was updated. The following patches have been included in this update:...

LinuxSecurity - Security Advisories

SUSE: 2023:1768-1 bci/python Security Update

The container bci/python was updated. The following patches have been included in this update:...

LinuxSecurity - Security Advisories

Fedora 38: webkitgtk 2023-9e75e38b47

* Fix scrollbar jumping to top when drag released outside window in GTK 4. * Fix video rendering when GL is disabled. * Fix flickering on looped videos when starting again. * Fix CPU usage on autoplaying videos. * Choose amount of painting threads de...

LinuxSecurity - Security Advisories

Fedora 38: openssl 2023-026c8ba371

Rebase to upstream version 3.0.9...

LinuxSecurity - Security Advisories

Fedora 38: ImageMagick 2023-d53831b69d

Update to 7.1.1.11 (#2210875) ---- Update to 7.1.1.10 (#2207788) Security fix for CVE-2023-34151 Security fix for CVE-2023-34152 Security fix for CVE-2023-34153...

LinuxSecurity - Security Advisories

Fedora 37: webkitgtk 2023-23cc337543

* Fix scrollbar jumping to top when drag released outside window in GTK 4. * Fix video rendering when GL is disabled. * Fix flickering on looped videos when starting again. * Fix CPU usage on autoplaying videos. * Choose amount of painting threads de...

LinuxSecurity - Security Advisories

Slackware: 2023-153-02: ntp Security Update

New ntp packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix security issues. ...

LinuxSecurity - Security Advisories

Slackware: 2023-153-01: cups Security Update

New cups packages are available for Slackware 14.2, 15.0, and -current to fix a security issue. ...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3373:01 Moderate: Migration Toolkit for Runtimes security

An update for mtr-operator-bundle-container, mtr-operator-container, mtr-web-container, and mtr-web-executor-container is now available for Migration Toolkit for Runtimes 1 on RHEL 8. Red Hat Product Security has rated this update as having a securit...

LinuxSecurity - Security Advisories

Debian LTS: DLA-3441-1: sofia-sip security update

It was discovered that there was a series of heap overflow and integer overflow vulnerabilities in Sofia-SIP, a building block for creating VoIP/SIP and instant messaging applications. ...

LinuxSecurity - Security Advisories

Ubuntu 6135-1: Linux kernel (Azure CVM) vulnerabilities

Several security issues were fixed in the Linux kernel....

The Hacker News

New Botnet Malware 'Horabot' Targets Spanish-Speaking Users in Latin America

Spanish-speaking users in Latin America have been at the receiving end of a new botnet malware dubbedHorabotsince at least November 2020."Horabot enables the threat actor to control the victim's Outlook mailbox, exfiltrate contacts' email addresses, ...

LinuxSecurity - Security Articles

Nitrux 2.8.1 Linux Distribution Unleashes Supercharged Security and Privacy Powers

Nitrux 2.8.1, codenamed "sc" for "safer computing," has been released, offering enhanced privacy and security features. While the distribution does not claim to be impenetrable or unhackable, it aims to protect users' privacy and ...

The Hacker News

The Importance of Managing Your Data Security Posture

Data security is reinventing itself. As new data security posture management solutions come to market, organizations are increasingly recognizing the opportunity to provide evidence-based security that proves how their data is being protected. But wh...

Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses

Jetpack Plugin Patched A Critical Vulnerability Triggering WordPress Force-Installs

The popular and one of the most-used WordPress plugins, Jetpack recently addressed a critical security…Jetpack Plugin Patched A Critical Vulnerability Triggering WordPress Force-Installs on Latest Hacking News | Cyber Security News, Hacking Too...

Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses

Cybersecurity in Online Trading: Protecting Your Investments

In today’s digital age, online trading has become a popular means for investors to build…Cybersecurity in Online Trading: Protecting Your Investments on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Cour...

LinuxSecurity - Security Advisories

SUSE: 2023:1735-1 suse/sle15 Security Update

The container suse/sle15 was updated. The following patches have been included in this update:...

LinuxSecurity - Security Advisories

SUSE: 2023:1734-1 bci/nodejs Security Update

The container bci/nodejs was updated. The following patches have been included in this update:...

LinuxSecurity - Security Advisories

SUSE: 2023:1733-1 bci/nodejs Security Update

The container bci/nodejs was updated. The following patches have been included in this update:...

LinuxSecurity - Security Advisories

SUSE: 2023:1732-1 bci/bci-init Security Update

The container bci/bci-init was updated. The following patches have been included in this update:...

LinuxSecurity - Security Advisories

SUSE: 2023:1731-1 bci/golang Security Update

The container bci/golang was updated. The following patches have been included in this update:...

LinuxSecurity - Security Advisories

SUSE: 2023:1730-1 bci/golang Security Update

The container bci/golang was updated. The following patches have been included in this update:...

The Hacker News

North Korea's Kimsuky Group Mimics Key Figures in Targeted Cyber Attacks

U.S. and South Korean intelligence agencies have issued a new alert warning of North Korean cyber actors' use of social engineering tactics to strike think tanks, academia, and news media sectors.The "sustained information gathering efforts" have bee...

The Hacker News

MOVEit Transfer Under Attack: Zero-Day Vulnerability Actively Being Exploited

A critical flaw in Progress Software's in MOVEit Transfer managed file transfer application has come under widespread exploitation in the wild to take over vulnerable systems.The shortcoming, which is assigned the CVE identifier CVE-2023-34362, relat...

LinuxSecurity - Security Advisories

Ubuntu 6134-1: Linux kernel (Intel IoTG) vulnerabilities

Several security issues were fixed in the Linux kernel....

LinuxSecurity - Security Advisories

Ubuntu 6133-1: Linux kernel (Intel IoTG) vulnerabilities

Several security issues were fixed in the Linux kernel....

LinuxSecurity - Security Advisories

Debian LTS: DLA-3440-1: cups security update

An issue has been found in cups, the Common UNIX Printing System. Due to a buffer overflow vulnerability in the function format_log_line() a remote attackers could cause a denial-of-service(DoS). The vulnerability ...

LinuxSecurity - Security Advisories

Ubuntu 6132-1: Linux kernel vulnerabilities

Several security issues were fixed in the Linux kernel....

LinuxSecurity - Security Advisories

Ubuntu 6131-1: Linux kernel vulnerabilities

Several security issues were fixed in the Linux kernel....

LinuxSecurity - Security Advisories

Ubuntu 6130-1: Linux kernel vulnerabilities

Several security issues were fixed in the Linux kernel....

LinuxSecurity - Security Advisories

Debian LTS: DLA-3426-2: netatalk regression update

The security update of netatalk,' the Apple Filing Protocol service, announced as DLA-3426-1 caused a regression when the netatalk server was configured to use the AppleDouble v2 file system format. ...

LinuxSecurity - Security Advisories

Ubuntu 6129-1: Avahi vulnerability

Avahi could be made to crash if it received specially crafted DBus traffic....

The Hacker News

Evasive QBot Malware Leverages Short-lived Residential IPs for Dynamic Attacks

An analysis of the "evasive and tenacious" malware known as QBot has revealed that 25% of its command-and-control (C2) servers are merely active for a single day.What's more, 50% of the servers don't remain active for more than a week, indicating the...

LinuxSecurity - Security Advisories

Ubuntu 6128-2: CUPS vulnerability

CUPS could be made to crash or run programs if it received specially crafted network traffic....

The Hacker News

New Zero-Click Hack Targets iOS Users with Stealthy Root-Privilege Malware

A previously unknown advanced persistent threat (APT) is targeting iOS devices as part of a sophisticated and long-running mobile campaign dubbedOperation Triangulationthat began in 2019."The targets are infected using zero-click exploits via the iMe...

LinuxSecurity - Security Advisories

Ubuntu 6128-1: CUPS vulnerability

CUPS could be made to crash or run programs if it received specially crafted network traffic....

The Hacker News

Malicious PyPI Packages Using Compiled Python Code to Bypass Detection

Researchers have discovered a novel attack on the Python Package Index (PyPI) repository that employs compiled Python code to sidestep detection by application security tools."It may be the first supply chain attack to take advantage of the fact that...

The Hacker News

How Wazuh Improves IT Hygiene for Cyber Security Resilience

IT hygieneis a security best practice that ensures that digital assets in an organization's environment are secure and running properly. Good IT hygiene includes vulnerability management, security configuration assessments, maintaining asset and syst...

LinuxSecurity - Security Articles

High-Severity ntfs-3g Buffer Overflow Vulns Fixed

Several buffer overflow vulnerabilities have been identified in ntfs-3g. With a low attack complexity and a high confidentiality, integrity and availability impact, these vulnerabilities have received a National Vulnerability Database (NVD) severity ...

LinuxSecurity - Security Articles

Critical Remotely Exploitable Django Vuln Fixed

It was discovered that Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1 incorrectly handled uploading multiple files using one form field (CVE-2023-31047). With a low attack complexity, no privileges required to exploit, and a high co...

The Hacker News

Improved BlackCat Ransomware Strikes with Lightning Speed and Stealthy Tactics

The threat actors behind BlackCat ransomware have come up with an improved variant that prioritizes speed and stealth in an attempt to bypass security guardrails and achieve their goals.The new version, dubbedSphynxand announced in February 2023, pac...

LinuxSecurity - Security Advisories

SUSE: 2023:1693-1 suse/sles12sp4 Security Update

The container suse/sles12sp4 was updated. The following patches have been included in this update:...

LinuxSecurity - Security Advisories

Fedora 37: bitcoin-core 2023-3317c9b824

Update to version 24.1....

LinuxSecurity - Security Advisories

Fedora 37: editorconfig 2023-6e5d4757df

Security fix for CVE-2023-0341: update to 0.12.6 (close RHBZ#2162811)...

LinuxSecurity - Security Advisories

Fedora 37: edk2 2023-ca393d660a

include latest dbx update (may 9th, black lotus edition). ---- drop ASSERT from NestedInterruptTplLib (rhbz#2183336)....

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3415:01 Important: ACS 4.0 enhancement and security update

Updated images are now available for Red Hat Advanced Cluster Security (RHACS). The updated image includes security and bug fixes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3408:01 Moderate: openssl security update

An update for openssl is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which...

LinuxSecurity - Security Advisories

Ubuntu 6127-1: Linux kernel vulnerabilities

Several security issues were fixed in the Linux kernel....

LinuxSecurity - Security Advisories

Debian LTS: DLA-3427-2: texlive-bin regression update

It was discovered that the patch to fix CVE-2023-32700 in texlive-bin, released as DLA-3427-1, was incomplete and caused an error when running the lualatex command. ...

LinuxSecurity - Security Advisories

openSUSE: 2023:0117-1 important: chromium

An update that fixes 16 vulnerabilities is now available. ...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3397:01 Important: qatzip

An update for qatzip is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3403:01 Moderate: pcs

An update for pcs is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3387:01 Moderate: Satellite 6.13.1 Async Security Update

Updated Satellite 6.13 packages that fixes important security bugs and several regular bugs are now available for Red Hat Satellite. 2. Relevant releases/architectures: Red Hat Satellite 6.13 for RHEL 8 - noarch...

LinuxSecurity - Security Advisories

RedHat: RHSA-2023-3388:01 Important: kernel security, bug fix,

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,...

LinuxSecurity - Security Advisories

Fedora 38: pypy 2023-690e150a39

Security fix for CVE-2023-24329...

LinuxSecurity - Security Advisories

Fedora 38: pypy3.9 2023-81bb8e3b99

Security fix for CVE-2023-24329...

LinuxSecurity - Security Advisories

Fedora 38: python3.10 2023-994ecd7dbc

Fix for CVE-2023-24329...

LinuxSecurity - Security Advisories

Fedora 38: python3.8 2023-d8b0003ecd

Fix for CVE-2023-24329...

LinuxSecurity - Security Advisories

Fedora 38: mod_auth_openidc 2023-b534ca7056

Rebase to 2.4.13.2 version, fix CVE-2023-28625...

LinuxSecurity - Security Advisories

Fedora 38: bitcoin-core 2023-1bae6b7751

Update to version 24.1....

LinuxSecurity - Security Advisories

Debian: DSA-5417-1: openssl security update

Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit. CVE-2023-0464 ...

LinuxSecurity - Security Advisories

Debian LTS: DLA-3439-1: libwebp security update

It was discovered that there was a potential arbitrary code execution vulnerability in libwebp, a library to support the WebP image compression format. ...

The Hacker News

Critical Firmware Vulnerability in Gigabyte Systems Exposes ~7 Million Devices

Cybersecurity researchers have found "backdoor-like behavior" within Gigabyte systems, which they say enables theUEFI firmwareof the devices to drop a Windows executable and retrieve updates in an unsecure format.Firmware security firm Eclypsiumsaidi...

The Hacker News

Critical Firmware Backdoor in Gigabyte Systems Exposes ~7 Million Devices

Cybersecurity researchers have found "backdoor-like behavior" within Gigabyte systems, which they say enables theUEFI firmwareof the devices to drop a Windows executable and retrieve updates in an unsecure format.Firmware security firm Eclypsiumsaidi...