Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Warning Issued Over Ransomware Attacks Targeting VMware ESXi Servers Globally
Businesses have been urged to patch the two-year-old vulnerability amidst heightened ransomware threats. "The group has accelerated operations in recent months…
GwisinLocker A New Ransomware Encrypts Windows and Linux ESXi Servers
A new ransomware family has been discovered, which targets specifically Linux-based systems using a range of encryption methods. GwisinLocker is the malware re…
CISA Flags SolarWinds, Ivanti, and Workspace One Vulnerabilities as Actively Exploited
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added three security flaws to its Known Exploited Vulnerabilities (KEV) catalog, bas…
RHEL: Critical Privilege Escalation Flaw in open-vm-tools CVE-2025-41244
Red Hat confirmed a privilege escalation flaw in open-vm-tools (CVE-2025-41244), the utility that keeps Linux guests talking to VMware hosts. It handles the sm…
Debian 11: open-vm-tools Security Flaw DLA-4316-1 CVE-2025-41244
An issue was found in open-vm-tools, a set of tools for VMs hosted on VMware. The issue is related to a local privilege escalation in combination with the get-…
Mageia 2025-0166: open-vm-tools
VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local files to…
RVTools Official Site Hacked to Deliver Bumblebee Malware via Trojanized Installer
The official site for RVTools has been hacked to serve a compromised installer for the popular VMware environment reporting utility."Robware.net and RVTools.co…
Debian 12: DSA-5919-1 critical: open-vm-tools file handling issue
It was discovered that insecure file handling in open-vm-tools, an open source implementation of VMware Tools, may allow an unprivileged local guest user to ta…
Debian 11: DLA-4165-1 moderate: open-vm-tools file handling
open-vm-tools is a package that provides Open VMware Tools for virtual machines hosted on VMware. CVE-2025-22247
Securing Virtualized Linux Environments with MITRE ATT&CK v17
The release of MITRE ATT&CK v17 , with the addition of a dedicated matrix for VMware ESXi hypervisors, reflects the growing threat surface in virtualized envir…
Understanding & Protecting Against the Anubis Ransomware Threat
The Anubis ransomware group has emerged as a growing threat, targeting Linux environments, NAS devices, and ESXi systems. What sets Anubis apart is its novel r…
Understanding BlackLock: A New Frontier in Linux RaaS
Since its discovery in March 2024, BlackLock (also known as El Dorado or Eldorado) has quickly established itself as a serious threat within the ransomware-as-…
LockBit 4.0 Warning: Enhancing Linux Defenses Against Evolving Ransomware
LockBit ransomware group recently made headlines when they revealed their upcoming version, LockBit 4.0, signaling an imminent increase in sophisticated cybera…
Mageia 2024-0387: qemu Security Advisory Updates
A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to allocate and initialize a huge numb…
Mitigating Akira Ransomware Risks: Essential Recommendations for Network Security
Cisco Talos' recent discovery of a Rust variant of the Akira ransomware targeting ESXi servers demonstrates how quickly modern cyber threats evolve. Akira rans…
Unmasking Cicada3301: Examining the Threat of the New Rust-Based Ransomware
Ransomware has long been a severe threat to organizations and admins alike. Recently, cybersecurity researchers discovered a new variant called Cicada3301 , wh…
RansomHub Unmasked: Protecting Linux Infrastructure Against High-Stakes Ransomware
RansomHub, a Ransomware-as-a-Service (RaaS) platform, has emerged as a significant threat to organizations around the globe. Targeting Windows, Linux, and ESXi…
Practical Advice for Protecting Against New TargetCompany Linux Ransomware Variant
Security researchers have recently identified an innovative Linux ransomware variant developed by the TargetCompany ransomware group. This variant targets ESXi…
Hackers Created Rogue VMs to Evade Detection in Recent MITRE Cyber Attack
The MITRE Corporation has revealed that the cyber attack targeting the not-for-profit company towards late December 2023 by exploiting zero-day flaws in Ivanti…
Akira Ransomware Gang Targets Linux Servers, Extorts $42 Million
The Akira ransomware group has extorted approximately $42 million from over 250 victims since January 1, 2024. The group initially focused on Windows systems b…
Mageia 2024-0058: open-vm-tools security update
The updated packages fix security vulnerabilities: Authentication bypass vulnerability in the vgauth module. (CVE-2023-20867) SAML token signature bypass. (CVE…
Debian: DSA-5493-1: open-vm-tools security update
Two security issues have been discovered in the Open VMware Tools, which may result in a man-in-the-middle attack or authentication bypass. For the oldstable d…
Debian LTS: DLA-3531-1: open-vm-tools security update
open-vm-tools is a package that provides Open VMware Tools for virtual machines hosted on VMware. It was discovered that Open VM Tools incorrectly handled cert…
SciLinux: SLSA-2023-3944-1 Low: open-vm-tools on SL7.x x86_64
open-vm-tools: authentication bypass vulnerability in the vgauth module (CVE-2023-20867) For more details about the security issue(s), including the impact, a …