Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Clop Ransomware Gang Likely Aware of MOVEit Transfer Vulnerability Since 2021
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and Federal Bureau of Investigation (FBI) have published a joint advisory regarding the active…
Zyxel Firewalls Under Attack! Urgent Patching Required
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Mondayplacedtwo recently disclosed flaws in Zyxel firewalls to its Known Exploited Vulnerab…
CISA Warns Several Old Linux Vulns Exploited in Attacks
The Cybersecurity & Infrastructure Security Agency (CISA) added seven new Linux vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on Friday …
CISA: Several Old Linux Vulnerabilities Exploited in Attacks
The Cybersecurity & Infrastructure Security Agency (CISA) added seven new Linux vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on Friday …
Fedora 36: git 2023-003e7d2867
update to 2.40.1 (CVE-2023-25652, CVE-2023-25815, CVE-2023-29007) Refer to the release notes for 2.30.9 for details of each CVE as well as the following securi…
Cisco Warns of Vulnerability in Popular Phone Adapter, Urges Migration to Newer Model
Cisco has warned of a critical security flaw in SPA112 2-Port Phone Adapters that it said could be exploited by a remote attacker to execute arbitrary code on …
Critical Vulnerabilities Found In Illumina Universal Copy Service Devices
US CISA warns of critical vulnerabilities affecting the security of Illumina devices. The vulnerabilities exist…Critical Vulnerabilities Found In Illumina Univ…
Fedora 37: git 2023-d84a75ea52
update to 2.40.1 (CVE-2023-25652, CVE-2023-25815, CVE-2023-29007) Refer to the release notes for 2.30.9 for details of each CVE as well as the following securi…
Fedora 38: git 2023-eaf1bdd5ae
update to 2.40.1 (CVE-2023-25652, CVE-2023-25815, CVE-2023-29007) Refer to the release notes for 2.30.9 for details of each CVE as well as the following securi…
Severe Android and Novi Survey Vulnerabilities Under Active Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) hasaddedtwo vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, based on evi…
Fedora 36: thunderbird 2023-0e1ae0d5f6
Update to 102.9.1 ; https://www.mozilla.org/en- US/security/advisories/mfsa2023-12/ ; https://www.thunderbird.net/en- US/thunderbird/102.9.1/releasenotes/ ----…
CISA Issues Warning on Active Exploitation of ZK Java Web Framework Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) hasaddeda high-severity flaw affecting the ZK Framework to its Known Exploited Vulnerabilities…
X.Org Server Hit By New Local Privilege Escalation Vulnerability
The X.Org Server, a commonly used component to the Linux desktop, keeps on giving when it comes to security vulnerabilities with its massive, aging, and ill-ma…
Fedora 36: git 2023-2b3acb6cfd
Update to 2.39.2 (CVE-2023-22490, CVE-2023-23946) Refer to the [upstream release notes](https://github.com/git/git/raw/v2.39.2/Documentation/RelNotes/2.30.8.tx…
Fedora 37: git 2023-5b372318ff
Update to 2.39.2 (CVE-2023-22490, CVE-2023-23946) Refer to the [upstream release notes](https://github.com/git/git/raw/v2.39.2/Documentation/RelNotes/2.30.8.tx…
New ESXiArgs Ransomware Variant Emerges After CISA Releases Decryptor Tool
After the U.S. Cybersecurity and Infrastructure Security Agency (CISA) released a decryptor for affected victims to recover fromESXiArgs ransomware attacks, th…
VMware Releases Patches for Critical vRealize Log Insight Software Vulnerabilities
VMware on Tuesday released software to remediate four security vulnerabilities affectingvRealize Log Insight(aka Aria Operations for Logs) that could expose us…
Fedora 36: git 2023-746c4aacce
Update to 2.39.1 (CVE-2022-41903, CVE-2022-23521) Refer to the [upstream release notes](https://github.com/git/git/raw/v2.39.1/Documentation/RelNotes/2.30.7.tx…
Fedora 36: rust 2023-575fcaf4bf
Security fix for CVE-2022-46176: Cargo did not perform SSH host key verification when cloning indexes and dependencies via SSH. For more details, see the upstr…
Fedora 37: git 2023-9718cc6113
Update to 2.39.1 (CVE-2022-41903, CVE-2022-23521) Refer to the [upstream release notes](https://github.com/git/git/raw/v2.39.1/Documentation/RelNotes/2.30.7.tx…
Exploited Control Web Panel Flaw Added to CISA 'Must-Patch' List
The US government's cybersecurity agency CISA is giving federal agencies an early February deadline to patch a critical -- and already exploited -- security vu…
Fedora 37: rust 2023-19bcafe341
Security fix for CVE-2022-46176: Cargo did not perform SSH host key verification when cloning indexes and dependencies via SSH. For more details, see the upstr…
CISA Alert: Veeam Backup and Replication Vulnerabilities Being Exploited in Attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) hasaddedtwo vulnerabilities impacting Veeam Backup & Replication software to its Known Exploit…
CISA Warns of Multiple Critical Vulnerabilities Affecting Mitsubishi Electric PLCs
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) this week released an Industrial Control Systems (ICS) advisory warning of multiple vulnerabil…