Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Cuba Ransomware Extorted Over $60 Million in Ransom Fees from More than 100 Entities
The threat actors behind Cuba (aka COLDDRAW) ransomware have received more than $60 million in ransom payments and compromised over 100 entities across the wor…
CISA Warns of Actively Exploited Critical Oracle Fusion Middleware Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Mondayaddeda critical flaw impacting Oracle Fusion Middleware to its Known Exploited Vulner…
Fedora 35: thunderbird 2022-1454bee2fa
Update to 102.3.1 * https://www.mozilla.org/en- US/security/advisories/mfsa2022-43/ * https://www.thunderbird.net/en- US/thunderbird/102.3.1/releasenotes/ ----…
Hacking Linux is Easy with PwnKit
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added PwnKit as a high-severity Linux vulnerability to its list of actively exploited bugs…
Fedora 34: ghc-cmark-gfm 2022-1f981071
Security fix for CVE-2022-24724 - https://github.com/github/cmark- gfm/security/advisories/GHSA-mc3g-88wq-6f4x - fixed upstream in Haskell cmark- gfm-0.2.3 in …
Fedora 34: ghc-hakyll 2022-1f981071
Security fix for CVE-2022-24724 - https://github.com/github/cmark- gfm/security/advisories/GHSA-mc3g-88wq-6f4x - fixed upstream in Haskell cmark- gfm-0.2.3 in …
Fedora 34: gitit 2022-1f981071
Security fix for CVE-2022-24724 - https://github.com/github/cmark- gfm/security/advisories/GHSA-mc3g-88wq-6f4x - fixed upstream in Haskell cmark- gfm-0.2.3 in …
Fedora 34: pandoc-citeproc 2022-1f981071
Security fix for CVE-2022-24724 - https://github.com/github/cmark- gfm/security/advisories/GHSA-mc3g-88wq-6f4x - fixed upstream in Haskell cmark- gfm-0.2.3 in …
Fedora 34: pandoc 2022-1f981071
Security fix for CVE-2022-24724 - https://github.com/github/cmark- gfm/security/advisories/GHSA-mc3g-88wq-6f4x - fixed upstream in Haskell cmark- gfm-0.2.3 in …
Fedora 35: ghc-cmark-gfm 2022-bc43bafc
Security fix for CVE-2022-24724 - 0.2.3 bundles the C cmark-gfm-0.29.0.gfm.3 library which fixes https://github.com/github/cmark- gfm/security/advisories/GHSA-…
CISA Warns of Critical Vulnerabilities Discovered in Airspan Networks Mimosa
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday published an Industrial Controls Systems Advisory (ICSA) warning of multiple vulne…
Fedora 35: rust 2022-1bafa3fc
Security fix for CVE-2022-21658, a TOCTOU race condition in std::fs::remove_dir_all. Privileged programs should be rebuilt if they use this function on paths t…
Fedora 34: rust 2022-2c737894
Security fix for CVE-2022-21658, a TOCTOU race condition in std::fs::remove_dir_all. Privileged programs should be rebuilt if they use this function on paths t…
CISA Warns of Actively Exploited Critical Zoho ManageEngine ServiceDesk Vulnerability
The U.S. Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) are warning of active exploitation of a newly pa…
CISA Issues Warning On Cyber Threats Targeting Water and Wastewater Systems
The U.S. Cybersecurity Infrastructure and Security Agency (CISA) on Thursday warned of continued ransomware attacks aimed at disrupting water and wastewater fa…
Google Warns of a New Way Hackers Can Make Malware Undetectable on Windows
Cybersecurity researchers have disclosed aÂnovel technique adopted by a threat actor to deliberately evade detection with the help of malformed digital signatu…
Fedora 33: salt 2021-93a7c8b7
Update to CVE release 3003.3-1 https://saltproject.io/security_announcements/salt-security- advisory-2021-sep-02/ CVE-2021-21996 CVE-2021-22004 CVE-2021-31607
Fedora 34: salt 2021-00ada7e6
Update to CVE release 3003.3-1 https://saltproject.io/security_announcements/salt-security- advisory-2021-sep-02/ CVE-2021-21996 CVE-2021-22004 CVE-2021-31607
CISA Warns of Actively Exploited Zoho ManageEngine ADSelfService Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday issued a bulletin warning of a zero-day flaw affecting Zoho ManageEngine ADSelfSe…
Microsoft Warns of New Unpatched Windows Print Spooler Vulnerability
Microsoft on Thursday shared fresh guidance on yet another vulnerability affecting the Windows Print Spooler service, stating that it's working to address it i…
Microsoft Warns of Data Stealing Malware That Pretends to Be Ransomware
Microsoft on Thursday warned of a "massive email campaign" that's pushing a Java-based STRRAT malware to steal confidential data from infected systems while di…
Hackers Exploit VPN to Deploy SUPERNOVA malware on SolarWinds Orion
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has disclosed details of a new advanced persistent threat (APT) that's leveraging the Supernov…
ProxyLogon PoC Exploit Released; Likely to Fuel More Disruptive Cyber Attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) on Wednesday issued a joint advisory warning of …
Google Warns of Zero-Click Bluetooth Flaws in Linux-based Devices
Google security researchers are warning of a new set of zero-click vulnerabilities in the Linux Bluetooth software stack that can allow a nearby unauthenticate…