Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 42: python3.6 Critical CVE-2025-8194 Infinite Loop Advisory
Security fix for CVE-2025-8194
FBI Warns FSB-Linked Hackers Exploiting Unpatched Cisco Devices for Cyber Espionage
A Russian state-sponsored cyber espionage group known as Static Tundra has been observed actively exploiting a seven-year-old security flaw in Cisco IOS and Ci…
Ubuntu 22.04 LTS: Request Tracker Multiple Issues Advisory USN-7692-1
Several security issues were fixed in Request Tracker.
Fortinet Warns About FortiSIEM Vulnerability (CVE-2025-25256) With In-the-Wild Exploit Code
Fortinet is alerting customers of a critical security flaw in FortiSIEM for which it said there exists an exploit in the wild.The vulnerability, tracked as CVE…
CERT-UA Warns of HTA-Delivered C# Malware Attacks Using Court Summons Lures
The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of cyber attacks carried out by a threat actor called UAC-0099 targeting government agenci…
Ubuntu 22.04 LTS: Advisory USN-7683-2 Linux Kernel Critical Threats
Several security issues were fixed in the Linux kernel.
Ubuntu 25.04: OpenJDK 8 Critical Denial of Service Advisory USN-7667-1
Several security issues were fixed in OpenJDK 8.
Fedora 42: Thunderbird Important Update 128.13.0 Advisory 2025-fd004806e3
Update to 128.13.0 https://www.thunderbird.net/en-US/thunderbird/128.13.0esr/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2025-62/
Fedora 41: Thunderbird 128.13.0 Critical Update - Advisory 2025-a9d97ce15f
Update to 128.13.0 https://www.thunderbird.net/en-US/thunderbird/128.13.0esr/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2025-62/
Slackware 15.0: Mozilla-Thunderbird Critical Issue Advisory 2025-203-02
New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues.
Malware Injected into 6 npm Packages After Maintainer Tokens Stolen in Phishing Attack
Cybersecurity researchers have alerted to a supply chain attack that has targeted popular npm packages via a phishing campaign designed to steal the project ma…
Malware Injected into 5 npm Packages After Maintainer Tokens Stolen in Phishing Attack
Cybersecurity researchers have alerted to a supply chain attack that has targeted popular npm packages via a phishing campaign designed to steal the project ma…
Malware Injected into 7 npm Packages After Maintainer Tokens Stolen in Phishing Attack
Cybersecurity researchers have alerted to a supply chain attack that has targeted popular npm packages via a phishing campaign designed to steal the project ma…
Fedora 41 Advisory: VIM Critical Path Traversal CVEs 2025-53905, 53906
The newest upstream commit Security fixes for CVE-2025-53906, CVE-2025-53905
Fedora 42: Vim Critical Path Traversal Fix Advisory 2025-9395406660
The newest upstream commit Security fixes for CVE-2025-53906, CVE-2025-53905
Slackware 15.0: libxml2 Critical DoS Buffer Overflow Advisory 2025-196-01
New libxml2 packages are available for Slackware 15.0 and -current to fix security issues.
Fedora 42: FEDORA-2025-c0d9be4e68 important: thunderbird update
Update to 128.12.0 https://www.thunderbird.net/en-US/thunderbird/128.12.0esr/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2025-55/
Fedora 41: 2025-8e4e6cf21e important: thunderbird 128.12.0 release
Update to 128.12.0 https://www.thunderbird.net/en-US/thunderbird/128.12.0esr/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2025-55/
Ubuntu 22.04 LTS: USN-7625-1 Critical Advisory for OnionShare
Several security issues were fixed in OnionShare.
CISA Warns of CVSS 9.3 MICROSENS NMP Web+ Flaws
If you're managing industrial networks, critical manufacturing systems, or infrastructure that demands tight security, you'll want to sit down for this one. MI…
U.S. Agencies Warn of Rising Iranian Cyberattacks on Defense, OT Networks, and Critical Infrastructure
U.S. cybersecurity and intelligence agencies have issued a joint advisory warning of potential cyber attacks from Iranian state-sponsored or affiliated threat …
U.S. Agencies Warn of Rising Iranian Cyber Attacks on Defense, OT Networks, and Critical Infrastructure
U.S. cybersecurity and intelligence agencies have issued a joint advisory warning of potential cyber attacks from Iranian state-sponsored or affiliated threat …
China-linked Salt Typhoon Exploits Critical Cisco Vulnerability to Target Canadian Telecom
The Canadian Centre for Cyber Security and the U.S. Federal Bureau of Investigation (FBI) have issued an advisory warning of cyber attacks mounted by the China…
Fedora 41: thunderbird 2025-883496c803
Update to 128.11.1 https://www.mozilla.org/en-US/security/advisories/mfsa2025-49/