Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Researchers Fingerprint Exploit Developers Who Help Several Malware Authors
Writing advanced malware for a threat actor requires different groups of people with diverse technical expertise to put them all together. But can the code lea…
New PIN Verification Bypass Flaw Affects Visa Contactless Payments
Even as Visa issued a warning about a new JavaScript web skimmer known as Baka, cybersecurity researchers have uncovered an authentication flaw in the company'…
Intel, ARM, IBM, AMD Processors Vulnerable to New Side-Channel Attacks
It turns out that the root cause behind several previously disclosed speculative execution attacks against modern processors, such as Meltdown and Foreshadow, …
Industrial VPN Flaws Could Let Attackers Target Critical Infrastructures
Cybersecurity researchers have discovered critical vulnerabilities in industrial VPN implementations primarily used to provide remote access to operational tec…
Mageia 2020-0285: ruby security upda
Updated ruby packages fix security vulnerability: An issue was discovered in Ruby through 2.5.7. If a victim calls BasicSocket#read_nonblock(requested_size, bu…
Debian LTS: DLA-2257-1: pngquant security upda
It was found that pngquant, a PNG (Portable Network Graphics) image optimising utility, is susceptible to a buffer overflow write issue triggered by a maliciou…
Ubuntu 4404-2: Linux kernel vulnerabiliti
Several security issues were fixed in the NVIDIA graphics driver kernel modules.
New Ripple20 Flaws Put Billions of Internet-Connected Devices at Risk of Hacking
The Department of Homeland Security and CISA ICS-CERT today issued a critical security advisory warning about over a dozen newly discovered vulnerabilities aff…
New Bluetooth Vulnerability Exposes Billions of Devices to Hackers
Academics from àcole Polytechnique Fédérale de Lausanne (EPFL) disclosed a security vulnerability in Bluetooth that could potentially allow an attacker to spo…
Chinese Hackers Using New iPhone Hack to Spy On Uyghur Muslims
A Chinese hacking group has been found leveraging a new exploit chain in iOS devices to install a spyware implant targeting the Uyghur Muslim minority in China…
Chinese Hackers Using New iPhone Hack to Spy On Uyghurs Muslims
A Chinese hacking group has been found leveraging a new exploit chain in iOS devices to install a spyware implant targeting the Uyghur Muslim minority in China…
New LTE Network Flaw Could Let Attackers Impersonate 4G Mobile Users
A group of academics from Ruhr University Bochum and New York University Abu Dhabi have uncovered security flaws in 4G LTE and 5G networks that could potential…
Debian LTS: DLA-2106-1: libgd2 security upda
A vulnerability was discovered in libgd2, the GD graphics library, whereby an attacker can employ a specific function call sequence to trigger a NULL pointer d…
Hackers Exploited Trend Micro Antivirus Zero-day In Mitsubishi Electric Hack
The Japanese electronics giant Mitsubishi Electric disclosed a hack last week. It now turns out that the attackers exploited aHackers Exploited Trend Micro Ant…
Intel Patches Security Vulnerability in Linux and Windows Drive
Are you aware that Intel has published a total of six advisories for security vulnerabilities impacting its products, including the Intel Processor Graphics on…
Debian: DSA-4593-1: freeimage security upda
It was found that freeimage, a graphics library, was affected by the following two security issues: CVE-2019-12211
Debian LTS: DLA-2031-1: freeimage security upda
It was found that freeimage, a graphics library, was affected by the following two security issues: CVE-2019-12211
Debian LTS: DLA-1993-1: mesa security update
Tim Brown discovered a shared memory permissions vulnerability in the Mesa 3D graphics library. Some Mesa X11 drivers use shared-memory XImages to implement ba…
Researchers Discover TPM-Fail Vulnerabilities Affecting Billions of Devices
A team of cybersecurity researchers today disclosed details of two new potentially serious CPU vulnerabilities that could allow attackers to retrieve cryptogra…
RedHat: RHSA-2019-3149:01 Important: OpenShift Container Platform
An update for logging-elasticsearch5-container is now available for Red Hat OpenShift Container Platform 3.11. Red Hat Product Security has rated this update a…
RedHat: RHSA-2019-2858:01 Important: OpenShift Container Platform 4.1.18
An update for logging-elasticsearch5-container is now available for Red Hat OpenShift Container Platform 4.1. Red Hat Product Security has rated this update as…
125 New Flaws Found in Routers and NAS Devices from Popular Brands
The world of connected consumer electronics, IoT, and smart devices is growing faster than ever with tens of billions of connected devices streaming and sharin…
New Critical Flaws Put Billions of Internet-Connected Devices at Risk of Hacking
The Department of Homeland Security and CISA ICS-CERT will today issue a critical security advisory warning about over a dozen newly discovered vulnerabilities…