The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
MGASA-2025-0297 - Updated yelp & yelp-xsl packages fix security vulnerability
MGASA-2025-0296 - Updated apache-commons-fileupload packages fix security vulnerability
MGASA-2025-0295 - Updated botan2 packages fix security vulnerabilitiy
MGASA-2025-0294 - Updated spdlog packages fix security vulnerability
MGASA-2025-0293 - Updated apache-commons-lang3 & apache-commons-lang packages fix security vulnerability
MGASA-2025-0291 - Updated webkit2 packages fix security vulnerabilities
MGASA-2025-0287 - Updated perl-Crypt-OpenSSL-RSA packages fix security vulnerability
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or bypass of the…
A security issue was discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Cybersecurity researchers are calling attention to a large-scale spam campaign that has flooded the npm registry with thousands of fake packages since early 20…
Cybersecurity researchers are calling attention to a large-scale spam campaign that has flooded the npm registry with thousands of fake packages since early 20…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or bypass of the…
MGASA-2025-0282 - Updated python-tornado packages fix security vulnerability
MGASA-2025-0280 - Updated python3 packages fix security vulnerabilities
MGASA-2025-0279 - Updated perl-Data-Entropy packages fix security vulnerability
MGASA-2025-0278 - Updated perl-File-Find-Rule packages fix security vulnerability
MGASA-2025-0273 - Updated unbound packages fix security vulnerability
Several security issues were fixed in Bind.
python-kdcproxy security update
bind security update
Several security issues were fixed in Raptor.
The malware known as GootLoader has resurfaced yet again after a brief spike in activity earlier this March, according to new findings from Huntress.The cybers…
Cybersecurity researchers have discovered a malicious npm package named "@acitons/artifact" that typosquats the legitimate "@actions/artifact" package with the…
Cybersecurity researchers have discovered a malicious npm package named "@acitons/artifact" that typosquats the legitimate "@actions/artifact" package with the…