The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The decentralized social network Mastodon has disclosed a critical security flaw that enables malicious actors to impersonate and take over any account."Due to…
Multiple vulnerabilities have been discovered in QtGui which can lead to remote code execution.
Update of jupyterlab and notebook including fix for CVE-2024-22420 .
The threat actor behind a peer-to-peer (P2P) botnet known as FritzFrog has made a return with a new variant that leverages the Log4Shell vulnerability to propa…
Google-owned Mandiant said it identified new malware employed by a China-nexus espionage threat actor known as UNC5221 and other threat groups during post-expl…
Security fix for CVE-2023-6246, CVE-2023-6779, and CVE-2023-6780. CVE-2023-6246: __vsyslog_internal did not handle a case where printing a SYSLOG_HEADER contai…
Update to 115.7.0 * https://www.mozilla.org/en- US/security/advisories/mfsa2024-04/ * https://www.thunderbird.net/en- US/thunderbird/115.7.0/releasenotes/
Security fix for CVE-2023-6246, CVE-2023-6779, and CVE-2023-6780. CVE-2023-6246: __vsyslog_internal did not handle a case where printing a SYSLOG_HEADER contai…
Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution.
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, phishing, click…
Multiple vulnerabilities have been found in WebKitGTK+, the worst of which may lead to remote code execution.
Multiple vulnerabilities have been discovered in libaom, the worst of which can lead to remote code execution.
A financially motivated threat actor known as UNC4990 is leveraging weaponized USB devices as an initial infection vector to target organizations in Italy.Goog…
Days after releasing a major update, GitLab rolled out another emergency update addressing a serious…GitLab Patched A Workspace Creation Vulnerability With An …
Updated zlib packages fix a security vulnerability: Directory traversal vulnerability in the do_extract_currentfile function in miniunz.c in miniunzip in miniz…
Tails, an open-source, portable operating system that protects against surveillance and censorship, has released version 5.22 with various updates and security…
Each New Year introduces a new set of challenges and opportunities for strengthening our cybersecurity posture. It's the nature of the field – the speed at whi…
Threat hunters have identified a new campaign that delivers the ZLoader malware, resurfacing nearly two years after the botnet's infrastructure was dismantled …
It was discovered that there was a potential arbitrary code execution vulnerability in pillow, a popular library for manipulating images used by Python applica…
Exim could be made to bypass an SPF protection mechanism if it received a specially crafted request.
Cybersecurity researchers have detected in the wild yet another variant of the Phobos ransomware family known as Faust.Fortinet FortiGuard Labs, which detailed…
The release of SystemRescue 11 is an Arch Linux-based Live Linux toolkit for system recovery and rescue tasks. It has a Linux 6.6 long-term support kernel that…
A heap-based buffer overflow during tile list parsing was discovered in the AV1 video codec parser for the GStreamer media framework, which may result in denia…
Chinese-speaking users have been targeted by malicious Google ads for restricted messaging apps like Telegram as part of an ongoing malvertising campaign."The …