Cybersecurity News

Over 67,000 Fake npm Packages Flood Registry in Worm-Like Spam Attack

Cybersecurity researchers are calling attention to a large-scale spam campaign that has flooded the npm registry with thousands of fake packages since early 20…

Debian: firefox-esr Important Threat of Code Execution DSA-6054-1

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or bypass of the…

Linux

Mageia 9: python-tornado Important Excessive Logging Vuln MGASA-2025-0282

MGASA-2025-0282 - Updated python-tornado packages fix security vulnerability

Mageia 9: python3 Critical Arbitrary Write Issues MGASA-2025-0280

MGASA-2025-0280 - Updated python3 packages fix security vulnerabilities

Mageia 9: Critical Rand Function Vulnerability in perl-Data-Entropy

MGASA-2025-0279 - Updated perl-Data-Entropy packages fix security vulnerability

Mageia 9 perl-File-Find-Rule Important Arbitrary Code Exec MGASA-2025-0278

MGASA-2025-0278 - Updated perl-File-Find-Rule packages fix security vulnerability

Mageia: Significant Risk of Cache Poisoning Vulnerability CVE-2025-11411

MGASA-2025-0273 - Updated unbound packages fix security vulnerability

Ubuntu 20.04: Bind Important Denial of Service Cache Poisoning USN-7836-2

Several security issues were fixed in Bind.

Linux

AlmaLinux 9 python-kdcproxy Major SSRF DoS Vulnerabilities ALSA-2025-21139

python-kdcproxy security update

Linux

AlmaLinux 9 BIND Important Cache Poisoning Issues CVE-2025-40778

bind security update

Linux

Ubuntu 16.04: USN-7868-1 Raptor Important Denial of Service Issues

Several security issues were fixed in Raptor.

Linux

GootLoader Is Back, Using a New Font Trick to Hide Malware on WordPress Sites

The malware known as GootLoader has resurfaced yet again after a brief spike in activity earlier this March, according to new findings from Huntress.The cybers…

WordPress

Researchers Detect Malicious npm Package Targeting GitHub-Owned Repositories

Cybersecurity researchers have discovered a malicious npm package named "@acitons/artifact" that typosquats the legitimate "@actions/artifact" package with the…

GitHub

Npm Package Targeting GitHub-Owned Repositories Flagged as Red Team Exercise

Cybersecurity researchers have discovered a malicious npm package named "@acitons/artifact" that typosquats the legitimate "@actions/artifact" package with the…

GitHub

Android Trojan 'Fantasy Hub' Malware Service Turns Telegram Into a Hub for Hackers

Cybersecurity researchers have disclosed details of a new Android remote access trojan (RAT) called Fantasy Hub that's sold on Russian-speaking Telegram channe…

Android

AlmaLinux 9 Squid Important Info Disclosure 2025-20935 CVE-2025-62168

squid security update

Linux

AlmaLinux 9 redis-7 Important RCE and DoS Flaws ALSA-2025-20955

redis:7 security update

Linux Databases

AlmaLinux 9 ALSA-2025-20963 qt5-qt3d Moderate Heap Overflow CVE-2025-11277

qt5-qt3d security update

Linux

AlmaLinux 9 xorg-x11-server Moderate Use-After-Free CVE-2025-62229

xorg-x11-server security update

Linux

Ubuntu: Intel Microcode Critical Escalation Threat USN-7866-1

Several security issues were fixed in Intel Microcode.

Linux

Mageia 9: serious buffer overflow flaw found in strongswan MGASA-2025-0272

MGASA-2025-0272 - Updated strongswan packages fix security vulnerability

openSUSE: Kernel Important Fix Denial of Service 2025:4036-1

An update that solves five vulnerabilities and has one security fix can now be installed.

Linux

GlassWorm Malware Discovered in Three VS Code Extensions with Thousands of Installs

Cybersecurity researchers have disclosed a new set of three extensions associated with the GlassWorm campaign, indicating continued attempts on part of threat …

Mageia 9: MGASA-2025-0271 Opencontainers-runc Important Denial of Service

MGASA-2025-0271 - Updated opencontainers-runc packages fix security vulnerabilities