Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Important Privilege Escalation Vulnerability in SUSE Google Cloud SAP Agent
An update that solves four vulnerabilities can now be installed.
SUSE google-cloud-sap-agent Important Update CVE-2026-39821
An update that solves one vulnerability can now be installed.
SUSE Google-Cloud-SAP-Agent Important Dependency Update CVE-2026-39821
An update that solves one vulnerability can now be installed.
openSUSE Google Cloud SAP Agent Auth Bypass 2026-1194-1 CVE-2026-33186
An update that solves one vulnerability and has one security fix can now be installed.
SUSE Google Cloud SAP Agent Key Authorization Bypass Flaw 2026-1194-1
An update that solves one vulnerability and has one security fix can now be installed.
Google Gemini Prompt Injection Flaw Exposed Private Calendar Data via Malicious Invites
Cybersecurity researchers have disclosed details of a security flaw that leverages indirect prompt injection targeting Google Gemini as a way to bypass authori…
Critical Buffer Overflow Patch in Fedora 41 for Cloud-Init CVE-2024-11584
Backport fixes for CVE-2024-6174 and CVE-2024-11584 cloud-init included the systemd socket unit cloud-init-hotplugd.socket with default SocketMode that grants …
Fedora 42: Important Permission Issues in cloud-init with CVE-2024-6174
Backport fixes for CVE-2024-6174 and CVE-2024-11584 cloud-init included the systemd socket unit cloud-init-hotplugd.socket with default SocketMode that grants …
Critical NVIDIA Container Toolkit Flaw Allows Privilege Escalation on AI Cloud Services
Cybersecurity researchers have disclosed a critical container escape vulnerability in the NVIDIA Container Toolkit that could pose a severe threat to managed A…
Chinese APT41 Exploits Google Calendar for Malware Command-and-Control Operations
Google on Wednesday disclosed that the Chinese state-sponsored threat actor known as APT41 leveraged a malware called TOUGHPROGRESS that uses Google Calendar f…
[Webinar] From Code to Cloud to SOC: Learn a Smarter Way to Defend Modern Applications
Modern apps move fast—faster than most security teams can keep up. As businesses rush to build in the cloud, security often lags behind. Teams scan code in iso…
Google Cloud Researchers Uncover Flaws in Rsync File Synchronization Tool
As many as six security vulnerabilities have been disclosed in the popular Rsync file-synchronizing tool for Unix systems, some of which could be exploited to …
Google OAuth Vulnerability Exposes Millions via Failed Startup Domains
New research has pulled back the curtain on a "deficiency" in Google's "Sign in with Google" authentication flow that exploits a quirk in domain ownership to g…
Google Confirms Critical Security Flaws Using AI
Google has long been at the forefront of innovation in cybersecurity, yet security vulnerabilities in its widely used products like Chrome browser and Gmail ar…
TryCloudflare Exploited In Malicious Campaigns Spreading Malware
Researchers found Cloudflare’s latest feature, TryCloudflare, actively exploited in malware campaigns. While the feature facilitates…TryCloudflare Exploited In…
Malware Using Google MultiLogin Exploit to Maintain Access Despite Password Reset
Information stealing malware are actively taking advantage of an undocumented Google OAuth endpoint named MultiLogin to hijack user sessions and allow continuo…
Linux developers patch security holes faster than anyone else, says Google Project Ze
There's a lot of FUD about how Linux is being shown recently to be less secure than proprietary systems. That's nonsense. But, now there are hard facts from Go…
Linux in space: CloudLinux powers Atlas V rock
CloudLinux's TuxCare services are now providing automated security patches and updates for the systems supporting the Atlas V rocket . ''Protecting US [and wor…
Google Jazzes Up Its Patch Reward Program With Upfront Financial Support
Google has announced updates to its existing Patch Reward Program. Beginning in 2020, Google will provide upfront financial support toGoogle Jazzes Up Its Patc…
Google Discloses Zero-Day Vulnerability In Chrome Browser Under Active Exploitation
This week Google has made a revelation for their users regarding a zero-day vulnerability in the Google Chrome browser underGoogle Discloses Zero-Day Vulnerabi…
SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch
A maximum-severity security vulnerability impacting SAP Commerce Cloud is witnessing active exploitation efforts.The vulnerability, tracked as CVE-2026-58231, …
SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code
SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution.…
PCPJack Credential Stealer Exploits 5 CVEs to Spread Worm-Like Across Cloud Systems
Cybersecurity researchers have disclosed details of a new credential theft framework dubbed PCPJack that targets exposed cloud infrastructure and ousts any art…
Threat Actors Mass-Scan Salesforce Experience Cloud via Modified AuraInspector Tool
Salesforce has warned of an increase in threat actor activity that's aimed at exploiting misconfigurations in publicly accessible Experience Cloud sites by mak…