Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Azure Service Tags Vulnerability: Microsoft Warns of Potential Abuse by Hackers
Microsoft is warning about the potential abuse of Azure Service Tags by malicious actors to forge requests from a trusted service and get around firewall rules…
Fedora 39: cacti-spine 2024-27a594f71d Security Advisory Updates
Update cacti and cacti-spine to version 1.2.27. This includes the upstream fixes for many CVEs, including a critical remote code execution bug. https://github.…
Fedora 39: cacti 2024-27a594f71d Security Advisory Updates
Update cacti and cacti-spine to version 1.2.27. This includes the upstream fixes for many CVEs, including a critical remote code execution bug. https://github.…
Ubuntu 6800-1: browserify-sign Security Advisory Updates
browserify-sign could allow unintended access if it opened a specially crafted file.
Okta Warns of Credential Stuffing Attacks Targeting Customer Identity Cloud
Okta is warning that a cross-origin authentication feature in Customer Identity Cloud (CIC) is susceptible to credential stuffing attacks orchestrated by threa…
Debian LTS: DLA-3820-1: bluez Security Advisory Updates
An problem has been fixed with the handling of the AVRCP protocol in the bluetooth stack that could lead to remote code execution. For Debian 10 buster, this p…
CISA Warns of Actively Exploited Apache Flink Security Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a security flaw impacting Apache Flink, an open-source, unified stream-proce…
NextGen Healthcare Mirth Connect Under Attack - CISA Issues Urgent Warning
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a security flaw impacting NextGen Healthcare Mirth Connect to its Known Exploi…
Gentoo: GLSA-202405-32: Mozilla Thunderbird: Security Advisory Updates
Multiple vulnerabilities have been discovered in Mozilla Thunderbird, the worst of which could lead to remote code execution.
Gentoo: GLSA-202405-24: ytnef: Security Advisory Updates
Multiple vulnerabilities have been discovered in ytnef, the worst of which could potentially lead to remote code execution.
Gentoo: GLSA-202405-15: Mozilla Firefox: Security Advisory Updates
Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to remote code execution.
Gentoo: GLSA-202405-14: QtWebEngine: Security Advisory Updates
Multiple vulnerabilities have been discovered in QtWebEngine, the worst of which could lead to remote code execution.
Gentoo: GLSA-202405-11: MIT krb5: Security Advisory Updates
Multiple vulnerabilities have been discovered in MIT krb5, the worst of which could lead to remote code execution.
Gentoo: GLSA-202405-09: MediaInfo, MediaInfoLib: Security Advisory Updates
Multiple vulnerabilities have been found in MediaInfo and MediaInfoLib, the worst of which could allow user-assisted remote code execution.
Gentoo: GLSA-202405-08: strongSwan: Security Advisory Updates
Multiple vulnerabilities have been discovered in strongSwan, the worst of which could possibly lead to remote code execution.
Gentoo: GLSA-202405-06: mujs: Security Advisory Updates
Multiple vulnerabilities have been discovered in mujs, the worst of which could lead to remote code execution.
[SECURITY] [3803-1] astropy Security Advisory Updates
It was discovered that there was a potential remote code execution vulnerability in Astropy, a suite of tools, utilities and Python utilities for astrophysics.
Ubuntu 6758-1: JSON5 Security Advisory Updates
JSON5 could allow unintended access to network services or have other unspecified impact.
Debian LTS: DLA-3797-1: frr Security Advisory Updates
Several vulnerabilities have been found in frr, the FRRouting suite of internet protocols. An attacker could craft packages to trigger buffer overflows with th…
Debian LTS: DLA-3795-1: knot-resolver Security Advisory Updates
Several security vulnerabilities have been discovered in knot-resolver, a caching, DNSSEC-validating DNS resolver which may allow remote attackers to bypass DN…
Fedora 40: abseil-cpp 2024-bb70b21754 Security Advisory Updates
Update to 20240116.2: fixes possible out-of-bounds string access as described in https://github.com/abseil/abseil-cpp/pull/1650.
Debian: DSA-5664-1: jetty9 Security Advisory Updates
Jetty 9 is a Java based web server and servlet engine. It was discovered that remote attackers may leave many HTTP/2 connections in ESTABLISHED state (not clos…
CISA Warns: Hackers Actively Attacking Microsoft SharePoint Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw impacting Microsoft Sharepoint Server to its Known Exploited Vulnera…
Mastodon Vulnerability Allows Hackers to Hijack Any Decentralized Account
The decentralized social network Mastodon has disclosed a critical security flaw that enables malicious actors to impersonate and take over any account."Due to…