Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
ThreatsDay Bulletin: 0-Days, LinkedIn Spies, Crypto Crimes, IoT Flaws and New Malware Waves
This week has been crazy in the world of hacking and online security. From Thailand to London to the US, we've seen arrests, spies at work, and big power moves…
Hackers Actively Exploiting 7-Zip Symbolic Link–Based RCE Vulnerability (CVE-2025-11001)
A recently disclosed security flaw impacting 7-Zip has come under active exploitation in the wild, according to an advisory issued by the U.K. NHS England Digi…
NHS Warns of PoC Exploit for 7-Zip Symbolic Link–Based RCE Vulnerability
Update: The NHS England Digital, in an updated advisory on November 20, 2025, said it has not observed in-the-wild exploitation of CVE-2025-11001, but noted th…
Fortinet Warns of New FortiWeb CVE-2025-58034 Vulnerability Exploited in the Wild
Fortinet has warned of a new security flaw in FortiWeb that it said has been exploited in the wild.The medium-severity vulnerability, tracked as CVE-2025-58034…
Mageia 9: Flatpak Critical Access Issue Advisory MGASA-2025-0303
MGASA-2025-0303 - Updated flatpak & bubblewrap packages fix security vulnerability
Fedora 42 Python-Pdfminer Critical Advisory on Arbitrary Code Execution
Backport security fix for GHSA-wf5f-4jwr-ppcp / CVE-2025-64512
Mageia: yelp Important Remote Code Exec CVE-2025-3155 Advisory 2025-0297
MGASA-2025-0297 - Updated yelp & yelp-xsl packages fix security vulnerability
Mageia: Apache Commons FileUpload Important DoS Advisory MGASA-2025-0296
MGASA-2025-0296 - Updated apache-commons-fileupload packages fix security vulnerability
Cisco Warns of New Firewall Attack Exploiting CVE-2025-20333 and CVE-2025-20362
Cisco on Wednesday disclosed that it became aware of a new attack variant that's designed to target devices running Cisco Secure Firewall Adaptive Security App…
Mageia 9: libavif Important Buffer Overflow Advisory MGASA-2025-0257
MGASA-2025-0257 - Updated libavif packages fix security vulnerabilities
Ubuntu 24.04: linux-hwe-6.14 Critical Data Leakage Advisory USN-7856-1
Several security issues were fixed in the Linux kernel.
Fedora 42: Advisory for Samba CVE-2025-10230 Critical Command Injection
Update to Samba 4.22.6 - Security fix for CVE-2025-9640 and CVE-2025-10230
Ubuntu: Kernel Advisory CVE-2024-0193 Medium Privilege Escalation Impact
The OverlayFS bug in Ubuntu last year slipped through normal testing. Nothing exotic, a permissions issue in the filesystem layer that let local users climb th…
ThreatsDay Bulletin: DNS Poisoning Flaw, Supply-Chain Heist, Rust Malware Trick and New RATs Rising
The comfort zone in cybersecurity is gone. Attackers are scaling down, focusing tighter, and squeezing more value from fewer, high-impact targets. At the same …
Advisory for Fedora 42 on BIND 9.18.41 Spoofing Risks and DNSSEC
Update to 9.18.41 (rhbz#2405786) Security fixes: DNSSEC validation fails if matching but invalid DNSKEY is found. (CVE-2025-8677) Address various spoofing atta…
openSUSE Leap 15.4: ffmpeg-4 Important DoS CVE-2025-59728 Advisory
An update that solves one vulnerability and has one security fix can now be installed.
Ubuntu 25.04: Linux Kernel Critical Data Leak Advisory USN-7833-1
Several security issues were fixed in the Linux kernel.
Linux Kernel Vulnerabilities Exploited in 2025: CISA KEV Insights
It wasn't easy to be on an admin or cybersecurity team in 2025.
Mageia 9: Crucial Local Escalation CVE-2025-41244 Advisory 2025-0237
MGASA-2025-0237 - Updated open-vm-tools package fixes security vulnerability
openSUSE: go1.25-openssl Moderate Insecure Bypass CVE-2025-47910 Advisory
An update that solves one vulnerability, contains one feature and has one security fix can now be installed.
Ubuntu 24.04 LTS: Linux Kernel Critical System Compromise Advisory 7802-1
Several security issues were fixed in the Linux kernel.
Ubuntu 14.04 LTS: libmspack Critical Denial of Service Advisory USN-7788-1
Several security issues were fixed in libmspack.
Cisco Warns of Actively Exploited SNMP Vulnerability Allowing RCE or DoS in IOS Software
Cisco has warned of a high-severity security flaw in IOS Software and IOS XE Software that could allow a remote attacker to execute arbitrary code or trigger a…
CISA Orders Immediate Patch of Critical Sitecore Vulnerability Under Active Exploitation
Federal Civilian Executive Branch (FCEB) agencies are being advised to update their Sitecore instances by September 25, 2025, following the discovery of a secu…