Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian LTS: DLA-2281-1: evolution-data-server security upda
Damian Poddebniak and Fabian Ising discovered a response injection vulnerability in Evolution data server, which could enable MITM attacks.
Debian: DSA-4725-1: evolution-data-server security upda
Damian Poddebniak and Fabian Ising discovered a response injection vulnerability in Evolution data server, which could enable MITM attacks.
New CrossTalk Vulnerability Causes Intel CPUs To Leak Data
Once again, researchers have caught a security bug affecting Intel CPUs empowering various devices. Dubbed CrossTalk, the vulnerability causes theNew CrossTalk…
Critical Zoom Vulnerability Leaked Sensitive Data About Zoom Meetings
After a brief hiatus, it seems Zoom has come on the radar of security researchers again. Recently, a critical vulnerabilityCritical Zoom Vulnerability Leaked S…
RedHat: RHSA-2020-2321:01 Important: Red Hat Data Grid 7.3.6 security upda
An update for Red Hat Data Grid is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili…
RedHat: RHSA-2020-2320:01 Important: rh-maven35-jackson-databind securi
An update for rh-maven35-jackson-databind is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a securit…
POWER-SUPPLaY Attack Steals Data From Power Supplies Of Air-Gapped Systems
Once again, a cybersecurity threat has surfaced online for air-gapped systems. This time, it is the POWER-SUPPLaY Attack that exploitsPOWER-SUPPLaY Attack Stea…
Critical SaltStack RCE Bug (CVSS Score 10) Affects Thousands of Data Centers
Two severe security flaws have been discovered in the open-source SaltStack Salt configuration framework that could allow an adversary to execute arbitrary cod…
Debian LTS: DLA-2174-1: php-horde-data security updateDebian LTS: DLA-2174-1: php-horde-
A remote code execution vulnerability was discovered in the Horde Application Framework. An authenticated remote attacker could use this flaw to cause executio…
Zoom iOS App Shares Data With Facebook Even For Non-FB Users
Once again, Zoom has made it to the news. But this time, it isn't about any cyber attack or vulnerability,Zoom iOS App Shares Data With Facebook Even For Non-F…
Debian LTS: DLA-2153-1: jackson-databind security upda
The following CVE(s) were reported against jackson-databind. CVE-2020-10672
LVI Attacks: New Intel CPU Vulnerability Puts Data Centers At Risk
It appears there is no end in sight to the hardware level security vulnerabilities in Intel processors, as well as to the endless 'performance killing' patches…
RedHat: RHSA-2020-0729:01 Important: Red Hat Data Grid 7.3.5 security upda
An update for Red Hat Data Grid is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili…
RedHat: RHSA-2020-0728:01 Moderate: Red Hat Data Grid 7.3.4 security upda
An update for Red Hat Data Grid is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerabilit…
RedHat: RHSA-2020-0727:01 Important: Red Hat Data Grid 7.3.3 security upda
An update for Red Hat Data Grid is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili…
Decathlon Leaked Data Of Spanish Employees Exposing 123 Million Records
The giant sports goods retailer Decathlon now makes it to the news due to a security flaw. Researchers found aDecathlon Leaked Data Of Spanish Employees Exposi…
Fedora 31: php-horde-Horde-Data FEDORA-2020-1e7cc91d
**Horde_Data 2.1.5** * [jan] Fix Remote Code Execution vulnerability (CVE-2020-8518, Reported by: Andrea Cardaci/SSD).
BRIGHTNESS Attack Can Takeover Air-Gapped Systems To Steal Data
Researchers have devised a new strategy to target air-gapped systems. Dubbed BRIGHTNESS, the attack method exploits the screen brightness settingsBRIGHTNESS At…
Debian LTS: DLA-2030-1: jackson-databind security upda
More deserialization flaws were discovered in jackson-databind which could allow an unauthenticated user to perform remote code execution. The issue was resolv…
RedHat: RHSA-2019-4192:01 Important: rh-maven35-jackson-databind securi
An update for rh-maven35-jackson-databind is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a securit…
RedHat: RHSA-2019-4037:01 Important: Red Hat Data Grid 7.3.2 security upda
An update for Red Hat Data Grid is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili…
Qualcomm TEE Bug In Many Android Phones Can Expose Critical Data
Qualcomm CPUs empower most Android phones today. Recently a Qualcomm TEE bug has made these phones vulnerable to cyber attack.Qualcomm TEE Bug In Many Android …
Qualcomm Chip Flaws Let Hackers Steal Private Data From Android Devices
Hundreds of millions of devices, especially Android smartphones and tablets, using Qualcomm chipsets, are vulnerable to a new set of potentially serious vulner…
RedHat: RHSA-2019-3140:01 Important: Red Hat JBoss Data Virtualization
An update is now available for Red Hat JBoss Data Virtualization. Red Hat Product Security has rated this update as having a security impact of Important. A Co…