Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Google Releases Chrome Update Mitigating Severe Code Execution Vulns
Google recently issued a crucial Chrome update that those using a version of the browser prior to version 132.0.6834.110 should implement immediately. External…
Don't Delay: Google Releases Chrome Update Addressing Serious Security Vulns
Google recently issued a crucial Chrome update that those using a version of the browser prior to version 132.0.6834.110 should implement immediately. External…
Rsync Under Siege: Essential Steps to Protect Against Recent RCE Vulnerabilities
Are you using rsync to synchronize files on your Ubuntu-based Linux systems? If so, s everal severe remote code execution (RCE) vulnerabilities recently found …
Act Fast: Chrome 131 Released To Fix Critical Code Execution Bug
India's Computer Emergency Response Team (CERT-In) recently issued a high-risk advisory warning about Google Chrome vulnerabilities in versions prior to 131.0.…
Chrome's New AI Feature Shields Users from Online Scams
We Linux security admins are constantly searching for innovative tools and technologies to keep our systems and users secure, so Google Chrome's new AI-powered…
Act Fast: CERT-Ins Chrome Warning & Mitigation Strategies
India's Computer Emergency Response Team (CERT-In) recently issued a high-risk advisory warning about Google Chrome vulnerabilities in versions prior to 131.0.…
Harnessing Proxies for Enhanced Threat Intelligence: A Guide with Open Source Tools
Sensitive corporate data can be stolen at this very second; unfortunately, breaches can be invisible. As cyber threats multiply at an exponential rate, reactin…
Unmasking Cicada3301: Examining the Threat of the New Rust-Based Ransomware
Ransomware has long been a severe threat to organizations and admins alike. Recently, cybersecurity researchers discovered a new variant called Cicada3301 , wh…
How AI and Machine Learning Are Transforming Cybersecurity Quality Assurance
The landscape of cyber threats and Linux vulnerabilities is evolving at an unprecedented pace, making it imperative for organizations to adopt advanced securit…
Closing the Door on CVE-2024-29510: Understanding and Mitigating Ghostscript's Latest RCE Threat
Recently, open-source security was rocked by the discovery of an alarming Remote Code Execution (RCE) vulnerability within the Ghostscript document conversion …
The Future of Container Security: Trends and Open Source Tools to Watch
Containers are among the many recent inventions of modern computing. They have emerged as the cornerstone of software development and deployment. They isolate …
Embracing Anonymity and Privacy: Tails 6.4 Release Insights
As digital privacy and security evolves, anonymity cannot be overemphasized. Tails is a live operating system designed to keep its focus on privacy and anonymi…
Emojis as Weapons: Dissecting DISGOMOJI's Malware Assault on Government Security
DISGOMOJI malware represents an innovative development in cyber espionage tactics, particularly its refined approach to targeting government agencies in India.…
Complete Guide to Ethical Hacking
Ethical hacking, or analyzing a system without permission to try and discover vulnerabilities that hackers can use, is an essential part of maintaining robust …
Critical Security Update for Google Chrome Mitigates Data Loss, Full System Compromise
The release of Google Chrome 124 addresses four vulnerabilities, including a critical security flaw enabling remote attackers to execute arbitrary code, potent…
Virtually All VPNs Are Vulnerable to Novel TunnelVision Attack
A novel attack called TunnelVision has been discovered. It compromises the security of virtually all VPN apps, rendering their purpose useless. The attack mani…
OWASP Discloses Data Breach Attributed to Wiki Misconfiguration
A recent data breach incident disclosed by the OWASP Foundation due to a wiki misconfiguration highlights a critical concern for security practitioners, specif…
New GhostRace Attack Impacts Major CPU, Software Vendors
A new data leakage attack called GhostRace ( CVE-2024-2193 ) was recently discovered. It affects major CPU manufacturers and widely used software. This critica…
Docker, Hadoop, Confluence, Redis at Risk of New Cryptomining Attack
A recent attack campaign targeted publicly accessible Docker , Hadoop , Confluence, and Redis deployments. The attackers exploited misconfigurations and known …
New Migo Malware Targeting Redis Servers for Cryptocurrency Mining
A novel malware campaign has been observed targeting Redis servers for initial access with the ultimate goal of mining cryptocurrency on compromised Linux host…
Mageia 2024-0033: kernel security update
Upstream version 6.6.14 with many bugfixes and at least the following security fixes: An out-of-bounds read vulnerability was found in smb2_dump_detail in fs/s…
Ukrainian Hacker Suspected to be Behind "Free Download Manager" Malware Attack
The maintainers of Free Download Manager (FDM) have acknowledged a security incident dating back to 2020 that led to its website being used to distribute malic…
Mozilla VPN: Security Flaw Opens Door to Multiple Integrity Breaches
A cybersecurity researcher from SUSE, a Linux distribution manufacturer, has made public a serious security flaw in the Mozilla VPN client for Linux.
A Deep Dive into CL0P Ransomware
"Variants of CL0p were initially only found on Windows systems, but the gang also developed a Linux variant toward the end of 2022, reflecting the diversity of…