Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Microsoft Discloses Exchange Server Flaw Enabling Silent Cloud Access in Hybrid Setups
Microsoft has released an advisory for a high-severity security flaw affecting on-premise versions of Exchange Server that could allow an attacker to gain elev…
N. Korean Hackers Used Job Lures, Cloud Account Access, and Malware to Steal Millions in Crypto
The North Korea-linked threat actor known as UNC4899 has been attributed to attacks targeting two different organizations by approaching their employees via Li…
SUSE: GoogleChrome Critical Vulnerability Fix 2025:03345-2
* bsc#1237231 * bsc#1244670 * bsc#1246664 Cross-References:
Oracle Linux 10: ELSA-2025-10844 Cloud-Init Important Network Access
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
openSUSE Leap 15.6: 2025:02149-1 important: google-osconfig-agent
SUSE 2025:02149-1 important: google-osconfig-agent security threat
* bsc#1239948 * bsc#1244304 * bsc#1244503 Cross-References:
SUSE 12: 2025:02150-1 important: google-osconfig-agent fixes
* bsc#1239948 * bsc#1244304 * bsc#1244503 Cross-References:
PyPI, npm, and AI Tools Exploited in Malware Surge Targeting DevOps and Cloud Environments
Cybersecurity researchers from SafeDep and Veracode detailed a number of malware-laced npm packages that are designed to execute remote code and download addit…
Critical Cisco ISE Auth Bypass Flaw Impacts Cloud Deployments on AWS, Azure, and OCI
Cisco has released security patches to address a critical security flaw impacting the Identity Services Engine (ISE) that, if successfully exploited, could all…
Fedora 41: 2025-567c3cc842 moderate: NextCloud path traversal issue
31.0.5 release RHBZ#2364462 RHBZ#2366729 RHBZ#2366735
Fedora 42 NextCloud 31.0.5: Critical Path Traversal Risk Update
31.0.5 release RHBZ#2364462 RHBZ#2366729 RHBZ#2366735
⚡ Weekly Recap: APT Campaigns, Browser Hijacks, AI Malware, Cloud Breaches and Critical CVEs
Cyber threats don't show up one at a time anymore. They’re layered, planned, and often stay hidden until it’s too late.For cybersecurity teams, the key isn’t j…
Why Is Cloud Linux Right for E-Commerce Stores?
Online stores are an essential part of the modern economy. Their stability, speed, and security directly affect a business's success. However, owners of online…
openSUSE: 2025:0611-1 important: google-osconfig-agent Advisory Security Update
SUSE: 2025:0611-1 important: google-osconfig-agent Security Advisory Updates
* bsc#1236560 Cross-References: * CVE-2024-45339
openSUSE: 2025:14815-1 moderate: google-osconfig-agent-20250115.01-2.1 Advisory Security Update
openSUSE: 2025:14723-1 moderate: google-osconfig-agent-20250115.01-1.1 Advisory Security Update
How to Bring Zero Trust to Wi-Fi Security with a Cloud-based Captive Portal?
Recent data breaches have highlighted the critical need to improve guest Wi-Fi infrastructure security in modern business environments. Organizations face incr…
openSUSE: 2024:14585-1 moderate: cloudflared-2024.12.1-1.1 Advisory Security Update
IcePeony and Transparent Tribe Target Indian Entities with Cloud-Based Tools
High-profile entities in India have become the target of malicious campaigns orchestrated by the Pakistan-based Transparent Tribe threat actor and a previously…
Google Boosts Linux Security with Array Checks
As the cybersecurity landscape continues to evolve, developers and system administrators have faced several challenges in ensuring the safety of systems writte…
The Future of Container Security: Trends and Open Source Tools to Watch
Containers are among the many recent inventions of modern computing. They have emerged as the cornerstone of software development and deployment. They isolate …
FlyingYeti Exploits WinRAR Vulnerability to Deliver COOKBOX Malware in Ukraine
Cloudflare on Thursday said it took steps to disrupt a month-long phishing campaign orchestrated by a Russia-aligned threat actor called FlyingYeti targeting U…
The Fundamentals of Cloud Security Stress Testing
״Defenders think in lists, attackers think in graphs,” said John Lambert from Microsoft, distilling the fundamental difference in mindset between those who def…