Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 30: chromium FEDORA-2019-e53c0c7765
Chromium 77.0.3865.90 update. See the official announcement on https://chromereleases.googleblog.com/2019/09/stable-channel-update-for- desktop.html and https:…
Fedora 31: chromium FEDORA-2019-df4fb49ef7
Chromium 77.0.3865.90 update. See the official announcement on https://chromereleases.googleblog.com/2019/09/stable-channel-update-for- desktop.html and https:…
Ransomware recovery CEO charged over secret ransom payments
The owner of ransomware remediation company MonsterCloud has been charged with allegedly defrauding ransomware victims by secretly paying their attackers for d…
Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer
Cybersecurity researchers have disclosed details of a long-running npm supply chain malware campaign that pushes information stealers and remote access trojans…
Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes
Cybersecurity researchers have disclosed details of a "human-operated phishing platform" that impersonates advertising products for artificial intelligence (AI…
ClickFix campaign in Ukraine compromises over 100 websites to spread Lunex malware
CERT-UA found fake Cloudflare verification pages that led visitors into a now-familiar ClickFix trap. This time the goal was to infect machines with an infoste…
The State of Cybersecurity in 2026:Key Segments, Insights, and Innovations
Featuring:Cybersecurity is being reshaped by the expansion of cloud infrastructure, AI, distributed systems, and increasingly complex digital environments. As …
Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials
The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verification checks is part of a wider malware-a…
Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware
A Chinese threat actor codenamed UTA0565 has been observed exploiting the recently disclosed Google Chrome-Microsoft Windows exploit chain as zero-days through…
N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security
N0va is targeting organizations across North America and Europe with phishing campaigns that impersonate trusted services and abuse legitimate authentication f…
KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens
Cybersecurity researchers have shed light on a previously undocumented Brazilian banking malware operation that delivers a toolkit called KREMLIN.Elastic Secur…
Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users
A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly 31,000 users to proxy servers operated by a Russian commercial …
Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users
A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly 31,000 users to proxy servers operated by a Russian commercial …
Gentoo Chromium High Multiple Issues Update Required GLSA-202609-02
Multiple vulnerabilities have been found in Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi.
Linux Kernel Vulnerability News: Linux Security Roundup
Linux kernel vulnerability news dominated the security updates published from August 20 through August 27. Ubuntu, Debian, Fedora, Mageia, Oracle Linux, Rocky …
Linux Security Roundup: Kernel, Redis, and Server Updates to Review This Week
This week’s Linux security updates affect cloud hosts, public servers, and services used across entire networks. Ubuntu, Debian, and Rocky Linux released impor…
Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access
Entra ID researcher Dirk-jan Mollema demonstrated that malware already running in a signed-in Windows session can silently use the victim's Windows Hello for B…
Rocky Linux RXSA-2026-51035 Kernel Moderate Security Update
An update for the kernel in Rocky Linux SIG Cloud 9 includes security fixes for vulnerabilities CVE-2026-23415 and CVE-2026-43450, along with various bug fixes…
Rocky Linux Kernel 5.14.0 Moderate Security Update RXSA-2026-51035
A moderate kernel update for Rocky Linux SIG Cloud 9 addresses security vulnerabilities and bugs, improving performance and fixing issues related to network in…
Rocky Linux Kernel Important Privilege Escalation RXSA-2026-50978
A security update for the Rocky Linux SIG Cloud 8 kernel addresses privilege escalation vulnerabilities, along with several bug fixes and enhancements affectin…
Rocky Linux 8 Kernel Important Fix Privilege Escalation RXSA-2026-50978
A significant kernel update for Rocky Linux SIG Cloud 8 addresses security vulnerabilities, specifically CVE-2025-54518, alongside bug fixes and enhancements, …
Strengthening Linux Cybersecurity in Enterprise Infrastructure
Linux runs cloud platforms, containerized applications, and business-critical servers. It is the engine that powers much of today’s business infrastructure. St…
Rocky Linux Kernel Moderate RXSA-2026-49857 CVE-2026-52923 Security Update
An update for Rocky Linux SIG Cloud 8 addresses a kernel security flaw and includes bug fixes and enhancements, specifically targeting CVE-2026-52923 and KVM a…
Rocky Linux Kernel Low Denial of Service Issue RXSA-2026-49870
An update has been released for the Rocky Linux SIG Cloud 9 kernel, addressing a Denial of Service vulnerability and various bug fixes and enhancements.