Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday urged organizations to take steps to immediately update their Ivanti Connect Secure…
Industrial Control Systems Vulnerabilities Soar: Over One-Third Unpatched in 2023
About 34% of security vulnerabilities impacting industrial control systems (ICSs) that were reported in the first half of 2023 have no patch or remediation, re…
Chainalysis warns all users hit in cyber breach involving ‘agentic’ techniques
Chainalysis, the blockchain analytics company, said Wednesday night that some information belonging to all its users — which its website says include those in …
Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Connect Secure (ICS) to its Known Exploite…
CISA warns admins to immediately fix Ivanti flaw exploited as zero-day
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged security teams to immediately patch an Ivanti Connect Secure (ICS) flaw exploited in zer…
Ivanti warns of Connect Secure zero-day exploited in attacks
Ivanti urged customers on Tuesday to immediately patch an actively exploited zero-day vulnerability in the Ivanti Connect Secure (ICS) remote access gateway.…
Fedora version 43 releases critical advisory on buffer overflow in Libre
Baresip v4.12.0 (2026-09-30) Feature: Send Custom X-Headers on Outbound Calls audio: thread-safe usage of psize and ptime in tx_thread() jbuf: safer jbuf_set_i…
Fedora 43 Baresip 4.12.0 Update Advisory 2026-ff2a4f31ce
Baresip v4.12.0 (2026-09-30) Feature: Send Custom X-Headers on Outbound Calls audio: thread-safe usage of psize and ptime in tx_thread() jbuf: safer jbuf_set_i…
Fedora 44 Baresip 4.12.0 Security Advisory ID 2026-9931bf2b85
Baresip v4.12.0 (2026-09-30) Feature: Send Custom X-Headers on Outbound Calls audio: thread-safe usage of psize and ptime in tx_thread() jbuf: safer jbuf_set_i…
Mageia 10 - Xonotic Bugfix Advisory for the Year 2026-0063
Mageia 10 has released updated Xonotic packages to address issues with broken online statistics support, as detailed in the bug report.
Fedora 44 Python-Django-Haystack Faces Critical Deserialization Risk
Fixes GHSA-r3hx-x5rh-p9vv: via eval() in Elasticsearch Result Deserialization https://github.com/django-haystack/django- haystack/security/advisories/GHSA-r3hx…
Fix Critical Deserialization Issue in Fedora 43 python-django-haystack
Fixes GHSA-r3hx-x5rh-p9vv: via eval() in Elasticsearch Result Deserialization https://github.com/django-haystack/django- haystack/security/advisories/GHSA-r3hx…
Fedora 44 BIRD Important Crash Fix Advisory 2026-8f225adf49
BIRD 3.3.1 (2026-06-09) BGP: Fix crash when incoming connection for disabled protocol arrives BGP: Fix parsing labelled NLRIs with no next hop BGP: Fix cork be…
GPUHammer: New RowHammer Attack Variant Degrades AI Models on NVIDIA GPUs
NVIDIA is urging customers to enable System-level Error Correction Codes (ECC) as a defense against a variant of a RowHammer attack demonstrated against its gr…
Debian LTS: DLA-3987-1: renderdoc Security Advisory Updates
Multiple vulnerabilities have been fixed in the graphics debugger RenderDoc. CVE-2023-33863
Inside Iran’s Cyber Playbook: AI, Fake Hosting, and Psychological Warfare
U.S. and Israeli cybersecurity agencies have published a new advisory attributing an Iranian cyber group to targeting the 2024 Summer Olympics and compromising…
Debian LTS: DLA-3895-1: puredata Security Advisory Updates
The realtime computer music and graphics system puredata does now terminate when dropping setuid privileges failed. For Debian 11 bullseye, this problem has be…
Debian LTS: DLA-3857-1: libtommath Security Advisory Updates
It was discovered that there was a series of integer overflow vulnerabilities in LibTomMath, a multiple-precision mathematics library.
Snowflake Warns: Targeted Credential Theft Campaign Hits Cloud Customers
Cloud computing and analytics company Snowflake said a "limited number" of its customers have been singled out as part of a targeted campaign."We have not iden…
Debian: DSA-5690-1: libreoffice Security Advisory Updates
Amel Bouziane-Leblond discovered that LibreOffice's support for binding scripts to click events on graphics could result in unchecked script execution.
[SECURITY] [3803-1] astropy Security Advisory Updates
It was discovered that there was a potential remote code execution vulnerability in Astropy, a suite of tools, utilities and Python utilities for astrophysics.
Iranian Hackers Exploit PLCs in Attack on Water Authority in U.S.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) revealed that it's responding to a cyber attack that involved the active exploitation of Unitr…
U.S. Cybersecurity Agencies Warn of Scattered Spider's Gen Z Cybercrime Ecosystem
U.S. cybersecurity and intelligence agencies have released a joint advisory about a cybercriminal group known asScattered Spiderthat's known to employ sophisti…
Warning: Samsung Devices Under Attack! Critical Security Flaw Exposed
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned of active exploitation of a medium-severity flaw affecting Samsung devices.The issue, t…