Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Zyxel CPE Devices Face Active Exploitation Due to Unpatched CVE-2024-40891 Vulnerability
Cybersecurity researchers are warning that a critical zero-day vulnerability impacting Zyxel CPE Series devices is seeing active exploitation attempts in the w…
Urgent Chrome 132 Update Released to Fix 13 Security Flaws
Google's widely used Chrome web browser is back in the security spotlight, as yet another 13 critical security flaws need to be urgently addressed. Google quic…
Google Cloud Researchers Uncover Flaws in Rsync File Synchronization Tool
As many as six security vulnerabilities have been disclosed in the popular Rsync file-synchronizing tool for Unix systems, some of which could be exploited to …
Google OAuth Vulnerability Exposes Millions via Failed Startup Domains
New research has pulled back the curtain on a "deficiency" in Google's "Sign in with Google" authentication flow that exploits a quirk in domain ownership to g…
Fedora 41: xen 2025-933a9a977e Security Advisory Updates
work around debugedit bug to fix aarch64 builds xen-hypervisor %post doesn't load all needed grub2 modules update to xen-4.19.1 which includes Deadlock in x86 …
Enhancing Linux Desktop Security with KDE Plasma 6.2.5
As a Linux admin, you know that keeping your systems up-to-date is crucial for maintaining performance and security. The recently released KDE Plasma 6.2.5 off…
Critical SQL Injection Vulnerability in Apache Traffic Control Rated 9.9 CVSS — Patch Now
The Apache Software Foundation (ASF) has shipped security updates to address a critical security flaw in Traffic Control that, if successfully exploited, could…
390,000+ WordPress Credentials Stolen via Malicious GitHub Repository Hosting PoC Exploits
A now-removed GitHub repository that advertised a WordPress tool to publish posts to the online content management system (CMS) is estimated to have enabled th…
The Hidden Risk in IBM Db2: Addressing the CVE-2024-37071 DoS Security Flaw
IBM recently disclosed a critical security vulnerability affecting their Db2 database software on Linux and UNIX platforms, identified as CVE-2024-37071 . This…
Debian LTS: DLA-3977-1: xfpt Security Advisory Updates
An issue has been found in xfpt, a tool to generate XML from plain tex. The issue is about bad handling of input data, which may result in a stack-based buffer…
Fedora 40: xen 2024-7c2cfa2fe5 Security Advisory Updates
Deadlock in x86 HVM standard VGA handling [XSA-463, CVE-2024-45818] libxl leaks data to PVH guests via ACPI tables [XSA-464, CVE-2024-45819]
Debian LTS: DLA-3973-1: redis Security Advisory Updates
Multiple vulnerabilities have been fixed in the key¢''value database Redis. CVE-2022-35977
Fedora 39: libsoup3 2024-a059ea1dfc Security Advisory Updates
Add patches to fix: CVE-2024-52530 libsoup3: HTTP request smuggling via stripping null bytes from the ends of header names (bug #2325358) CVE-2024-52532 libsou…
7-Zip Users Beware: Urgent Update Needed to Fix Code Execution Security Flaw
Compression utilities like 7-Zip have become essential tools for managing and storing data efficiently. Renowned for its high compression ratio and versatility…
Debian LTS: DLA-3954-2: postgresql-13 - regression update
The fix for CVE-2024-10978 accidentally caused settings for role to not be applied if they come from non-interactive sources, including previous ALTER {ROLE|DA…
NHIs Are the Future of Cybersecurity: Meet NHIDR
The frequency and sophistication of modern cyberattacks are surging, making it increasingly challenging for organizations to protect sensitive data and critica…
Debian LTS: DLA-3951-1: curl Security Advisory Updates
curl a command line tool for transferring data with URL syntax was affected by CVE-2024-8096. When the TLS backend is GnuTLS, curl may incorrectly handle OCSP …
Comprehensive Guide to Building a Strong Browser Security Program
The rise of SaaS and cloud-based work environments has fundamentally altered the cyber risk landscape. With more than 90% of organizational network traffic flo…
Mageia 2024-0351: python-werkzeug Security Advisory Updates
Werkzeug is a Web Server Gateway Interface web application library. Applications using `werkzeug.formparser.MultiPartParser` corresponding to a version of Werk…
Fedora 40: php-tcpdf 2024-afeeca72ce Security Advisory Updates
Version 6.7.7 (2024-10-26) Update regular expression to avoid ReDoS (CVE-2024-22641) [PHP 8.4] Fix: Curl CURLOPT_BINARYTRANSFER deprecated #675 SVG detection f…
Fedora 41: php-tcpdf 2024-b00678c08a Security Advisory Updates
Version 6.7.7 (2024-10-26) Update regular expression to avoid ReDoS (CVE-2024-22641) [PHP 8.4] Fix: Curl CURLOPT_BINARYTRANSFER deprecated #675 SVG detection f…
Fedora 39: php-tcpdf 2024-0b2854c95b Security Advisory Updates
Version 6.7.7 (2024-10-26) Update regular expression to avoid ReDoS (CVE-2024-22641) [PHP 8.4] Fix: Curl CURLOPT_BINARYTRANSFER deprecated #675 SVG detection f…
FBI Seeks Public Help to Identify Chinese Hackers Behind Global Cyber Intrusions
The U.S. Federal Bureau of Investigation (FBI) has sought assistance from the public in connection with an investigation involving the breach of edge devices a…
Google Warns of Actively Exploited CVE-2024-43093 Vulnerability in Android System
Google has warned that a security flaw impacting its Android operating system has come under active exploitation in the wild.The vulnerability, tracked as CVE-…