Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Hardening Kubernetes Multi-Cluster Environmen
Kubernetes has quickly become a de facto tool within enterprise software development environments, enabling DevOps engineers to scale large numbers of containe…
Researcher Warns: Samsung Phones’ ‘TrustZone’ Is Actually ‘No-Trust Zone’
A team of academic researchers has shared a detailed study about a major security design…Researcher Warns: Samsung Phones’ ‘TrustZone’ Is Actually ‘No-Trust Zo…
CISA, FBI, NSA Issue Advisory on Severe Increase in Ransomware Attacks
Image Source: TechPrivacyCybersecurity authorities from Australia, the U.K., and the U.S. have published a joint advisory warning of an increase in sophisticat…
Qualys Research Team Warns of Significant polkit Vulnerability Affecting All Linux Use
The Qualys Research Team reached out to LinuxSecurity after discovering a memory corruption vulnerability in polkit's pkexec. Pkexec is a SUID-root program tha…
Fedora 35: flatpak-builder 2022-7e328bd6
This is a regression fix update, reverting non-backwards-compatible behaviour changes in the solution previously chosen for [CVE-2022-21682](https://github.co …
Fedora 35: flatpak 2022-7e328bd6
This is a regression fix update, reverting non-backwards-compatible behaviour changes in the solution previously chosen for [CVE-2022-21682](https://github.co …
Microsoft Warns of Continued Attacks Exploiting Apache Log4j Vulnerabilities
Microsoft is warning of continuing attempts by nation-state adversaries and commodity attackers to take advantage ofsecurity vulnerabilitiesuncovered in the Lo…
CISA, FBI and NSA Publish Joint Advisory and Scanner for Log4j Vulnerabilities
Cybersecurity agencies from Australia, Canada, New Zealand, the U.K., and the U.S. on Wednesday released a joint advisory in response to widespread exploitatio…
Threat Advisory: Linux Ransomware Risks and Prevention Insights
Ransomware has dominated cybersecurity news headlines for the past decade, and for good reason. Through a combination of advanced encryption and effective exto…
VMware Warns of Newly Discovered Vulnerabilities in vSphere Web Client
VMware has shipped updates to address two security vulnerabilities in vCenter Server and Cloud Foundation that could be abused by a remote attacker to gain acc…
Fedora 33: rust 2021-443139f6
Rust 1.56.1 adds a mitigation for CVE-2021-42574, the "trojan source" attack that obfuscates code with BiDi control characters. The compiler will now error on …
Fedora 35: rust 2021-7ad3a01f
Rust 1.56.1 adds a mitigation for CVE-2021-42574, the "trojan source" attack that obfuscates code with BiDi control characters. The compiler will now error on …
Fedora 34: rust 2021-0578e239
Rust 1.56.1 adds a mitigation for CVE-2021-42574, the "trojan source" attack that obfuscates code with BiDi control characters. The compiler will now error on …
Google Warns of New Android 0-Day Vulnerability Under Active Targeted Attacks
Google has rolled out its monthly security patches for Android with fixes for 39 flaws, including a zero-day vulnerability that it said is being actively explo…
U.S. Cyber Command Warns of Ongoing Attacks Exploiting Atlassian Confluence Flaw
The U.S. Cyber Command on Friday warned of ongoing mass exploitation attempts in the wild targeting a now-patched critical security vulnerability affecting Atl…
Microsoft Warns of Another Unpatched Windows Print Spooler RCE Vulnerability
A day after releasingÂPatch Tuesday updates, Microsoft acknowledged yet another remote code execution vulnerability in the Windows Print Spooler component, add…
Fedora 33: prosody 2021-1d574ae4
Prosody 0.11.10 release from their stable branch. This release primarily fixes CVE-2021-37601, a remote information disclosure vulnerability. See the previousl…
Fedora 34: prosody 2021-fe9513e0
Prosody 0.11.10 release from their stable branch. This release primarily fixes CVE-2021-37601, a remote information disclosure vulnerability. See the previousl…
NSA, CISA release Kubernetes hardening guidance following Fancy Bear attac
Hardening guidance from the NSA and CISA seeks to educate IT administrators about cloud security risks and best practices for implementing and maintaining Kube…
New High-Severity Vulnerability Reported in Pulse Connect Secure VPN
Ivanti, the company behind Pulse Secure VPN appliances, has published a security advisory for a high severity vulnerability that may allow an authenticated rem…
Fedora 33: python-eventlet 2021-9fde3d7a
Mitigation for CVE-2021-21419 See: https://github.com/eventlet/eventlet/security/advisories/GHSA-9p9m-jm8w-94p2 for more details.
Fedora 34: python-eventlet 2021-d5915c24
Mitigation for CVE-2021-21419 See: https://github.com/eventlet/eventlet/security/advisories/GHSA-9p9m-jm8w-94p2 for more details.
Fedora 33: firefox 2021-beac175a
- New upstream version (88.0.1) - Fixes CVE-2021-29952 (https://www.mozilla.org/en-US/security/advisories/mfsa2021-20/) ---- - Fixed WebRTC indicator (mozbz#17…
Twitter Warns Developers Of A Potential API Key Leak Due To Glitch
Twitter has recently confessed another security glitch in its systems. Specifically, Twitter now warns of a potential API key leakTwitter Warns Developers Of A…