Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
ChatGPT Vulnerability Exposed Users’ Convos And Payment Details
A severe security vulnerability in OpenAI’s ChatGPT exposed users’ conversations, payment details, and other data.…ChatGPT Vulnerability Exposed Users’ Convos …
Verifying Linux Server Security: What Every Admin Needs to Know
Linux is a widespread OS known for its robust security . That being said, vulnerabilities are inevitable in any OS, and Linux system administrators must be vig…
Debian LTS: DLA-3368-1: libreoffice security update
Multiple vulnerabilities were found in LibreOffice an office productivity software suite, leading to arbitrary script execution, improper certificate validatio…
Mageia 2023-0102: libtpms security update
An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDe…
Debian LTS: DLA-3361-1: redis security update
It was discovered that there was a potential remote denial of service vulnerability in redis, a popular key-value database. Authenticated users could have used…
Fortinet FortiOS Flaw Exploited in Targeted Cyberattacks on Government Entities
Government entities and large organizations have been targeted by an unknown threat actor by exploiting a security flaw in Fortinet FortiOS software to result …
New TPM 2.0 Flaws Could Let Hackers Steal Cryptographic Keys
The Trusted Platform Module (TPM) 2.0 specification is affected by two buffer overflow vulnerabilities that could allow attackers to access or overwrite sensit…
Apple iOS Vulnerability Could Expose Users’ Messages And Photos
Apple silently patched a serious security vulnerability affecting iOS users that could expose data. Specifically,…Apple iOS Vulnerability Could Expose Users’ M…
Debian: DSA-5354-1: snort security update
Multiple security vulnerabilities were discovered in snort, a flexible Network Intrusion Detection System, which could allow an unauthenticated, remote attacke…
Debian LTS: DLA-3317-1: snort security update
Multiple security vulnerabilities were discovered in snort, a flexible Network Intrusion Detection System, which could allow an unauthenticated, remote attacke…
Researcher Discovers Backdoor In Toyota Supplier Management Network
A security researcher discovered a serious security vulnerability that risked Toyota’s suppliers’ and users’ data.…Researcher Discovers Backdoor In Toyota Supp…
RedHat: RHSA-2023-0691:01 Moderate: openvswitch2.17 security,
An update for openvswitch2.17 is now available for Fast Datapath for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a sec…
RedHat: RHSA-2023-0685:01 Moderate: openvswitch2.13 security,
An update for openvswitch2.13 is now available for Fast Datapath for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a sec…
RedHat: RHSA-2023-0688:01 Moderate: openvswitch2.17 security,
An update for openvswitch2.17 is now available for Fast Datapath for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a sec…
RedHat: RHSA-2023-0689:01 Moderate: openvswitch2.16 security,
An update for openvswitch2.16 is now available for Fast Datapath for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a sec…
Mageia 2023-0042: opusfile security update
NULL pointer dereferences in op_get_data() and op_open1() in opusfile.c (CVE-2022-47021) References: - https://bugs.mageia.org/show_bug.cgi?id=31505
Is Your EV Charging Station Safe? New Security Vulnerabilities Uncovered
Two new security weaknesses discovered in several electric vehicle (EV) charging systems could be exploited to remotely shut down charging stations and even ex…
Atlassian's Jira Software Found Vulnerable to Critical Authentication Vulnerability
Atlassian has released fixes to resolve a critical security flaw in Jira Service Management Server and Data Center that could be abused by an attacker to pass …
Atlassian's Jira Service Management Found Vulnerable to Critical Vulnerability
Atlassian has released fixes to resolve a critical security flaw in Jira Service Management Server and Data Center that could be abused by an attacker to pass …
Intel's "DOITM" Security Feature Not Intended For Always-On Use, Linux Patches To Be Revised
Last week I wrote about Linux developers evaluating a new "DOITM" security mitigation for the latest Intel CPUs . While the cost for now of engaging the Data O…
SciLinux: SLSA-2023-0403-1 Important: sssd on SL7.x x86_64
sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters (CVE-2022-4254) For more details about the security issue(s), including the impact…
Patch Where it Hurts: Effective Vulnerability Management in 2023
A recently publishedSecurity Navigatorreport data shows that businesses are still taking 215 days to patch a reported vulnerability. Even for critical vulnerab…
RedHat: RHSA-2023-0076:01 Moderate: Red Hat Ceph Storage 5.3 security
An update for ceph, cephadm-ansible, ceph-iscsi, python-dataclasses, and python-werkzeug is now available for Red Hat Ceph Storage 5.3. Red Hat Product Securit…
Debian: DSA-5313-1: hsqldb security update
It was found that those using java.sql.Statement or java.sql.PreparedStatement in hsqldb, a Java SQL database, to process untrusted input may be vulnerable to …