Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fortra Sheds Light on GoAnywhere MFT Zero-Day Exploit Used in Ransomware Attacks
Fortra, the company behind Cobalt Strike, shed light on a zero-day remote code execution (RCE) vulnerability in its GoAnywhere MFT tool that has come underacti…
RedHat: RHSA-2023-1823:01 Moderate: openvswitch2.13 security update
An update for openvswitch2.13 is now available for Fast Datapath for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a sec…
Mageia 2023-0146: firefox security update
Updated firefox and libwebp packages fix security vulnerabilities: Unexpected data returned from the Safe Browsing API could have led to memory corruption and …
Mageia 2023-0144: libheif security update
Vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this through a crafted image file to caus…
RedHat: RHSA-2023-1770:01 Moderate: openvswitch3.1 security update
An update for openvswitch3.1 is now available in Fast Datapath for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a secur…
RedHat: RHSA-2023-1766:01 Moderate: openvswitch3.1 security update
An update for openvswitch3.1 is now available in Fast Datapath for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a secur…
RedHat: RHSA-2023-1765:01 Moderate: openvswitch2.17 security update
An update for openvswitch2.17 is now available in Fast Datapath for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a secu…
RedHat: RHSA-2023-1769:01 Moderate: openvswitch2.17 security update
An update for openvswitch2.17 is now available in Fast Datapath for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a secu…
Mageia 2023-0135: ipmitool security update
It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffe…
Mageia 2023-0134: ghostscript security update
In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp…
Over 1 Million WordPress Sites Infected by Balada Injector Malware Campaign
Over one million WordPress websites are estimated to have been infected by an ongoing campaign to deploy malware calledBalada Injectorsince 2017.The massive ca…
Study Reveals WiFi Protocol Vulnerability Exposing Network Traffic
Researchers have discovered a major security vulnerability in the WiFi protocol that risks data exposure…Study Reveals WiFi Protocol Vulnerability Exposing Net…
ChatGPT Vulnerability Exposed Users’ Convos And Payment Details
A severe security vulnerability in OpenAI’s ChatGPT exposed users’ conversations, payment details, and other data.…ChatGPT Vulnerability Exposed Users’ Convos …
Debian LTS: DLA-3369-1: runc security update
Multiple vulnerabilities were discovered in runc, the Open Container Project runtime, which is often used with virtualization environments such as Docker. Mali…
Verifying Linux Server Security: What Every Admin Needs to Know
Linux is a widespread OS known for its robust security . That being said, vulnerabilities are inevitable in any OS, and Linux system administrators must be vig…
Debian LTS: DLA-3368-1: libreoffice security update
Multiple vulnerabilities were found in LibreOffice an office productivity software suite, leading to arbitrary script execution, improper certificate validatio…
Mageia 2023-0102: libtpms security update
An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDe…
Debian LTS: DLA-3361-1: redis security update
It was discovered that there was a potential remote denial of service vulnerability in redis, a popular key-value database. Authenticated users could have used…
Fortinet FortiOS Flaw Exploited in Targeted Cyberattacks on Government Entities
Government entities and large organizations have been targeted by an unknown threat actor by exploiting a security flaw in Fortinet FortiOS software to result …
Lazarus Group Exploits Zero-Day Vulnerability to Hack South Korean Financial Entity
The North Korea-linkedLazarus Grouphas been observed weaponizing flaws in an undisclosed software to breach a financial business entity in South Korea twice wi…
New TPM 2.0 Flaws Could Let Hackers Steal Cryptographic Keys
The Trusted Platform Module (TPM) 2.0 specification is affected by two buffer overflow vulnerabilities that could allow attackers to access or overwrite sensit…
Apple iOS Vulnerability Could Expose Users’ Messages And Photos
Apple silently patched a serious security vulnerability affecting iOS users that could expose data. Specifically,…Apple iOS Vulnerability Could Expose Users’ M…
Debian: DSA-5354-1: snort security update
Multiple security vulnerabilities were discovered in snort, a flexible Network Intrusion Detection System, which could allow an unauthenticated, remote attacke…
Debian LTS: DLA-3317-1: snort security update
Multiple security vulnerabilities were discovered in snort, a flexible Network Intrusion Detection System, which could allow an unauthenticated, remote attacke…