Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Linux Kernel DoS, Info Disclosure Bugs Fixed
Several important security issues have been found in the Linux kernel, including a slab-out-of-bound read problem (CVE-2023-1380), a heap out-of-bounds read/wr…
N. Korean Lazarus Group Targets Microsoft IIS Servers to Deploy Espionage Malware
The infamous Lazarus Group actor has been targeting vulnerable versions of Microsoft Internet Information Services (IIS) servers as an initial breach route to …
Mageia 2023-0184: libssh security update
Potential NULL dereference during rekeying with algorithm guessing. (CVE-2023-1667) Authorization bypass in pki_verify_data_signature. (CVE-2023-2283 Reference…
How To Secure Against WordPress Vulnerabilities with Predictive Analysis Detection & Automated Remediation
WordPress is one of the most popular content management systems in the world due to the ability it gives non-technical, inexperienced users to create professio…
Git 2.40.1 & Other Updates Address Three High-Impact Security Vulnerabilities
Git 2.40.1 has been released to address three new security vulnerabilities being disclosed, which have been classified as ''high-severity'' by the National Vul…
Debian: DSA-5395-1: nodejs security update
An untrusted search path vulnerability was discovered in Node.js, which could result in unexpected searching or loading ICU data when running with elevated pri…
Git 2.40.1 & Other Updates Address Three New Security Vulnerabilities
Git 2.40.1 has been released to address three new security vulnerabilities being disclosed, which have been classified as ''high-severity'' by the National Vul…
Apache Superset Vulnerability: Insecure Default Configuration Exposes Servers to RCE Attacks
The maintainers of theApache Supersetopen source data visualization software have released fixes to plug an insecure default configuration that could lead to r…
Mageia 2023-0151: openimageio security update
A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-branch-9aeece7a and v2.3.19.0. More specifically, in the way run-…
Debian LTS: DLA-3396-1: redis security update
It was discovered that there was a potential remote denial of service vulnerability in Redis, a popular 'NoSQL' key-value database. Authenticated users could h…
Ubuntu 6036-1: PatchELF vulnerability
patchelf could be made to crash or read sensitive data if it opened a specially crafted file.
Fortra Sheds Light on GoAnywhere MFT Zero-Day Exploit Used in Ransomware Attacks
Fortra, the company behind Cobalt Strike, shed light on a zero-day remote code execution (RCE) vulnerability in its GoAnywhere MFT tool that has come underacti…
RedHat: RHSA-2023-1823:01 Moderate: openvswitch2.13 security update
An update for openvswitch2.13 is now available for Fast Datapath for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a sec…
Mageia 2023-0146: firefox security update
Updated firefox and libwebp packages fix security vulnerabilities: Unexpected data returned from the Safe Browsing API could have led to memory corruption and …
Mageia 2023-0144: libheif security update
Vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this through a crafted image file to caus…
RedHat: RHSA-2023-1770:01 Moderate: openvswitch3.1 security update
An update for openvswitch3.1 is now available in Fast Datapath for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a secur…
RedHat: RHSA-2023-1766:01 Moderate: openvswitch3.1 security update
An update for openvswitch3.1 is now available in Fast Datapath for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a secur…
RedHat: RHSA-2023-1765:01 Moderate: openvswitch2.17 security update
An update for openvswitch2.17 is now available in Fast Datapath for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a secu…
RedHat: RHSA-2023-1769:01 Moderate: openvswitch2.17 security update
An update for openvswitch2.17 is now available in Fast Datapath for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a secu…
Mageia 2023-0135: ipmitool security update
It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffe…
Mageia 2023-0134: ghostscript security update
In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp…
Over 1 Million WordPress Sites Infected by Balada Injector Malware Campaign
Over one million WordPress websites are estimated to have been infected by an ongoing campaign to deploy malware calledBalada Injectorsince 2017.The massive ca…
Study Reveals WiFi Protocol Vulnerability Exposing Network Traffic
Researchers have discovered a major security vulnerability in the WiFi protocol that risks data exposure…Study Reveals WiFi Protocol Vulnerability Exposing Net…
ChatGPT Vulnerability Exposed Users’ Convos And Payment Details
A severe security vulnerability in OpenAI’s ChatGPT exposed users’ conversations, payment details, and other data.…ChatGPT Vulnerability Exposed Users’ Convos …