Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Critical Memory Vulnerability in openSUSE Leap 17 0 Data Importer DoS Risk
An update that solves 3 vulnerabilities and has 3 bug fixes can now be installed.
Ubuntu 24.04 LTS Linux Kernel Critical Data Exploit Advisory USN-8031-3
Several security issues were fixed in the Linux kernel.
Fedora 42 nginx-mod-headers-more Critical Data Injection Flaw CVE-2026-1642
nginx-mod-fancyindex: Rebuild for 1.28.2 nginx-mod-headers-more: Rebuild for 1.28.2 nginx-mod-brotli:
Fedora 42 nginx-mod-vts Critical Data Injection Fix CVE-2026-1642
nginx-mod-fancyindex: Rebuild for 1.28.2 nginx-mod-headers-more: Rebuild for 1.28.2 nginx-mod-brotli:
Fedora 42 nginx-mod-brotli Critical Data Injection Fix CVE-2026-1642
nginx-mod-fancyindex: Rebuild for 1.28.2 nginx-mod-headers-more: Rebuild for 1.28.2 nginx-mod-brotli:
openSUSE 2026-0041-1 chromium Critical Memory Integrity Breach
An update that fixes two vulnerabilities is now available.
CentOS Flask-RESTful Enhanced Data Security Update CentOS-SU-2026-0085-3
An update that fixes one vulnerability, contains one feature is now available.
openSUSE: Addressing Moderate Data Exposure in python-cbor2 CVE-2025-68131
An update that fixes one vulnerability is now available.
Fedora 42: nginx-mod-headers-more Critical Data Exposure CVE-2025-53860
Changes with nginx 1.28.1 23 Dec 2025 *) Security: processing of a specially crafted login/password when using the "none" authentication method in the ngx_mail…
Critical Vulnerability in Fedora 42: python-unicodedata2 Arbitrary RCE
Update to 17.0.0 version (#2412270) Update fonttools 4.61.0
SUSE: Kernel Important TLS Data Capture Fix CVE-2025-38616 2025:4311-1
* bsc#1249537 Cross-References: * CVE-2025-38616
⚡ Weekly Recap: Fortinet Exploit, Chrome 0-Day, BadIIS Malware, Record DDoS, SaaS Breach & More
This week saw a lot of new cyber trouble. Hackers hit Fortinet and Chrome with new 0-day bugs. They also broke into supply chains and SaaS tools. Many hid insi…
Fedora 41: LUKSData Integrity Restoration Update CVE-2025-11678
New upstream release v10 Fix: CVE-2025-11568
openSUSE: java-11-openjdk Important Data Access Threat 2025:3996-1
An update that solves two vulnerabilities and has one security fix can now be installed.
openSUSE: java-1_8_0-ibm Important Data Access Issues 2025:3965-1
An update that solves three vulnerabilities and has one security fix can now be installed.
Researchers Find ChatGPT Vulnerabilities That Let Attackers Trick AI Into Leaking Data
Cybersecurity researchers have disclosed a new set of vulnerabilities impacting OpenAI's ChatGPT artificial intelligence (AI) chatbot that could be exploited b…
Hackers Used Snappybee Malware and Citrix Flaw to Breach European Telecom Network
A European telecommunications organization is said to have been targeted by a threat actor that aligns with a China-nexus cyber espionage group known as Salt T…
CVE-2025-11371: Linux Security Must Prepare for Cross-Stack Breach
CVE-2025-11371 doesn't target Linux directly. It doesn't need to.
⚡ Weekly Recap: Bootkit Malware, AI-Powered Attacks, Supply Chain Breaches, Zero-Days & More
In a world where threats are persistent, the modern CISO’s real job isn't just to secure technology—it's to preserve institutional trust and ensure business co…
SUSE: libsoup Low Data Access Security Fix CVE-2025-4945 2025:03026-1
* bsc#1243314 Cross-References: * CVE-2025-4945
Hidden Vulnerabilities of Project Management Tools & How FluentPro Backup Secures Them
Every day, businesses, teams, and project managers trust platforms like Trello, Asana, etc., to collaborate and manage tasks. But what happens when that trust …
What Is a SQLi Vulnerability?
SQL injection (SQLi) is one of those vulnerabilities that's deceptively simple in concept yet devastating in its impact. It's a family of security flaws tied t…
Hackers Exploit SAP Vulnerability to Breach Linux Systems and Deploy Auto-Color Malware
Threat actors have been observed exploiting a now-patched critical SAP NetWeaver flaw to deliver the Auto-Color backdoor in an attack targeting a U.S.-based ch…
Mageia 9: QtBase6 & QtBase5 Critical DoS CVE-2025-5455 Advisory 2025-0212
An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code. If…