Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Top 12 Security Flaws Russian Spy Hackers Are Exploiting in the Wild
Cyber operatives affiliated with the Russian Foreign Intelligence Service (SVR) have switched up their tactics in response to previous public disclosures of th…
Debian LTS: DLA-2599-1: shibboleth-sp2 security upda
Toni Huttunen discovered that the Shibboleth service provider's template engine used to render error pages could be abused for phishing attacks. For additional…
Cisco Releases Security Patches for Critical Flaws Affecting its Products
Cisco has addressed a maximum severity vulnerability in its Application Centric Infrastructure (ACI) Multi-Site Orchestrator (MSO) that could allow an unauthen…
Fedora 32: pdns 2020-7e923405
- Update to 4.3.1 - PowerDNS Security Advisory 2020-05 (CVE-2020-17482) Release notes: https://doc.powerdns.com/authoritative/changelog/4.2.html#change-4.3.1 S…
Fedora 33: pdns 2020-7b154126
- Update to 4.3.1 - PowerDNS Security Advisory 2020-05 (CVE-2020-17482) Release notes: https://doc.powerdns.com/authoritative/changelog/4.2.html#change-4.3.1 S…
Fedora 31: mbedtls 2020-5b60029f
- Update to 2.16.7 Security advisory: https://tls.mbed.org/tech- updates/security-advisories/mbedtls-security-advisory-2020-07
Mageia 2020-0291: xpdf security upda
Advisory text to describe the update. Wrap lines at ~75 chars. A stack-based buffer over-read exists in FoFiTrueType::dumpString in fofi/FoFiTrueType.cc in Xpd…
Debian: DSA-4706-1: drupal7 security upda
It was discovered that Drupal, a fully-featured content management framework, was suspectible to cross site request forgery. For additional information, please…
Debian LTS: DLA-2241-2: linux security upda
This update is now available for all supported architectures. For reference the original advisory text follows. Several vulnerabilities have been discovered in…
Fedora 32: php-phpmailer6 FEDORA-2020-d67df93a
This is a security release, with some other minor changes. For full details, refer to the [advisory](https://github.com/PHPMailer/PHPMailer/security/advisories…
Fedora 31: php-phpmailer6 FEDORA-2020-6d2e1105
This is a security release, with some other minor changes. For full details, refer to the [advisory](https://github.com/PHPMailer/PHPMailer/security/advisories…
Fedora 31: mbedtls FEDORA-2020-42564738
- Update to 2.16.6 Release notes: https://tls.mbed.org/tech- updates/releases/mbedtls-2.16.6-and-2.7.15-released Security Advisory: https://tls.mbed.org/tech-u…
Debian: DSA-4676-2: salt security upda
The update for salt for the oldstable distribution (stretch) released as DSA 4676-1 contained an incomplete fix to address CVE-2020-11651 and CVE-2020-11652. U…
US Govt Warns Critical Industries After Ransomware Hits Gas Pipeline Facility
The U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency (CISA) earlier today issued a warning to allÂindustries operating c…
Fedora 31: mbedtls FEDORA-2020-5bcfae9f
- Update to 2.16.4 - CVE-2019-18222 Release notes: https://tls.mbed.org/tech- updates/releases/mbedtls-2.16.4-and-2.7.13-released Security Advisory: https://tl…
Report: The Government and Tech Need to Cooperate on AI
Americas national security depends on the government getting access to the artificial intelligence breakthroughs made by the technology industry. So says a rep…
Debian: DSA-4509-3: apache2 security update
It was reported that the apache2 update released as DSA 4509-1 incorrectly fixed CVE-2019-10092. Updated apache2 packages are now available to correct this iss…
Fedora 29: mbedtls FEDORA-2019-89891f3e4a
- Update to 2.16.3 - Side channel attack on deterministic ECDSA (CVE-2019-16910) Release notes: https://tls.mbed.org/tech- updates/releases/mbedtls-2.16.3-and-…
Fedora 30: mbedtls FEDORA-2019-07940971b2
- Update to 2.16.3 - Side channel attack on deterministic ECDSA (CVE-2019-16910) Release notes: https://tls.mbed.org/tech- updates/releases/mbedtls-2.16.3-and-…
Fedora 31: mbedtls FEDORA-2019-1240f0fe43
- Update to 2.16.3 - Side channel attack on deterministic ECDSA (CVE-2019-16910) Release notes: https://tls.mbed.org/tech- updates/releases/mbedtls-2.16.3-and-…
CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server.…
CISA: SafePay ransomware hit over 600 critical infrastructure orgs
The Cybersecurity and Infrastructure Security Agency (CISA) says the SafePay ransomware gang has breached over 600 critical infrastructure organizations worldw…
CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, in…
PHP warns admins of two critical flaws, emergency patches coming tomorrow
The PHP security team is warning administrators to prepare for emergency security updates tomorrow to address two critical vulnerabilities, as information abou…