Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 42: nginx-mod-headers-more Critical Data Exposure CVE-2025-53860
Changes with nginx 1.28.1 23 Dec 2025 *) Security: processing of a specially crafted login/password when using the "none" authentication method in the ngx_mail…
Critical Vulnerability in Fedora 42: python-unicodedata2 Arbitrary RCE
Update to 17.0.0 version (#2412270) Update fonttools 4.61.0
SUSE: Kernel Important TLS Data Capture Fix CVE-2025-38616 2025:4311-1
* bsc#1249537 Cross-References: * CVE-2025-38616
⚡ Weekly Recap: Fortinet Exploit, Chrome 0-Day, BadIIS Malware, Record DDoS, SaaS Breach & More
This week saw a lot of new cyber trouble. Hackers hit Fortinet and Chrome with new 0-day bugs. They also broke into supply chains and SaaS tools. Many hid insi…
Fedora 41: LUKSData Integrity Restoration Update CVE-2025-11678
New upstream release v10 Fix: CVE-2025-11568
openSUSE: java-11-openjdk Important Data Access Threat 2025:3996-1
An update that solves two vulnerabilities and has one security fix can now be installed.
openSUSE: java-1_8_0-ibm Important Data Access Issues 2025:3965-1
An update that solves three vulnerabilities and has one security fix can now be installed.
Researchers Find ChatGPT Vulnerabilities That Let Attackers Trick AI Into Leaking Data
Cybersecurity researchers have disclosed a new set of vulnerabilities impacting OpenAI's ChatGPT artificial intelligence (AI) chatbot that could be exploited b…
Hackers Used Snappybee Malware and Citrix Flaw to Breach European Telecom Network
A European telecommunications organization is said to have been targeted by a threat actor that aligns with a China-nexus cyber espionage group known as Salt T…
CVE-2025-11371: Linux Security Must Prepare for Cross-Stack Breach
CVE-2025-11371 doesn't target Linux directly. It doesn't need to.
⚡ Weekly Recap: Bootkit Malware, AI-Powered Attacks, Supply Chain Breaches, Zero-Days & More
In a world where threats are persistent, the modern CISO’s real job isn't just to secure technology—it's to preserve institutional trust and ensure business co…
SUSE: libsoup Low Data Access Security Fix CVE-2025-4945 2025:03026-1
* bsc#1243314 Cross-References: * CVE-2025-4945
Hidden Vulnerabilities of Project Management Tools & How FluentPro Backup Secures Them
Every day, businesses, teams, and project managers trust platforms like Trello, Asana, etc., to collaborate and manage tasks. But what happens when that trust …
What Is a SQLi Vulnerability?
SQL injection (SQLi) is one of those vulnerabilities that's deceptively simple in concept yet devastating in its impact. It's a family of security flaws tied t…
Hackers Exploit SAP Vulnerability to Breach Linux Systems and Deploy Auto-Color Malware
Threat actors have been observed exploiting a now-patched critical SAP NetWeaver flaw to deliver the Auto-Color backdoor in an attack targeting a U.S.-based ch…
Mageia 9: QtBase6 & QtBase5 Critical DoS CVE-2025-5455 Advisory 2025-0212
An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code. If…
⚡ Weekly Recap: iPhone Spyware, Microsoft 0-Day, TokenBreak Hack, AI Data Leaks and More
Some of the biggest security problems start quietly. No alerts. No warnings. Just small actions that seem normal but aren't. Attackers now know how to stay hid…
New Chrome Vulnerability Enables Cross-Origin Data Leak via Loader Referrer Policy
Google on Wednesday released updates to address four security issues in its Chrome web browser, including one for which it said there exists an exploit in the …
Learning How to Hack: Why Offensive Security Training Benefits Your Entire Security Team
Organizations across industries are experiencing significant escalations in cyberattacks, particularly targeting critical infrastructure providers and cloud-ba…
Play Ransomware Exploited Windows CVE-2025-29824 as Zero-Day to Breach U.S. Organization
Threat actors with links to the Play ransomware family exploited a recently patched security flaw in Microsoft Windows as a zero-day as part of an attack targe…
Kimsuky Exploits BlueKeep RDP Vulnerability to Breach Systems in South Korea and Japan
Cybersecurity researchers have flagged a new malicious campaign related to the North Korean state-sponsored threat actor known as Kimsuky that exploits a now-p…
New Supply Chain Attack Targets Telegram Bots
We Linux security administrators face a growing challenge with sophisticated supply chain attacks targeting popular development ecosystems, such as npm. The la…
Essential Linux Security Tips for a Safe Open-Source System
Linux is a powerful operating system that is greatly appreciated for being reliable, flexible, and open in nature. It runs servers, desktops, and even embedded…
2024's Must-Know Linux Security Events & Lessons for Every Admin
2024 was marked by numerous critical incidents that highlighted the importance of robust Linux security measures among admins. One notable event was when Utils…