Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Beyond Vulnerability Management – Can You CVE What I CVE?
The Vulnerability TreadmillThe reactive nature of vulnerability management, combined with delays from policy and process, strains security teams. Capacity is l…
Fedora 41: FEDORA-2025-8fbc37e703 critical: chromium issues
Update to 136.0.7103.59 * CVE-2025-4096: Heap buffer overflow in HTML * CVE-2025-4050: Out of bounds memory access in DevTools * CVE-2025-4051: Insufficient da…
Mageia 9: 2025-0144 critical: fcgi buffer overflow issue
FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to…
Fedora 40: FEDORA-2025-b1804b97fc critical: chromium memory issues
Update to 136.0.7103.59 CVE-2025-4096: Heap buffer overflow in HTML CVE-2025-4050: Out of bounds memory access in DevTools CVE-2025-4051: Insufficient data val…
Fedora 42: FEDORA-2025-eab322e215 critical: chromium memory issues
Update to 136.0.7103.59 * CVE-2025-4096: Heap buffer overflow in HTML * CVE-2025-4050: Out of bounds memory access in DevTools * CVE-2025-4051: Insufficient da…
Ubuntu 25.04: USN-7434-2: Perl Crash and Code Execution
Perl could be made to crash or run programs if it processed specially crafted data.
New Supply Chain Attack: Protect Linux Systems from Typosquatting Threats
In a sneaky new supply-chain attack , threat actors have been discovered exploiting package naming conventions to trick unsuspecting developers into installing…
Cybersecurity in the AI Era: Evolve Faster Than the Threats or Get Left Behind
AI is changing cybersecurity faster than many defenders realize. Attackers are already using AI to automate reconnaissance, generate sophisticated phishing lur…
Effective Disaster Recovery Planning for Secure Linux Environments
What happens when your Linux server goes down? Is your organization prepared to recover quickly and securely, or will critical data and operations be left vuln…
Debian LTS: DLA-4074-1: mariadb-10.5 Security Advisory Updates
A vulnerability was discovered in MariaDB, a SQL database server compatible with MySQL. A privileged attacker could cause a Denial-of-Service (DoS) of the Mari…
Double Trouble: Urgent BeyondTrust & PostgreSQL Vulns Patched
Recent vulnerabilities in BeyondTrust Remote Support ( CVE-2024-12356 ) and PostgreSQL ( CVE-2025-1094 ) are being actively exploited by threat actors and requ…
Double Trouble: Urgent Patches Needed for BeyondTrust and PostgreSQL Vulnerabilities
Recent vulnerabilities in BeyondTrust Remote Support ( CVE-2024-12356 ) and PostgreSQL ( CVE-2025-1094 ) are being actively exploited by threat actors and requ…
Webinar: Learn How to Identify High-Risk Identity Gaps and Slash Security Debt in 2025
In today’s rapidly evolving digital landscape, weak identity security isn’t just a flaw—it’s a major risk that can expose your business to breaches and costly …
Confronting a New RCE Security Flaw in Nvidia Container Toolkit for Linux
Nvidia recently disclosed a critical vulnerability in their Linux Container Toolkit and GPU Operator (CVE-2025-23359) that allows malicious actors to execute c…
⚡ THN Weekly Recap: Google Secrets Stolen, Windows Hack, New Crypto Scams and More
Welcome to this week’s Cybersecurity News Recap. Discover how cyber attackers are using clever tricks like fake codes and sneaky emails to gain access to sensi…
New “whoAMI” Attack Exploits AWS AMI Name Confusion for Remote Code Execution
Cybersecurity researchers have disclosed a new type of name confusion attack called whoAMI that allows anyone who publishes an Amazon Machine Image (AMI) with …
Fedora 41: bind-dyndb-ldap 2025-3551f3ba1b Security Advisory Updates
Update to 9.16.33 (#2342784) Security Fixes: DNS-over-HTTPS flooding fixes. (CVE-2024-12705) Limit additional section processing for large RDATA sets. (CVE-202…
Fedora 41: bind 2025-3551f3ba1b Security Advisory Updates
Update to 9.16.33 (#2342784) Security Fixes: DNS-over-HTTPS flooding fixes. (CVE-2024-12705) Limit additional section processing for large RDATA sets. (CVE-202…
Debian: DSA-5863-1: libtasn1-6 Security Advisory Updates
Bing Shi reported a flaw in Libtasn1, a library to manage ASN.1 structures. Inefficient processing of input DER data containing a large number of SEQUENCE OF o…
⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [10 February]
In cybersecurity, the smallest crack can lead to the biggest breaches. A leaked encryption key, an unpatched software bug, or an abandoned cloud storage bucket…
CISA Warns of Active Exploitation in Trimble Cityworks Vulnerability Leading to IIS RCE
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned that a security flaw impacting Trimble Cityworks GIS-centric asset management softw…
CISA Warns of Active Exploits Targeting Trimble Cityworks Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned that a security flaw impacting Trimble Cityworks GIS-centric asset management softw…
Fedora 40: fastd 2025-29fc4fefd5 Security Advisory Updates
This release contains a number of small improvements and bugfixes, including mitigations for the LOW severity vulnerability CVE-2025-24356. Bugfixes Add mitiga…
Malicious Go Package Exploits Module Mirror Caching for Persistent Remote Access
Cybersecurity researchers have called attention to a software supply chain attack targeting the Go ecosystem that involves a malicious package capable of grant…