Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 42 Python-Pdfminer Critical Advisory on Arbitrary Code Execution
Backport security fix for GHSA-wf5f-4jwr-ppcp / CVE-2025-64512
Mageia: yelp Important Remote Code Exec CVE-2025-3155 Advisory 2025-0297
MGASA-2025-0297 - Updated yelp & yelp-xsl packages fix security vulnerability
Mageia: Apache Commons FileUpload Important DoS Advisory MGASA-2025-0296
MGASA-2025-0296 - Updated apache-commons-fileupload packages fix security vulnerability
Cisco Warns of New Firewall Attack Exploiting CVE-2025-20333 and CVE-2025-20362
Cisco on Wednesday disclosed that it became aware of a new attack variant that's designed to target devices running Cisco Secure Firewall Adaptive Security App…
Mageia 9: libavif Important Buffer Overflow Advisory MGASA-2025-0257
MGASA-2025-0257 - Updated libavif packages fix security vulnerabilities
Ubuntu 24.04: linux-hwe-6.14 Critical Data Leakage Advisory USN-7856-1
Several security issues were fixed in the Linux kernel.
Fedora 42: Advisory for Samba CVE-2025-10230 Critical Command Injection
Update to Samba 4.22.6 - Security fix for CVE-2025-9640 and CVE-2025-10230
Ubuntu: Kernel Advisory CVE-2024-0193 Medium Privilege Escalation Impact
The OverlayFS bug in Ubuntu last year slipped through normal testing. Nothing exotic, a permissions issue in the filesystem layer that let local users climb th…
ThreatsDay Bulletin: DNS Poisoning Flaw, Supply-Chain Heist, Rust Malware Trick and New RATs Rising
The comfort zone in cybersecurity is gone. Attackers are scaling down, focusing tighter, and squeezing more value from fewer, high-impact targets. At the same …
Advisory for Fedora 42 on BIND 9.18.41 Spoofing Risks and DNSSEC
Update to 9.18.41 (rhbz#2405786) Security fixes: DNSSEC validation fails if matching but invalid DNSKEY is found. (CVE-2025-8677) Address various spoofing atta…
openSUSE Leap 15.4: ffmpeg-4 Important DoS CVE-2025-59728 Advisory
An update that solves one vulnerability and has one security fix can now be installed.
Ubuntu 25.04: Linux Kernel Critical Data Leak Advisory USN-7833-1
Several security issues were fixed in the Linux kernel.
Linux Kernel Vulnerabilities Exploited in 2025: CISA KEV Insights
It wasn't easy to be on an admin or cybersecurity team in 2025.
Mageia 9: Crucial Local Escalation CVE-2025-41244 Advisory 2025-0237
MGASA-2025-0237 - Updated open-vm-tools package fixes security vulnerability
openSUSE: go1.25-openssl Moderate Insecure Bypass CVE-2025-47910 Advisory
An update that solves one vulnerability, contains one feature and has one security fix can now be installed.
Ubuntu 24.04 LTS: Linux Kernel Critical System Compromise Advisory 7802-1
Several security issues were fixed in the Linux kernel.
Ubuntu 14.04 LTS: libmspack Critical Denial of Service Advisory USN-7788-1
Several security issues were fixed in libmspack.
Cisco Warns of Actively Exploited SNMP Vulnerability Allowing RCE or DoS in IOS Software
Cisco has warned of a high-severity security flaw in IOS Software and IOS XE Software that could allow a remote attacker to execute arbitrary code or trigger a…
CISA Orders Immediate Patch of Critical Sitecore Vulnerability Under Active Exploitation
Federal Civilian Executive Branch (FCEB) agencies are being advised to update their Sitecore instances by September 25, 2025, following the discovery of a secu…
Fedora 42: python3.6 Critical CVE-2025-8194 Infinite Loop Advisory
Security fix for CVE-2025-8194
FBI Warns FSB-Linked Hackers Exploiting Unpatched Cisco Devices for Cyber Espionage
A Russian state-sponsored cyber espionage group known as Static Tundra has been observed actively exploiting a seven-year-old security flaw in Cisco IOS and Ci…
Ubuntu 22.04 LTS: Request Tracker Multiple Issues Advisory USN-7692-1
Several security issues were fixed in Request Tracker.
Fortinet Warns About FortiSIEM Vulnerability (CVE-2025-25256) With In-the-Wild Exploit Code
Fortinet is alerting customers of a critical security flaw in FortiSIEM for which it said there exists an exploit in the wild.The vulnerability, tracked as CVE…
CERT-UA Warns of HTA-Delivered C# Malware Attacks Using Court Summons Lures
The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of cyber attacks carried out by a threat actor called UAC-0099 targeting government agenci…