Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Ubuntu 22.04 LTS: Important Redis Remote Code Execution Advisory USN-7824-3
Redis could be made to crash or run programs if it received specially crafted network traffic from an authenticated user.
SUSE: Redis7 Critical Remote Code Exec & DoS Advisory CVE-2025-46817
* bsc#1250995 Cross-References: * CVE-2025-46817 * CVE-2025-46818
openSUSE: cairo Low NULL Pointer Access Issue 2025:03280-1
SUSE: MariaDB Moderate Data Access Threats Advisory 2025:03275-1
* bsc#1239150 * bsc#1239151 * bsc#1249212 * bsc#1249213 * bsc#1249219
openSUSE Leap 15.6: redis Important Remote Code Execution DoS 2025:03073-1
Microsoft Discloses Exchange Server Flaw Enabling Silent Cloud Access in Hybrid Setups
Microsoft has released an advisory for a high-severity security flaw affecting on-premise versions of Exchange Server that could allow an attacker to gain elev…
openSUSE: 2025:15307-1 moderate: velociraptor access control
openSUSE: 2025:01788-1 critical: java-1_8_0-ibm unauthorized access
openSUSE: 2025:1429-1 important: java-21-openjdk unauthorized access
openSUSE 15.3/15.6 critical: erlang26 remote code exec & memory issues
openSUSE 15.6 critical: erlang remote code execution CVE-2025-32433
CISA Adds Critical Flaw in BeyondTrust Software to Exploited Vulnerabilities List
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical security flaw impacting BeyondTrust Privileged Remote Access (PRA…
Mageia 2024-0385: krb5 Security Advisory Updates
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access…
Mageia 2024-0378: wget Security Advisory Updates
Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attac…
Gentoo: GLSA-202406-03: RDoc: Remote Code CxecutionSecurity Advisory Updates
A vulnerability has been discovered in RDoc, which can lead to execution of arbitrary code.
Gentoo: GLSA-202405-21: Commons-BeanUtils: Improper Access RestrictionSecurity Advisory Updates
A vulnerability has been discovered in Commons-BeanUtils, which could lead to execution of arbitrary code.
IBM == Insecure Business Machines: No-auth remote root exec exploit in Data Risk Manager drops after Big Blue snubs bug repo
IBM has admitted to making 'a process error, improper response' to a bug report that identified four vulnerabilities in its enterprise security software, and t…
Ivanti warns of Connect Secure zero-day exploited in attacks
Ivanti urged customers on Tuesday to immediately patch an actively exploited zero-day vulnerability in the Ivanti Connect Secure (ICS) remote access gateway.…
Citrix warns admins to patch new NetScaler RCE flaw immediately
Citrix has warned IT administrators to patch systems immediately against a new critical vulnerability affecting NetScaler ADC networking appliances and NetScal…
Debian WebKitGTK Important Heap Corruption Privilege Escalation DSA-6534-1
Several vulnerabilities have been discovered in the WebKitGTK web engine, that may lead to heap corruption, local privilege escalation, remote code execution, …
FIRESTARTER Backdoor Hit Federal Cisco Firepower Device, Survives Security Patches
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has revealed that an unnamed federal civilian agency's Cisco Firepower device running Adaptive…
Microsoft Warns of WhatsApp-Delivered VBS Malware Hijacking Windows via UAC Bypass
Microsoft is calling attention to a new campaign that has leveraged WhatsApp messages to distribute malicious Visual Basic Script (VBS) files.The activity, beg…
ThreatsDay Bulletin: Codespaces RCE, AsyncRAT C2, BYOVD Abuse, AI Cloud Intrusions & 15+ Stories
This week didn’t produce one big headline. It produced many small signals — the kind that quietly shape what attacks will look like next.Researchers tracked in…
Oracle Linux: Advisory CVE-2025-61882 Critical RCE Threat from Cl0p
Oracle has confirmed a critical remote code execution flaw in E-Business Suite, tracked as CVE-2025-61882. The bug resides in the Concurrent Processing and BI …