Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Survey of 100+ Energy Systems Reveals Critical OT Cybersecurity Gaps
A study by OMICRON has revealed widespread cybersecurity gaps in the operational technology (OT) networks of substations, power plants, and control centers wor…
Critical Grist-Core Vulnerability Allows RCE Attacks via Spreadsheet Formulas
A critical security flaw has been disclosed in Grist‑Core, an open-source, self-hosted version of the Grist relational spreadsheet-database, that could result …
Debian 11: DLA-4443-1 DCMTK Important MemCorruption SegFault CVE-2025-14607
Two vulnerabilities have been addressed in DCMTK, a collection of libraries and applications implementing large parts of the DICOM standard for medical images.…
MongoDB 8.2: Memory Leak Risk CVE-2025-14847 Critical Exploit
MongoBleed, tracked as CVE-2025-14847, is a high-severity flaw in MongoDB that allows unauthenticated attackers to read small pieces of a server's memory. In s…
MongoBleed MongoDB Memory Leak Under Active Exploitation Distros Lag on Updates
MongoBleed, tracked as CVE-2025-14847, is a high-severity flaw in MongoDB that allows unauthenticated attackers to read small pieces of a server's memory. In s…
ThreatsDay Bulletin: GhostAd Drain, macOS Attacks, Proxy Botnets, Cloud Exploits, and 12+ Stories
The first ThreatsDay Bulletin of 2026 lands on a day that already feels symbolic — new year, new breaches, new tricks. If the past twelve months taught defende…
MongoDB Vulnerability CVE-2025-14847 Under Active Exploitation Worldwide
A recently disclosed security vulnerability in MongoDB has come under active exploitation in the wild, with over 87,000 potentially susceptible instances ident…
Traditional Security Frameworks Leave Organizations Exposed to AI-Specific Attack Vectors
In December 2024, the popular Ultralytics AI library was compromised, installing malicious code that hijacked system resources for cryptocurrency mining. In Au…
Debian LTS: postgresql-13 Critical DoS Integer Wraparound CVE-2025-12817
A couple of vulnerabilities were discovered in postgresql-13, the widely-popular database management system: CVE-2025-12817 Missing authorization in PostgreSQL…
Debian 11: glib2.0 Important Denial of Service Fix DLA-4412-1 CVE-2025-4373
Multiple issues were found in GLib, a general-purpose, portable utility library, that could lead to denial of service, memory corruption or potentially arbitra…
ThreatsDay Bulletin: AI Malware, Voice Bot Flaws, Crypto Laundering, IoT Attacks — and 20 More Stories
Hackers have been busy again this week. From fake voice calls and AI-powered malware to huge money-laundering busts and new scams, there’s a lot happening in t…
Qilin Ransomware Combines Linux Payload With BYOVD Exploit in Hybrid Attack
The ransomware group known as Qilin (aka Agenda, Gold Feather, and Water Galura) has claimed more than 40 victims every month since the start of 2025, barring …
Debian 11: libphp-adodb Important SQL Injection Advisory DLA-4340-1
libphp-adodb, a class library that provides abstractions for performing queries and managing databases, was affected by a vulnerability. Improper escaping of a…
What is an Out-of-Bounds Write Linux Security Vulnerability?
It starts as an innocuous bug. A developer miscalculates an offset, a boundary check is missing, a buffer is too small''just a simple oversight in code. But in…
Cisco: SNMP Critical Linux Rootkit Exploit CVE-2025-20352 RCE
Attackers are using a new Linux rootkit to compromise Cisco network devices and keep access long after the initial breach. The exploit begins in the SNMP servi…
Debian: PHP-Horde-CSS-Parser Critical Remote Code Execution DLA-4333-1
Sabberworm PHP CSS Parser before 8.3.1 calls eval on uncontrolled data, possibly leading to remote code execution if the function allSelectors() or getSelector…
Debian 11: libfcgi Critical Integer Overflow Buffer Overflow DLA-4329-1
An issue has been found in libfcgi, a FastCGI bridge from CGI. The issue is related to an integer overflow (and resultant heap-based buffer overflow) via craft…
Debian LTS 11: Redis Important RCE DoS Risks DLA-4325-1 CVE-2025-46817
Multiple vulnerabilities were discovered in Redis, a popular key/value database: * CVE-2025-46817: Fix an issue where an authenticated user could have
ThreatsDay Bulletin: MS Teams Hack, MFA Hijacking, $2B Crypto Heist, Apple Siri Probe & More
Cyber threats are evolving faster than ever. Attackers now combine social engineering, AI-driven manipulation, and cloud exploitation to breach targets once co…
13-Year Redis Flaw Exposed: CVSS 10.0 Vulnerability Lets Attackers Run Code Remotely
Redis has disclosed details of a maximum-severity security flaw in its in-memory database software that could result in remote code execution under certain cir…
13-Year-Old Redis Flaw Exposed: CVSS 10.0 Vulnerability Lets Attackers Run Code Remotely
Redis has disclosed details of a maximum-severity security flaw in its in-memory database software that could result in remote code execution under certain cir…
Red Hat OpenShift AI Flaw Exposes Hybrid Cloud Infrastructure to Full Takeover
A severe security flaw has been disclosed in the Red Hat OpenShift AI service that could allow attackers to escalate privileges and take control of the complet…
Debian 11: Critical Integer Overflow DoS in libjson-xs-perl CVE-2025-40928
A vulnerability has been fixed in libjson-xs-perl, a Perl module which does C/XS-accelerated manipulation of JSON-formatted data. CVE-2025-40928
Researchers Disclose Google Gemini AI Flaws Allowing Prompt Injection and Cloud Exploits
Cybersecurity researchers have disclosed three now-patched security vulnerabilities impacting Google's Gemini artificial intelligence (AI) assistant that, if s…