Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Behind The Buzzword: Four Ways to Assess Your Zero Trust Security Posture
With just about everything delivered from the cloud these days, employees can now collaborate and access what they need from anywhere and on any device. While …
Chrome Limits Websites' Direct Access to Private Networks for Security Reasons
Google Chrome has announced plans to prohibit public websites from directly accessing endpoints located within private networks as part of an upcoming major se…
Serious Security: Linux full-disk encryption bug fixed ' patch no
Lots of people ''run Linux'' without really knowing or caring '' many home routers, navigational aids, webcams and other IoT devices are based on it; the major…
Debian: DSA-5041-1: cfrpki security upda
Multiple vulnerabilities were discovered in Cloudflare's RPKI validator, which could result in denial of service or path traversal. For the stable distribution…
Oracle: ELSA-2022-9011: Oracle Important Security Upda
The following updated rpms for Oracle Linux Cloud Native Environment 1.1 ha= ve been uploaded to the Unbreakable Linux Network:
Hackers Target Real Estate Websites with Skimmer in Latest Supply Chain Attack
Threat actors leveraged a cloud video hosting service to carry out a supply chain attack on more than100 real estate websitesoperated by Sotheby's Realty that …
Are Medical Devices at Risk of Ransomware Attacks?
In May 2017, the first documented ransomware assault on networked medical equipment happened. The worldwide ransomware assault WannaCry compromised radiologica…
New Android Malware Targeting Brazil's ItaúUnibanco Bank Customers
Researchers have discovered a new Android banking malware that targets Brazil’s Itaú Unibanco with the help of lookalike Google Play Store pages to carry out f…
Over 500,000 Android Users Downloaded a New Joker Malware App from Play Store
A malicious Android app with more than 500,000 downloads from the Google Play app store has been found hosting malware that stealthily exfiltrates users' conta…
Hackers Begin Exploiting Second Log4j Vulnerability as a Third Flaw Emerges
Web infrastructure company Cloudflare on Wednesday revealed that threat actors are actively attempting to exploit asecond bugdisclosed in the widely used Log4j…
Debian: DSA-5020-1: apache-log4j2 security upda
Chen Zhaojun of Alibaba Cloud Security Team discovered a critical security vulnerability in Apache Log4j, a popular Logging Framework for Java. JNDI features u…
Top 5 Security Concerns of SaaS Users
SaaS (Software as a Service) is the name of a cloud-based distribution model that enables…Top 5 Security Concerns of SaaS Users on Latest Hacking News
Mozilla Patched 'BigSig' Vulnerability That Affects The NSS Cryptographic Library
A security researcher from Google Project Zero discovered a critical and easily exploitable “BigSig” vulnerability…Mozilla Patched 'BigSig' Vulnerability That …
New Malvertising Campaigns Spreading Backdoors, Malicious Chrome Extensions
A series of malicious campaigns have been leveraging fake installers of popular apps and games such as Viber, WeChat, NoxPlayer, and Battlefield as a lure to t…
Android Banking Trojans Garnered 300K Downloads By Faking Apps
Android banking trojans have once again flooded the Google Play Store to target users by…Android Banking Trojans Garnered 300K Downloads By Faking Apps on Late…
Multiple Vulnerabilities Spotted In Zoom Video Conferencing App
Researchers from Google Project Zero have discovered numerous vulnerabilities in the Zoom app that could…Multiple Vulnerabilities Spotted In Zoom Video Confere…
Imunify360 Bug Leaves Linux Web Servers Open to Code Execution, Takeov
CloudLinux's security platform for Linux-based websites and web servers contains a high-severity PHP deserialization bug, leaving web servers vulnerable to cod…
VMware Warns of Newly Discovered Vulnerabilities in vSphere Web Client
VMware has shipped updates to address two security vulnerabilities in vCenter Server and Cloud Foundation that could be abused by a remote attacker to gain acc…
MacOS Zero-Day Vulnerability Allowed Keylogging and Screengrabs
Google researchers discovered zero-day affecting macOS devices that could allow recording keystrokes or screen grabs.…MacOS Zero-Day Vulnerability Allowed Keyl…
Hackers Exploit macOS Zero-Day to Hack Hong Kong Users with new Implant
Google researchers on Thursday disclosed that it found a watering hole attack in late August exploiting a now-patched zero-day in macOS operating system and ta…
Microsoft just expanded its malware protection for Linux serve
Microsoft has announced it's adding even more security features to the protection it offers Linux operating systems for the cloud.
Microsoft Warns of New Security Flaw Affecting Surface Pro 3 Devices
Microsoft has published a new advisory warning of a security bypass vulnerability affecting Surface Pro 3 convertible laptops that could be exploited by an adv…
Ubuntu 5092-3: Linux kernel (Azure) regressi
USN-5092-2 introduced a regression in the Linux kernel for Microsoft Azure cloud systems.
Ubuntu 5091-3: Linux kernel (Azure) regressi
USN-5091-1 introduced a regression in the Linux kernel for Microsoft Azure cloud systems.