Cybersecurity News

Source Watch

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

LinuxSecurity - Security Articles Breaches & leaks

Act Fast: CERT-Ins Chrome Warning & Mitigation Strategies

India's Computer Emergency Response Team (CERT-In) recently issued a high-risk advisory warning about Google Chrome vulnerabilities in versions prior to 131.0.…

Linux Chrome

LinuxSecurity - Security Articles

Embracing AI & Open-Source: Reflecting on 2024 ITOps Trends

As we head into 2025 and reflect back on 2024, Linux security admins' roles and responsibilities are evolving rapidly with defining trends like the pervasive i…

What it means for your servers

Check Point gateways hacked through PHP2Shell: the vendor confirms attacks, a backdoor and a wiper

N-central: N-able ships a critical update after exploits for its RMM platform go public

Xen Orchestra: an exploited authentication bypass gives attackers admin rights over XCP-ng virtualisation

FreeSWITCH: a single SIP message can run commands on the server, and the flaw is being exploited

OpenSSH: password authentication can be bypassed on Linux systems using musl without PAM, CERT-FR warns

WordPress: a flaw in the core upgrade process is exploited to run code on servers, CISA warns

cPGuard: a hijacked update channel pushed a root backdoor to about 2,950 Linux servers

Synology: ransomware attacks hit NAS still running DSM versions left unpatched since 2024

GitLab CVE-2026-97229: now listed as exploited by CISA, and Alpine Linux shows that upgrading is not always enough

PHP2Shell: two critical PHP flaws allow unauthenticated remote code execution on web servers

OVHcloud CLI: official binaries replaced with a secret-stealing malware on GitHub for 1 h 33

BeyondTrust Remote Support: a zero-day exploited since August lets attackers take over the appliance without an account

Nextcloud: attackers plant web shells through Collabora’s Built-in CODE Server app, update or remove it now

FBI and nine partner agencies expose the toolkit of China-linked Integrity Tech: old flaws, Exchange password spraying and SoftEther VPN backdoors

Atlassian Data Center: critical flaw lets anyone read files on Jira, Confluence and Bitbucket servers

Apache HTTP Server 2.4.69: 20 security fixes, none critical — how to update calmly

Citrix NetScaler: two critical zero-days under mass exploitation — patch, then check for compromise

Latest headlines from security outlets

Act Fast: CERT-Ins Chrome Warning & Mitigation Strategies

Embracing AI & Open-Source: Reflecting on 2024 ITOps Trends

Oracle7: ELSA-2024-10882: postgresql Important Security Advisory Updates

A Practical Guide to Securing Your TP-Link Router with OpenWRT

Oracle9: ELSA-2024-11250: pam security Moderate Security Advisory Updates

Oracle9: ELSA-2024-11242: mpg123:1.32.9 Moderate Security Advisory Updates

Oracle9: ELSA-2024-11238: python3.11-urllib3 Moderate Security Advisory Updates

Oracle9: ELSA-2024-11237: libsndfile:1.0.31 Moderate Security Advisory Updates

Oracle9: ELSA-2024-11232: unbound:1.16.2 Moderate Security Advisory Updates

Oracle9: ELSA-2024-11219: edk2:20240524 Moderate Security Advisory Updates

Oracle8: ELSA-2024-11345: gstreamer1-plugins-base Important Security Advisory Updates

Oracle8: ELSA-2024-11299: gstreamer1-plugins-good Important Security Advisory Updates

Oracle8: ELSA-2024-11193: mpg123 security Moderate Security Advisory Updates

Oracle8: ELSA-2024-11192: libsndfile Moderate Security Advisory Updates

Oracle8: ELSA-2024-11189: python3.11-urllib3 Moderate Security Advisory Updates

Oracle8: ELSA-2024-11185: edk2:20220126gitbb1bba3d77 Moderate Security Advisory Updates

MUT-1244: The Latest Threat To Your Sensitive Credentials

Containerizing WordPress: Best Practices for Robust Security and Management

Oracle7: ELSA-2024-10881: firefox security Important (aarch64) Security Advisory Updates

Oracle7: ELSA-2024-10381: tuned security Moderate (aarch64) Security Advisory Updates

Oracle7: ELSA-2024-10881: firefox security Important Security Advisory Updates

Oracle7: ELSA-2024-10381: tuned security Moderate Security Advisory Updates

Mitigating Spectre Challenges with Qualcomm CPUs

Oracle9: ELSA-2024-11123: gstreamer1-plugins-base Important Security Advisory Updates