Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 35: getdata 2021-e2b64c61
0.11.0, fix use after free, CVE-2021-20204
Fedora 34: getdata 2021-197545a7
0.11.0, fix use after free, CVE-2021-20204
openSUSE: 2021:0482-1 moderate: evolution-data-serv
An update that solves two vulnerabilities and has one errata is now available.
How To Identify Libraries that are Still Vulnerable to Attacks After Updat
Patch management can be a complex and time-consuming process, and because of this, patches to fix vulnerabilities may not be applied before a hacker is able to…
Mageia 2020-0273: libexif security upda
The updated packages fix a security vulnerability: In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow. T…
SUSE: 2020:14383-1 moderate: evolution-data-serv
An update that fixes one vulnerability is now available.
Mageia 2020-0238: libexif security upda
The updated packages fix a security vulnerability: In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds …
IBM == Insecure Business Machines: No-auth remote root exec exploit in Data Risk Manager drops after Big Blue snubs bug repo
IBM has admitted to making 'a process error, improper response' to a bug report that identified four vulnerabilities in its enterprise security software, and t…
Comodo Forums Hack Exposes 245,000 Users' Data ' Recent vBulletin 0-day Used
If you have an account with the Comodo discussion board and support forums, also known as ITarian Forum, you should change your password immediately.Cybersecur…
NetCAT: New Attack Lets Hackers Remotely Steal Data From Intel CPUs
Unlike previous side-channel vulnerabilities disclosed in Intel CPUs, researchers have discovered a new flaw that can be exploited remotely over the network wi…
Fedora 43 Parted Update Severity Important Partition Fix CVE-2026-89085
parted: Fix partition number allocation in do_print (bcl) fdasd: Make sure data set name is positive (bcl) resize: Make sure hfsc_new_cachetable cannot overflo…
Debian 12 Redis Critical Use-After-Free and Out-of-Bounds Alerts DLA-4794-1
It was discovered that there were two vulnerabilities in the Redis key/value database. CVE-2026-81934 CVE-2026-81934: Prevent a use-after-free vulnerability in…
Installed Is Not Remediated: How to Verify Linux Security Patches in Production
There are several reasons why Linux has such a good reputation and has become such a good standard across the world. It is the power behind most internet serve…
Debian 11 Rails Critical RCE Vulnerability DLA-4578-1 CVE-2022-32224
A RCE (Remote Code Execution) escalation was discovered in Ruby on Rails, a MVC Ruby-based framework for web development. This vulnerability exists when using …
Debian 11 PostgreSQL 13 Multiple Issues Fixed DLA-4524-1 CVE-2026-2003
Multiple vulnerabilities were fixed in PostgreSQL, a popular database. CVE-2026-2003 Fix CVE-2026-2003: Improper validation of type "oidvector" in PostgreSQL a…
Debian DSA-6198-1 Valkey Critical Denial of Service Risk Advisory
Two security vulnerabilities were discovered in Valkey, a persistent key-value database with network interface, which could result in denial of service or data…
n8n 1.122.0 Critical RCE Auth Bypass Exploit CVE-2025-68613
n8n (CVE-2025-68613) is an open-source automation tool used to connect APIs, databases, and SaaS apps into workflows. It is commonly used to move data between …
The Ni8mare Chain: How n8n RCE Turns Auth Bypass Into Linux Host Compromise
n8n (CVE-2025-68613) is an open-source automation tool used to connect APIs, databases, and SaaS apps into workflows. It is commonly used to move data between …
Debian Trixie multipart Important DoS Flaw Fix DSA-6161-1 CVE-2026-28356
It was discovered that the parse_options_header() function of multipart, a Python multipart/form-data parser was susceptible to denial of service via malformed…
UNC6426 Exploits nx npm Supply-Chain Attack to Gain AWS Admin Access in 72 Hours
A threat actor known as UNC6426 leveraged keys stolen following the supply chain compromise of the nx npm package last year to completely breach a victim's clo…
The Death of the Security Checkbox: BAS Is the Power Behind Real Defense
Security doesn’t fail at the point of breach. It fails at the point of impact. That line set the tone for this year’s Picus Breach and Simulation (BAS) Summit,…
Webinar: Why Top Teams Are Prioritizing Code-to-Cloud Mapping in Our 2025 AppSec
Picture this: Your team rolls out some new code, thinking everything's fine. But hidden in there is a tiny flaw that explodes into a huge problem once it hits …
Mageia 9: glib2.0 Important Memory Overflow Issue CVE-2025-6052
A flaw was found in how GLib¢''s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause …
Secure Your Servers with Linux Patch Management
One of the most important responsibilities of any organization's IT team is to make sure that its digital assets are kept secure. Data breaches can result in m…