Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
openSUSE: 2021:2817-1 moderate: aws-cli, python-boto3, python-botocore, python-service_i
An update that solves one vulnerability, contains two features and has 6 fixes is now available.
Linus Torvalds rejects 'beyond stupid' AWS-made Linux patch for Intel CPU Snoop atta
After much debate, Linus Torvalds has rejected a controversial patch to address potential leaks of secrets from a CPU's cores.
SUSE: 2020:0251-1 moderate: aws-c
An update that solves one vulnerability and has four fixes is now available.
Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers
Cybersecurity researchers have disclosed details of a mass-scanning campaign that has targeted Vite deployments siphon sensitive data.The first is an automated…
Ubuntu 16.04 Linux Kernel Important Privilege Escalation Issues USN-8530-2
Ubuntu 16.04 LTS received security updates for the linux-aws-hwe kernel to correct several vulnerabilities that could allow local attackers to escalate privile…
Ubuntu 26.04 Kernel Update Privilege Escalation USN-8618-1 CVE-2025-54518
Ubuntu 26.04 LTS has addressed multiple vulnerabilities in the Linux kernel affecting AWS and Raspberry Pi systems, requiring users to update their packages an…
GhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding Agents
Researchers at Wiz found that a flaw in six popular AI coding assistants lets a booby-trapped code project quietly take control of a developer's computer. The …
Linux Foundation Launches Akrites to Strengthen Software Supply Chain Security
The Linux Foundation has officially launched Akrites, a coordinated industry initiative designed to improve how critical open source vulnerabilities are valida…
Interlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026-20131 for Root Access
Amazon Threat Intelligence is warning of an active Interlock ransomware campaign that's exploiting a recently disclosed critical security flaw in Cisco Secure …
Ubuntu: Kernel Critical Updates Network DoS Vulnerabilities 2025:0011-1
Canonical has released a coordinated set of Ubuntu kernel advisories, including USN-7789-2, USN-7792-3, USN-7809-1, USN-7810-1, and USN-7811-1. Each update add…
Hazy Hawk Exploits DNS Records to Hijack CDC, Corporate Domains for Malware Delivery
A threat actor known as Hazy Hawk has been observed hijacking abandoned cloud resources of high-profile organizations, including Amazon S3 buckets and Microsof…
CERT-UA Identifies Malicious RDP Files in Latest Attack on Ukrainian Entities
The Computer Emergency Response Team of Ukraine (CERT-UA) has detailed a new malicious email campaign targeting government agencies, enterprises, and military …
AndroxGh0st Malware Targets Laravel Apps to Steal Cloud Credentials
Cybersecurity researchers have shed light on a tool referred to as AndroxGh0st that's used to target Laravel applications and steal sensitive data."It works by…
HTTP/2 Rapid Reset Zero-Day Vulnerability Exploited to Launch Record DDoS Attacks
Amazon Web Services (AWS), Cloudflare, and Google on Tuesday said they took steps to mitigate record-breaking distributed denial-of-service (DDoS) attacks that…
New Supply Chain Attack Exploits Abandoned S3 Buckets to Distribute Malicious Binaries
In what's a new kind of software supply chain attack aimed at open source projects, it has emerged that threat actors could seize control of expired Amazon S3 …
Ring App Vulnerability Could Expose User’s Phone Data
Amazon recently patched a security vulnerability affecting the privacy of Ring camera users. As reported,…Ring App Vulnerability Could Expose User’s Phone Data…
Eltima SDK Contain Multiple Vulnerabilities Affecting Several Cloud Service Provides
Cybersecurity researchers have disclosed multiple vulnerabilities in a third-party driver software developed by Eltima that have been "unwittingly inherited" b…
Bugs in Managed DNS Services Cloud Let Attackers Spy On DNS Traffic
Cybersecurity researchers have disclosed a new class of vulnerabilities impacting major DNS-as-a-Service (DNSaaS) providers that could allow attackers to exfil…
Undetectable Linux Malware Targeting Docker Servers With Exposed APIs
Cybersecurity researchers today uncovered a completely undetectable Linux malware that exploits undocumented techniques to stay under the radar and targets pub…