Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Vulnerabilities In Pascom Phone System Could Allow RCE Attacks
A researcher has discovered numerous security vulnerabilities affecting Pascom Cloud Phone Systems. Exploiting the bugs…Vulnerabilities In Pascom Phone System …
VMware Issues Security Patches for High-Severity Flaws Affecting Multiple Products
VMware on Tuesday patched severalhigh-severityvulnerabilitiesimpacting ESXi, Workstation, Fusion, Cloud Foundation, and NSX Data Center for vSphere that could …
New Chrome 0-Day Bug Under Active Attack – Update Your Browser ASAP!
Google on Monday rolled out fixes for eight security issues in the Chrome web browser, including a high-severity vulnerability that's being actively exploited …
Serious Security: Linux full-disk encryption bug fixed ' patch no
Lots of people ''run Linux'' without really knowing or caring '' many home routers, navigational aids, webcams and other IoT devices are based on it; the major…
Debian: DSA-5041-1: cfrpki security upda
Multiple vulnerabilities were discovered in Cloudflare's RPKI validator, which could result in denial of service or path traversal. For the stable distribution…
Hackers Begin Exploiting Second Log4j Vulnerability as a Third Flaw Emerges
Web infrastructure company Cloudflare on Wednesday revealed that threat actors are actively attempting to exploit asecond bugdisclosed in the widely used Log4j…
Debian: DSA-5020-1: apache-log4j2 security upda
Chen Zhaojun of Alibaba Cloud Security Team discovered a critical security vulnerability in Apache Log4j, a popular Logging Framework for Java. JNDI features u…
Mozilla Patched 'BigSig' Vulnerability That Affects The NSS Cryptographic Library
A security researcher from Google Project Zero discovered a critical and easily exploitable “BigSig” vulnerability…Mozilla Patched 'BigSig' Vulnerability That …
Multiple Vulnerabilities Spotted In Zoom Video Conferencing App
Researchers from Google Project Zero have discovered numerous vulnerabilities in the Zoom app that could…Multiple Vulnerabilities Spotted In Zoom Video Confere…
Imunify360 Bug Leaves Linux Web Servers Open to Code Execution, Takeov
CloudLinux's security platform for Linux-based websites and web servers contains a high-severity PHP deserialization bug, leaving web servers vulnerable to cod…
VMware Warns of Newly Discovered Vulnerabilities in vSphere Web Client
VMware has shipped updates to address two security vulnerabilities in vCenter Server and Cloud Foundation that could be abused by a remote attacker to gain acc…
MacOS Zero-Day Vulnerability Allowed Keylogging and Screengrabs
Google researchers discovered zero-day affecting macOS devices that could allow recording keystrokes or screen grabs.…MacOS Zero-Day Vulnerability Allowed Keyl…
Hackers Exploit macOS Zero-Day to Hack Hong Kong Users with new Implant
Google researchers on Thursday disclosed that it found a watering hole attack in late August exploiting a now-patched zero-day in macOS operating system and ta…
Microsoft Warns of New Security Flaw Affecting Surface Pro 3 Devices
Microsoft has published a new advisory warning of a security bypass vulnerability affecting Surface Pro 3 convertible laptops that could be exploited by an adv…
Incentivizing Developers is the Key to Better Security Practices
Professional developers want to embrace DevSecOps and write secure code, but their organizations need to support this seachange if they want that effort to gro…
Mageia 2021-0458: sqlite security upda
The updated sqlite packages fix a security vulnerability: Use after free in sqlite in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potenti…
Mageia 2021-0455: icu security upda
Double free in ICU in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-3…
Urgent Chrome Update Released to Patch Actively Exploited Zero-Day Vulnerability
Google on Friday rolled out an emergency security patch to its Chrome web browser to address a security flaw that's known to have an exploit in the wild.Tracke…
VMware Warns of Critical File Upload Vulnerability Affecting vCenter Server
VMware on Tuesday published a new bulletin warning of as many as 19 vulnerabilities in vCenter Server and Cloud Foundation appliances that a remote attacker co…
Microsoft Releases Patch for Actively Exploited Windows Zero-Day Vulnerability
A day afterÂAppleÂandÂGoogleÂrolled out urgent security updates, Microsoft hasÂpushed software fixesÂas part of its monthly Patch Tuesday release cycle to plug…
HolesWarm Malware Exploits Unpatched Windows, Linux Servers
The HolesWarm botnet cryptominer has already compromised 1,000-plus clouds since June.
New Bug Could Let Attackers Hijack Zimbra Server by Sending Malicious Email
Cybersecurity researchers have discovered multiple security vulnerabilities in Zimbra email collaboration software that could be potentially exploited to compr…
Latest patches show Rust for Linux project making great strides towards the kern
The Rust for Linux project, sponsored by Google, has advanced with use of a beta Rust compiler (as opposed to a nightly build), testing ARM and RISC-V architec…
Major Linux RPM problem uncover
Red Hat has used RPM for software package distribution for decades, but thanks to CloudLinux developer Dmitry Antipov we now know that RPM contained a nasty hi…