Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Ivanti Warns of Active Exploitation of Newly Patched Cloud Appliance Vulnerability
Ivanti has revealed that a newly patched security flaw in its Cloud Service Appliance (CSA) has come under active exploitation in the wild.The high-severity vu…
Hackers Implant Backdoor via Fake Palo Alto GlobalProtect Lure
Researchers warns enterprise users about a latest malware campaign targeting Middle East-based firms. The campaign…Hackers Implant Backdoor via Fake Palo Alto …
FlightAware Confirmed Data Breach Happened Due To Configuration Error
The popular flight-tracking tool FlightAware has alerted users about a data breach that has been…FlightAware Confirmed Data Breach Happened Due To Configuratio…
CISA Warns Of Active Exploitation Of SolarWinds Web Help Desk Vulnerability
US CISA warns users about possible exploitation of a SolarWinds Web Help Desk vulnerability. Exploiting…CISA Warns Of Active Exploitation Of SolarWinds Web Hel…
AlmaLinux 9 LibreOffice Moderate Script Execution Risk Advisory 2024-3044
libreoffice security update
CISA Adds New Chromium Zero-Day Bug to its Known Exploited Vulnerability Catalog
Google has released fixes for a high-severity Chromium security flaw ( CVE-2024-5274 ) impacting its widely used Chrome browser and other Chromium-based browse…
French Diplomatic Entities Targeted in Russian-Linked Cyber Attacks
State-sponsored actors with ties to Russia have been linked to targeted cyber attacks aimed at French diplomatic entities, the country's information security a…
JetBrains GitHub Plugin Vulnerability Affects IntelliJ IDEs
JetBrains has alerted users to a critical vulnerability in its GitHub plugin for IntelliJ platforms,…JetBrains GitHub Plugin Vulnerability Affects IntelliJ IDE…
Arm Warns of Actively Exploited Zero-Day Vulnerability in Mali GPU Drivers
Arm is warning of a security vulnerability impacting Mali GPU Kernel Driver that it said has been actively exploited in the wild.Tracked as CVE-2024-4610, the …
AlmaLinux 9 c-ares Low Out of Bounds Read Warning Advisory ALSA-2024-3842
c-ares security update
Azure Service Tags Vulnerability: Microsoft Warns of Potential Abuse by Hackers
Microsoft is warning about the potential abuse of Azure Service Tags by malicious actors to forge requests from a trusted service and get around firewall rules…
CISA Adds A Linux Vulnerability To Its Known Exploits Catalog
CISA warned users of a severe vulnerability in Linux under active attack. While the vulnerability…CISA Adds A Linux Vulnerability To Its Known Exploits Catalog…
Microsoft Warns of Surge in Cyber Attacks Targeting Internet-Exposed OT Devices
Microsoft has emphasized the need for securing internet-exposed operational technology (OT) devices following a spate of cyber attacks targeting such environme…
Kremlin-Backed APT28 Targets Polish Institutions in Large-Scale Malware Campaign
Polish government institutions have been targeted as part of a large-scale malware campaign orchestrated by a Russia-linked nation-state actor called APT28."Th…
Fedora 38: thunderbird 2024-5d080305ab
Update to 115.9.0 https://www.mozilla.org/en-US/security/advisories/mfsa2024-14/ https://www.thunderbird.net/en-US/thunderbird/115.9.0/releasenotes/
Fedora 40: thunderbird 2024-fc2ae12c31
Update to 115.9.0 https://www.mozilla.org/en-US/security/advisories/mfsa2024-14/ https://www.thunderbird.net/en-US/thunderbird/115.9.0/releasenotes/
Fedora 39: thunderbird 2024-9f8235fb21
Update to 115.9.0 https://www.mozilla.org/en-US/security/advisories/mfsa2024-14/ https://www.thunderbird.net/en-US/thunderbird/115.9.0/releasenotes/
Fortinet Warns of Severe SQLi Vulnerability in FortiClientEMS Software
Fortinet has warned of a critical security flaw impacting its FortiClientEMS software that could allow attackers to achieve code execution on affected systems.…
Fedora 40 maven-shared-io High Type Confusion Advisory CVE-2024-1938
The Fedora 40 update for maven-shared-io (version 3.0.0-25) includes a change to system JDK from 17 to 21 and addresses high-severity security issues in Chromi…
Nood RAT Malware Attacks Linux Servers, Threatens Sensitive Data
The Nood RAT malware is a new threat to Linux servers worldwide. Security researchers say Nood RAT is designed to steal sensitive information from targeted ser…
Fedora 38: thunderbird 2024-5361211b10
Update to 115.8.0 https://www.mozilla.org/en-US/security/advisories/mfsa2024-07/ https://www.thunderbird.net/en-US/thunderbird/115.8.0/releasenotes/
Five Eyes Agencies Expose APT29's Evolving Cloud Attack Tactics
Cybersecurity and intelligence agencies from the Five Eyes nations have released a joint advisory detailing the evolving tactics of the Russian state-sponsored…
Fedora 39: thunderbird 2024-81863a1613
Update to 115.8.0 https://www.mozilla.org/en-US/security/advisories/mfsa2024-07/ https://www.thunderbird.net/en-US/thunderbird/115.8.0/releasenotes/
Fedora 38: syncthing 2024-b93312a597
Update to version 1.27.3. Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.27.3 This update also addresses CVE-2023-49295 in quic-go: http…