The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to 2.46.5: Fix several crashes and rendering issues. CVE-2024-54479, CVE-2024-54502, CVE-2024-54508, CVE-2024-54505
Bogus software update lures are being used by threat actors to deliver a new stealer malware called CoinLurker."Written in Go, CoinLurker employs cutting-edge …
* bsc#1231039 * bsc#1232747 Cross-References: * CVE-2024-44244
* bsc#1231039 * bsc#1232747 Cross-References: * CVE-2024-44296
Did you know that advanced threat actors can infiltrate the identity systems of major organizations and extract sensitive data within days? It’s a chilling rea…
A high-severity security flaw has been disclosed in the LiteSpeed Cache plugin for WordPress that could allow an unauthenticated threat actor to elevate their …
* bsc#1231039 Cross-References: * CVE-2024-23213 * CVE-2024-23271
* bsc#1231039 Cross-References: * CVE-2024-23206 * CVE-2024-23213
The world of cybersecurity is in a constant state of flux. New vulnerabilities emerge daily, and attackers are becoming more sophisticated.In this high-stakes …
Let's be honest. The world of cybersecurity feels like a constant war zone. You're bombarded by threats, scrambling to keep up with patches, and drowning in an…
* bsc#1229221 Cross-References: * CVE-2024-42353
* bsc#1229221 Cross-References: * CVE-2024-42353
Let's face it: AppSec and developers often feel like they're on opposing teams. You're battling endless vulnerabilities while they just want to ship code. Soun…
Qt 5.15.14 bugfix update. Fix CVE-2024-36048
New research has found that the CONTINUATION frame in the HTTP/2 protocol can be exploited to conduct denial-of-service (DoS) attacks.The technique has been co…
Update to 2.44.0 CVE-2024-23263, CVE-2024-23280, CVE-2024-23284
A critical security flaw has been disclosed in a popular WordPress plugin called Ultimate Member that has more than 200,000 active installations.The vulnerabil…
* bsc#1219113 * bsc#1219604 Cross-References: * CVE-2014-1745
* bsc#1219113 * bsc#1219604 Cross-References: * CVE-2014-1745
* bsc#1219113 Cross-References: * CVE-2024-23222
Vulnerable Docker services are being targeted by a novel campaign in which the threat actors are deploying XMRig cryptocurrency miner as well as the 9Hits View…
Digital expansion inevitably increases the external attack surface, making you susceptible to cyberthreats. Threat actors increasingly exploit the vulnerabilit…
Financial data is much more than just a collection of numbers; it is a crucial component of any business and a prime target for cybercriminals. It's important …
In today's rapidly evolving technological landscape, the integration of Artificial Intelligence (AI) and Large Language Models (LLMs) has become ubiquitous acr…