Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 42 trafficserver Key Request Smuggling Crash Resolution Update
Resolves: CVE-2025-58136 - A simple legitimate POST request causes a crash CVE-2025-65114 - Malformed chunked message body allows request smuggling Changes wit…
Debian TrafficServer Severe Denial of Service and HTTP Smuggling DSA-6199-1
Two vulnerabilities were discovered in Apache Traffic Server, a reverse and forward proxy server, which could result in denial of service or HTTP request smugg…
SUSE GraphicsMagick Important Buffer Over-write Issues 2026-0938-1
An update that solves two vulnerabilities can now be installed.
openSUSE GraphicsMagick Serious Buffer Overflow Vulnerabilities 2026-0939-2
An update that solves two vulnerabilities can now be installed.
SUSE: intel-graphics-driver-F12-signed Critical Security Patch 2025:03750-1
* bsc#1234675 * bsc#1235461 * bsc#1235871 Cross-References:
Fedora 41: FEDORA-2025-7c4a6154e5 critical: trafficserver request smuggling
Resolves CVE-2024-53868
Fedora 41: trafficserver 2024-f4dc07db08 Security Advisory Updates
Update to upstream 9.2.6 Backport fix for broken oubound TLS with OpenSSL 3.2+ Resolves CVE-2024-38479, CVE-2024-50305, CVE-2024-50306
Fedora 40: trafficserver 2024-b3c4e8da81 Security Advisory Updates
Update to upstream 9.2.6 Backport fix for broken oubound TLS with OpenSSL 3.2+ Resolves CVE-2024-38479, CVE-2024-50305, CVE-2024-50306
Fedora 39: trafficserver 2024-589ea34c42 Security Advisory Updates
Update to upstream 9.2.6 Backport fix for broken oubound TLS with OpenSSL 3.2+ Resolves CVE-2024-38479, CVE-2024-50305, CVE-2024-50306
Stop LUCR-3 Attacks: Learn Key Identity Security Tactics in This Expert Webinar
Did you know that advanced threat actors can infiltrate the identity systems of major organizations and extract sensitive data within days? It’s a chilling rea…
Understanding Vulnerability Basics: A Comprehensive Guide to Web Application Security
In the current scenario, web applications are gaining momentum, and businesses and corporations are hosting several services. This increased utilization of web…
Debian: DSA-5758-1: trafficserver Security Advisory Updates
Several vulnerabilities were discovered in Apache Traffic Server, a reverse and forward proxy server, which could result in denial of service or request smuggl…
UNC3886 Uses Fortinet, VMware 0-Days and Stealth Tactics in Long-Term Spying
The China-nexus cyber espionage actor linked to the zero-day exploitation of security flaws in Fortinet, Ivanti, and VMware devices has been observed utilizing…
Fedora 39: trafficserver 2024-b1e16b4335Security Advisory Updates
Update to upstream 9.2.4, resolves CVE-2024-31309 (CONTINUATION frames DoS)
Fedora 38: trafficserver 2024-d0acf8d109Security Advisory Updates
Update to upstream 9.2.4, resolves CVE-2024-31309 (CONTINUATION frames DoS)
Cybersecurity Tactics FinServ Institutions Can Bank On in 2024
The landscape of cybersecurity in financial services is undergoing a rapid transformation. Cybercriminals are exploiting advanced technologies and methodologie…
New CherryLoader Malware Mimics CherryTree to Deploy PrivEsc Exploits
A new Go-based malware loader called CherryLoader has been discovered by threat hunters in the wild to deliver additional payloads onto compromised hosts for f…
Debian LTS: DLA-3475-1: trafficserver security update
Several vulnerabilities were discovered in Apache Traffic Server, a reverse and forward proxy server. CVE-2022-47184
Fedora 38: trafficserver 2023-2e6bead58b
Update to upstream 9.2.1; resolves CVE-2022-47184, CVE-2023-30631, CVE-2023-33933
Fedora 37: trafficserver 2023-92686b3e8b
Update to upstream 9.2.1; resolves CVE-2022-47184, CVE-2023-30631, CVE-2023-33933
Debian: DSA-5435-2: trafficserver security update
Several vulnerabilities were discovered in Apache Traffic Server, a reverse and forward proxy server, which could result in information disclosure or denial of…
Introducing AI-guided Remediation for IaC Security / KICS
While the use of Infrastructure as Code (IaC) has gained significant popularity as organizations embrace cloud computing and DevOps practices, the speed and fl…
New COSMICENERGY Malware Exploits ICS Protocol to Sabotage Power Grids
A new strain of malicious software that's engineered to penetrate and disrupt critical systems in industrial environments has been unearthed.Google-owned threa…
CISA Alerts on Critical Security Vulnerabilities in Industrial Control Systems
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released eight Industrial Control Systems (ICS)advisorieson Tuesday, warning of critical f…