Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
CISA Issues Urgent Warning: Adobe ColdFusion Vulnerability Exploited in the Wild
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on March 15addeda security vulnerability impacting Adobe ColdFusion to its Known Exploited Vul…
CISA Alert: Oracle E-Business Suite and SugarCRM Vulnerabilities Under Attack
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on February 2addedtwo security flaws to its Known Exploited Vulnerabilities (KEV) Catalog, cit…
CISA Warns of Active exploitation of JasperReports Vulnerabilities
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) hasaddedtwo years-old security flaws impacting TIBCO Software's JasperReports product to its K…
Debian LTS: DLA-3190-2: grub2 security update
Zhang Boyang reported that the grub2 update released as DLA 3190-1 did not correctly apply fixes for CVE-2022-2601 and CVE-2022-3775. Updated packages are now …
What the CISA Reporting Rule Means for Your IT Security Protocol
The newCyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA)requires CISA to create rules regarding cyber incident reporting by critical in…
Debian: DSA-5279-2: wordpress security update
The wordpress package released in DSA-5279-1 had incorrect dependencies that could not be satisfied in Debian stable: this update corrects the problem. For ref…
7 Ways to Protect Your Business Against Cyber Threats
Cybercrime is a real threat. According to the US Cybersecurity & Infrastructure Security Agency (CISA),…7 Ways to Protect Your Business Against Cyber Threats o…
CISA: Urgent Patching Needed for Actively Exploited Linux Kernel Flaw
SecurityWeek reports that federal agencies have been ordered by the Cybersecurity and Infrastructure Security Agency to remediate within three weeks a Linux ke…
CISA Issues Warning on Active Exploitation of UnRAR Software for Linux Systems
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a recently disclosed security flaw in the UnRAR utility to its Known Exploite…
Fedora 36: subversion 2022-2af658b090
This update includes the latest stable release of _Apache Subversion_, version **1.14.2**. This update addresses two security issues, `CVE-2021-28544` and `CVE…
CISA Adds Another 95 Flaws to its Actively Exploited Vulnerabilities Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) this week added 95 more security flawsto itsKnown Exploited Vulnerabilities Catalog, taking th…
CISA adds recently disclosed Zimbra bug to its Exploited Vulnerabilities Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA)expandedits Known Exploited Vulnerabilities Catalog to include a recently disclosed zero-day fl…
CISA Orders Federal Agencies to Patch Actively Exploited Windows Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is urging federal agencies to secure their systems against an actively exploited security vuln…
Fedora 34: flatpak 2022-8c64cb09
This is a regression fix update, reverting non-backwards-compatible behaviour changes in the solution previously chosen for [CVE-2022-21682](https://github.co …
Fedora 34: flatpak-builder 2022-8c64cb09
This is a regression fix update, reverting non-backwards-compatible behaviour changes in the solution previously chosen for [CVE-2022-21682](https://github.co …
Debian LTS: DLA-2899-1: policykit-1 security upda
The Qualys Research Labs discovered a local privilege escalation in PolicyKit's pkexec. Details can be found in the Qualys advisory at
RedHat: RHSA-2022-0146:03 Moderate: EAP XP 2 security update to CVE fix
This advisory resolves CVE issues filed against XP2 releases that have been fixed in the underlying EAP 7.3.x base. There are no changes to the EAP XP2 code ba…
Fedora 35: flatpak 2022-825ca6bf
Update to 1.12.3 Fixes these two security issues: * CVE-2021-43860 or https://github.com/flatpak/flatpak/security/advisories/GHSA-qpjc-vq3c-572j * CVE-2022-216…
RedHat: RHSA-2021-3516:01 Important: EAP XP 2 security update to CVE fix
This advisory resolves CVE issues filed against XP2 releases that have been fixed in the underlying EAP 7.3.x base. There are no changes to the EAP XP2 code ba…
Top 30 Critical Security Vulnerabilities Most Exploited by Hackers
Intelligence agencies in Australia, the U.K., and the U.S. issued a joint advisory on Wednesday detailing the most exploited vulnerabilities in 2020 and 2021, …
RedHat: RHSA-2021-2755:01 Moderate: EAP XP 2 security update to CVE fix
This advisory resolves CVE issues filed against XP2 releases that have been fixed in the underlying EAP 7.3.x base. There are no changes to the EAP XP2 code ba…
NSA, FBI Reveal Hacking Methods Used by Russian Military Hackers
An ongoing brute-force attack campaign targeting enterprise cloud environments has been spearheaded by the Russian military intelligence since mid-2019, accord…
RedHat: RHSA-2021-2210:01 Moderate: EAP XP 1 security update to CVE fix
This advisory resolves CVE issues filed against XP1 releases that have been fixed in the underlying EAP 7.3.x base. There are no changes to the EAP XP1 code ba…
Mageia 2021-0211: mariadb security upda
Some severe exploitable vulnerabilities were discovered and fixed (CVE-2021-2154 and CVE-2021-2166). This is a regular update, which brings the usual improveme…