Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
SUSE: 2024:2533-1 important: xen Security Advisory Updates
* bsc#1222453 * bsc#1227355 Cross-References: * CVE-2024-2201
SUSE: 2024:2534-1 important: xen Security Advisory Updates
* bsc#1027519 * bsc#1222453 * bsc#1227355 Cross-References:
SUSE: 2024:2535-1 important: xen Security Advisory Updates
* bsc#1214083 * bsc#1221332 * bsc#1221334 * bsc#1221984 * bsc#1222302
SUSE: 2024:1540-1 moderate: xen Security Advisory Updates
* bsc#1221984 * bsc#1222302 * bsc#1222453 Cross-References:
SUSE: 2024:1541-1 moderate: xen Security Advisory Updates
* bsc#1027519 * bsc#1221984 * bsc#1222302 * bsc#1222453
SUSE: 2024:1295-1 moderate: xenSecurity Advisory Updates
* bsc#1027519 * bsc#1221984 * bsc#1222302 * bsc#1222453
SUSE: 2024:1259-1 moderate: xenSecurity Advisory Updates
* bsc#1027519 * bsc#1221984 * bsc#1222302 * bsc#1222453
Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks
Attackers are exploiting a zero-day SQL injection flaw in Arista's VeloCloud Orchestrator (VCO), the central management system for VeloCloud SD-WAN networks, t…
CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista…
How to Automate CVE and Vulnerability Advisory Response with Tines
Run by the team at workflow orchestration and AI platform Tines, the Tines library features pre-built workflows shared by security practitioners from across th…
Debian LTS: DLA-3963-1: ansible Security Advisory Updates
Ansible is a command-line IT automation software application. It can configure systems, deploy software, and orchestrate advanced workflows to support applicat…
Okta Warns of Credential Stuffing Attacks Targeting Customer Identity Cloud
Okta is warning that a cross-origin authentication feature in Customer Identity Cloud (CIC) is susceptible to credential stuffing attacks orchestrated by threa…
Kremlin-Backed APT28 Targets Polish Institutions in Large-Scale Malware Campaign
Polish government institutions have been targeted as part of a large-scale malware campaign orchestrated by a Russia-linked nation-state actor called APT28."Th…
Cybersecurity Agencies Warn Against IDOR Bugs Exploited for Data Breaches
Cybersecurity agencies in Australia and the U.S. havepublisheda joint cybersecurity advisory warning against security flaws in web applications that could be e…
Cisco Releases Security Patches for Critical Flaws Affecting its Products
Cisco has addressed a maximum severity vulnerability in its Application Centric Infrastructure (ACI) Multi-Site Orchestrator (MSO) that could allow an unauthen…